paper-conference

Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to …
Nico Brüggemann, Lukas Schmidt, Marvin Dölzer, Marius Brockhoff, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI URL
SoK: A Taxonomy for Cybersecurity Incident Response Influence Factors
Cybersecurity incident response has emerged as a critical area of interest for both researchers and practitioners. The corpus of …
Thomas Biege, Marius Brockhoff, Jonas Kaspereit, Fabian Ising, Lea Gröber, Sebastian Schinzel
Cite DOI URL
Practical Evaluation of the Crypto-Agility Maturity Model
Cryptographic agility is a key prerequisite for maintaining the long-term security of digital communication, particularly in light of …
Leonie Wolf, Samson Umezulike, Gurur Öndarö, Sebastian Schinzel, Fabian Ising
Cite DOI Preprint
BreachHydra: Measuring the Resilience of an Underground Data Breach Forum
Underground forums are thriving markets for illicit goods and services, such as data leaks. While these forums regularly come under the …
Marius Brockhoff, Lukas Schmidt, Fabian Ising, Sebastian Schinzel
Cite DOI
Characterizing Hosting and Security Practices for Public-Facing LDAP Servers
The Lightweight Directory Access Protocol (LDAP) is widely used to make structured data available for standardized lookup, which may …
Gustavo Luvizotto Cesar, Gurur Öndarö, Jonas Kaspereit, Fabian Ising, Sebastian Schinzel, Mattijs Jonker, Ralph Holz
Cite DOI
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale
We report on the first broad analysis of real-world S/MIME certificates for digitally signing and encrypting emails. We collected more …
Gurur Öndarö, Jonas Kaspereit, Samson Umezulike, Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Cite URL
LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
The Lightweight Directory Access Protocol (LDAP) is the standard technology to query information stored in directories. These …
Jonas Kaspereit, Gurur Öndarö, Gustavo Luvizotto Cesar, Simon Ebbers, Fabian Ising, Christoph Saatjohann, Mattijs Jonker, Ralph Holz, Sebastian Schinzel
Cite URL
KIM: Kaos In der Medizin
Die sichere E-Mail-Infrastruktur für Ärztinnen, Apothekerinnen, Krankenversicherungen und Kliniken in Deutschland, KIM - Kommunikation …
Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Cite DOI
Content-Type: Multipart/Oracle - Tapping into Format Oracles in Email End-to-End Encryption
S/MIME and OpenPGP use cryptographic constructions repeatedly shown to be vulnerable to format oracle attacks in protocols like TLS, …
Fabian Ising, Damian Poddebniak, Tobias Kappert, Christoph Saatjohann, Sebastian Schinzel
Cite URL
Grand Theft App: Digital Forensics of Vehicle Assistant Apps
Due to the increasing connectivity of modern vehicles, collected data is no longer only stored in the vehicle itself but also …
Simon Ebbers, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI