Network Security

Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to …
Nico Brüggemann, Lukas Schmidt, Marvin Dölzer, Marius Brockhoff, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI URL
Characterizing Hosting and Security Practices for Public-Facing LDAP Servers
The Lightweight Directory Access Protocol (LDAP) is widely used to make structured data available for standardized lookup, which may …
Gustavo Luvizotto Cesar, Gurur Öndarö, Jonas Kaspereit, Fabian Ising, Sebastian Schinzel, Mattijs Jonker, Ralph Holz
Cite DOI
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale
We report on the first broad analysis of real-world S/MIME certificates for digitally signing and encrypting emails. We collected more …
Gurur Öndarö, Jonas Kaspereit, Samson Umezulike, Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Cite URL
LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
The Lightweight Directory Access Protocol (LDAP) is the standard technology to query information stored in directories. These …
Jonas Kaspereit, Gurur Öndarö, Gustavo Luvizotto Cesar, Simon Ebbers, Fabian Ising, Christoph Saatjohann, Mattijs Jonker, Ralph Holz, Sebastian Schinzel
Cite URL
Dissertation: Exploring Corner Cases of Modern Applied Cryptography
The advent of instantaneous communication via the Internet in the 80s and 90s has revolutionized the way we communicate. Suddenly, we …
Fabian Ising
PDF Cite DOI
Why TLS Is Better without STARTTLS: A Security Analysis of STARTTLS in the Email Context
TLS is one of today’s most widely used and best-analyzed encryption technologies. However, for historical reasons, TLS for email …
Damian Poddebniak, Fabian Ising, Hanno Böck, Sebastian Schinzel
Cite URL
CORSICA: Cross-Origin Web Service Identification
Vulnerabilities in private networks are difficult to detect for attackers outside of the network. While there are known methods for …
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
Cite DOI