paper-conference

Practical Evaluation of the Crypto-Agility Maturity Model
Cryptographic agility is a key prerequisite for maintaining the long-term security of digital communication, particularly in light of …
Leonie Wolf, Samson Umezulike, Gurur Öndarö, Sebastian Schinzel, Fabian Ising
Cite
BreachHydra: Measuring the Resilience of an Underground Data Breach Forum
Underground forums are thriving markets for illicit goods and services, such as data leaks. While these forums regularly come under the …
Marius Brockhoff, Lukas Schmidt, Fabian Ising, Sebastian Schinzel
Cite
Characterizing Hosting and Security Practices for Public-Facing LDAP Servers
The Lightweight Directory Access Protocol (LDAP) is widely used to make structured data available for standardized lookup, which may …
Gustavo Luvizotto Cesar, Gurur Öndarö, Jonas Kaspereit, Fabian Ising, Sebastian Schinzel, Mattijs Jonker, Realph Holz
Cite
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale
We report on the first broad analysis of real-world S/MIME certificates for digitally signing and encrypting emails. We collected more …
Gurur Öndarö, Jonas Kaspereit, Samson Umezulike, Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Cite URL
LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
The Lightweight Directory Access Protocol (LDAP) is the standard technology to query information stored in directories. These …
Jonas Kaspereit, Gurur Öndarö, Gustavo Luvizotto Cesar, Simon Ebbers, Fabian Ising, Christoph Saatjohann, Ralph Holz, Sebastian Schinzel
Cite URL
KIM: Kaos In der Medizin
Die sichere E-Mail-Infrastruktur für Ärztinnen, Apothekerinnen, Krankenversicherungen und Kliniken in Deutschland, KIM - Kommunikation …
Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Content-Type: Multipart/Oracle - Tapping into Format Oracles in Email End-to-End Encryption
S/MIME and OpenPGP use cryptographic constructions repeatedly shown to be vulnerable to format oracle attacks in protocols like TLS, …
Fabian Ising, Damian Poddebniak, Tobias Kappert, Christoph Saatjohann, Sebastian Schinzel
Cite URL
Grand Theft App: Digital Forensics of Vehicle Assistant Apps
Due to the increasing connectivity of modern vehicles, collected data is no longer only stored in the vehicle itself but also …
Simon Ebbers, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI URL
Why TLS Is Better without STARTTLS: A Security Analysis of STARTTLS in the Email Context
TLS is one of today’s most widely used and best-analyzed encryption technologies. However, for historical reasons, TLS for email …
Damian Poddebniak, Fabian Ising, Hanno Böck, Sebastian Schinzel
Cite URL
CORSICA: Cross-Origin Web Service Identification
Vulnerabilities in private networks are difficult to detect for attackers outside of the network. While there are known methods for …
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
Cite DOI URL