- Data and Application Security Group

Website on CPDoS launched

Accompanying to our accepted ACM CCS paper Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack, we launched the website cpdos.org to briefly inform about Cache Poisoned Denial of Service (CPDoS) attacks.

Besides the freely available paper, the website includes videos and upcoming talks on CPDoS attacks.

Papers accepted at NordSec

Two papers were accepted for the 24th Nordic Conference on Secure IT Systems (NordSec 2019). One paper is Rotten Cellar: Security and Privacy of the Browser Cache Revisited by Florian Dehling, Tobias Mengel, and Luigi Lo Iacono. The other paper is Even Turing Should Sometimes Not Be Able To Tell: Mimicking Humanoid Usage Behavior for Exploratory Studies of Online Services by Stephan Wiefling, Nils Gruschka, and Luigi Lo Iacono.

The conference will take place November 18-20 in Aalborg, Denmark.

Paper accepted at ACM CCS 2019

The paper Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack by Hoai Viet Nguyen, Luigi Lo Iacono and Hannes Federrath has been accepted at the 26th ACM Conference on Computer and Communications Security (CCS 2019). The conference will take place from November 11th to 16th in London, UK.

Article published in IEEE Communications Standards Magazine

The article Security Challenges of the 3GPP 5G Service Based Architecture by Hans Christian Rudolph, Andreas Kunz, Luigi Lo Iacono, and Hoai Viet Nguyen has been published in the IEEE Communications Standards Magazine.

Talk at PasswordsCon 2019

Stephan Wiefling will give a talk on Risk-based Authentication applied in the wild at the PasswordsCon 2019. The conference will take place on November 25-27 at the Internetdagarna in Stockholm, Sweden. Stephan’s talk will be on November 25th at 3:30 PM.

Website on Risk-based Authentication launched

Accompanying the accepted IFIP SEC paper, we launched the website rbainfo.org to inform about Risk-based Authentication (RBA) in general. The website presents the RBA state-of-the-art and discloses how eight popular online services use this technology.

Besides the paper and detailed results, the website also provides a video of the Facebook privacy leak which was discovered in the study.

German technology news website GIGA.de gave press coverage on the Facebook privacy leak, including an interview with Stephan Wiefling.

Paper accepted at IFIP SEC 2019

The paper Is This Really You? An Empirical Study on Risk-Based Authentication Applied in the Wild by Stephan Wiefling, Luigi Lo Iacono and Markus Dürmuth was accepted for the 34th IFIP TC-11 International Conference on Information Security and Privacy Protection (IFIP SEC 2019). The conference will take place from June 25th to June 27th in Lisbon, Portugal.

Article published in MDPI Future Internet

The article On the Need for a General REST-Security Framework by Luigi Lo Iacono, Hoai Viet Nguyen and Peter Leo Gorski has been published in the Journal MDPI - Future Internet.

Paper accepted at ACM SAC 2019

The paper “Mind the Cache: Large-Scale Analysis of Web Caching” by Hoai Viet Nguyen, Luigi Lo Iacono and Hannes Federrath has been accepted at the 34rd ACM/SIGAPP Symposium on Applied Computing (SAC). The conference will take place from 8th - 12th April in Limassol, Cyprus.

Project TrUSD started

The research project Transparente und selbstbestimmte Ausgestaltung der Datennutzung im Unternehmen (TrUSD) has recently started. The project aims to develop so-called Privacy Dashboards for use in companies. These dashboards want to build a bridge between the potential of data analysis and the right of employees to privacy. More information can be found on the website of the TrUSD project.