@inproceedings{wustrich2023network,

title = {Network Profiles for Detecting Application-Characteristic Behavior Using Linux eBPF},

author = {Lars W\"{u}strich and Markus Schacherbauer and Markus Budeus and Dominik Freiherr von K\"{u}n\ssberg and Sebastian Gallenm\"{u}ller and Marc-Oliver Pahl and Georg Carle},

year  = {2023},

date = {2023-01-01},

booktitle = {Proceedings of the 1st Workshop on eBPF and Kernel Extensions},

pages = {8\textendash14},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lubben2023distributed,

title = {Distributed device-specific anomaly detection using deep feed-forward neural networks},

author = {Christian L\"{u}bben and Marc-Oliver Pahl},

year  = {2023},

date = {2023-01-01},

booktitle = {NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash9},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pop2023performance,

title = {Performance Comparison of UDP and TCP for Different CoAP Load Profiles},

author = {David Pop and Erkin Kirdan and Marc-Oliver Pahl},

year  = {2023},

date = {2023-01-01},

booktitle = {NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ceur-ws3329barbeau,

title = {Resilience via Blackbox Self-Piloting Plants},

author = {Michel Barbeau and Joaquin Garcia-Alfaro and Christian L\"{u}bben and Marc-Oliver Pahl and Lars W\"{u}strich},

editor = {Gurvan Guernic},

url = {https://ceur-ws.org/Vol-3329/paper-02.pdf},

year  = {2023},

date = {2023-01-01},

booktitle = {Proceedings of the 29th Computer \& Electronics Security Application Rendezvous co-located with the 7th European Cyber Week (ECW 2022), Rennes, France, November 15-16, 2022.},

volume = {3329},

pages = {35--46},

publisher = {CEUR-WS.org},

series = {CEUR Workshop Proceedings},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lavaur:hal-03831515,

title = {Federated Learning as enabler for Collaborative Security between not Fully-Trusting Distributed Parties},

author = {L\'{e}o Lavaur and Benjamin Cost\'{e} and Marc-Oliver Pahl and Yann Busnel and Fabien Autrel},

url = {https://imt-atlantique.hal.science/hal-03831515},

year  = {2022},

date = {2022-11-01},

booktitle = {C\&ESAR 2022 - 29th Computer \& Electronics Security Application Rendezvous},

pages = {1-16},

address = {Rennes, France},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chaitou2022secrypt,

title = {Threats to adversarial training for IDSs and mitigation},

author = {Hassan Chaitou and Thomas Robert and Jean Leneutre and Laurent Pautet},

issn = {2184-7711},

year  = {2022},

date = {2022-07-01},

booktitle = {Proceedings of the 19th International Conference on Security and Cryptography (Secrypt 2022), Lisbon, Portugal},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{meraneh2022secrypt,

title = {Blind Side Channel On The Elephant LFSR},

author = {Awaleh Houssein-Meraneh and Christophe Clavier and H\'{e}l\`{e}ne Le-Bouder and Julien Maillard and Ga\"{e}lle Thomas},

issn = {2184-7711},

year  = {2022},

date = {2022-07-01},

urldate = {2022-07-01},

booktitle = {Proceedings of the 19th International Conference on Security and Cryptography (Secrypt 2022), Lisbon, Portugal},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{segovia2022secrypt,

title = {Switched-based Control Testbed to Assure Cyber-physical Resilience by Design},

author = {Mariana Segovia and Jose Rubio-Hernan and Ana Cavalli and Joaquin Garcia-Alfaro},

issn = {2184-7711},

year  = {2022},

date = {2022-07-01},

booktitle = {Proceedings of the 19th International Conference on Security and Cryptography (Secrypt 2022), Lisbon, Portugal},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{221053,

title = {Autonomous convergence mechanisms for collaborative crowd-sourced data-modeling},

author = {Christian L\"{u}bben and Marc-Oliver Pahl},

url = {http://XXXXX/221053.pdf},

year  = {2022},

date = {2022-04-01},

booktitle = {NOMS 2022 - Full and short papers ()},

abstract = {Interoperability remains a central challenge of the Internet of Things (IoT). Standardized data representation can solve this problem. Data model convergence prevents redundancy and fosters reuse. The growth of the IoT demands a high number of data models. Collaborative approaches allow the creation of numerous data models. The question to investigate is: Can assisted distributed model creation improve model convergence? This paper presents an approach to unify IoT data models during creation. It analyzes existing models to find similarities to a new model candidate. Similar models shall be reused or extended to prevent information redundancy. Challenges are the accuracy of the similarity analysis and scalability. The evaluation shows linear scalability and high accuracy using a data set containing 1200 automatically converted data models from today's most relevant IoT data modeling initiatives: Project Haystack, IoTSchema, and BrickSchema.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{220803,

title = {Optimal Access Control Deployment in Network Function Virtualization},

author = {Manel Smine and David Espes and Marc-Oliver Pahl},

url = {http://XXXXX/220803.pdf},

year  = {2022},

date = {2022-04-01},

booktitle = {NOMS 2022 - Full and short papers ()},

abstract = {Network function virtualization (NFV) yields numerous advantages, specifically the ability to provide a cost-efficient alternative to hardware-based functionalities on software platforms to break the vendor lock-in problem. However, these advantages come at the cost of several security issues. These threats can be leveraged by controlling the information that flows between the different components that compose NFV services. We propose an approach allowing an optimal deployment of access control policies on NFV services. The proposed approach allows to find the best possible trade-offs between the impact in terms of latency resulting from the deployment of the access control policy and the used resources. In contrast to existing approaches, our solution prevents an insider adversary who compromises one or more unknown VNF(s) to go around the access control policy. We experimentally evaluate the return solutions according to the size of the NFV service, the size of the policy to be deployed and the number of physical servers that host the VNF service.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{222206,

title = {Continuous Microservice Re-Placement in the IoT},

author = {Christian L\"{u}bben and Simon Sch\"{a}ffner and Marc-Oliver Pahl},

url = {http://XXXXX/222206.pdf},

year  = {2022},

date = {2022-04-01},

booktitle = {NOMS 2022 Workshops - Manage-IoT 2022 ()},

abstract = {The Internet of Things (IoT) consists of constraint devices. There is a continuous increase in processing power and a recent trend towards microservice architectures. Both make it possible to place IoT microservices on the distributed edge nodes of an IoT site. The identification of a suitable placement of services creates an open challenge. The IoT sets special demands due to its heterogeneous, and often constraint resources. This paper presents a service placement strategy that is adapted to the IoT. It assesses the differences between the IoT and previous service placement problem domains. The results show that the presented service placement strategy outperforms existing ones from other domains. This particularly holds for the optimization of the overall system performance.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{222179,

title = {Resource tradeoffs for TLS-secured MQTT-based IoT Management},

author = {Valentin Dimov and Erkin Kirdan and Marc-Oliver Pahl},

url = {http://XXXXX/222179.pdf},

year  = {2022},

date = {2022-04-01},

booktitle = {NOMS 2022 Workshops - Manage-IoT 2022 ()},

abstract = {Transport Layer Security (TLS) is an established Internet security standard. TLS offers a variety of configuration options that affect resource consumption. For deployments of constrained devices in the Internet of Things (IoT), it is crucial to optimize TLSs resource consumption. This study examines how the TLS cryptographic algorithms, so-called cipher suites, affect an MQTT applications resource consumption. MQTT is a popular protocol for IoT. We construct a model application using the Mosquitto MQTT broker and client library. We measure the consumption of CPU cycles, memory, and network bandwidth with the IANA-recommended TLS 1.2 and TLS 1.3 cipher suites. We test and compare different variants for the key exchange, server authentication, client authentication, and symmetric encryption algorithms, as well as recommended elliptic curves for elliptic curve cryptography (ECC) algorithms. We identify ECDHE key exchange with the x25519 curve and mutual PSK authentication as the best handshake performance. Ed25519 provides the best performance among the certificate authentication options. The effect of choosing a faster symmetric cipher on CPU costs depends on message size. Changing symmetric ciphers does not affect the performance for 100 B messages, but more differences are observed for 10 kB messages. Overall, the findings show that resource consumption can be optimized by choosing the cipher suite and adjusting the length and rate of MQTT messages. Optimized resource consumption enables reliable management of MQTT-based IoT.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{goncalves2022qoe,

title = {QoE Management of HTTP/2 traffic in Software-Defined Wide Area Networks},

author = {Helio Henrique Goncalves Guardabaxo and Gustavo Sousa Pavani and P Varga and LZ Granville and A Galis and I Godor and N Limam and P Chemouil and J Francois and M Pahl and others},

year  = {2022},

date = {2022-01-01},

booktitle = {PROCEEDINGS OF THE IEEE/IFIP NETWORK OPERATIONS AND MANAGEMENT SYMPOSIUM 2022},

pages = {5},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{suleymanov2022securing,

title = {Securing coap with dtls and oscore},

author = {Emil Suleymanov and Erkin Kirdan and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {2022 6th Cyber Security in Networking Conference (CSNet)},

pages = {1\textendash7},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{barbeau2022resilience,

title = {Resilience via Blackbox Self-Piloting Plants},

author = {Michel Barbeau and Joaquin Garcia-alfaro and Christian L\"{u}bben and Marc-Oliver Pahl and W\"{u}strich Lars},

year  = {2022},

date = {2022-01-01},

booktitle = {Computer \& Electronics Security Application Rendezvous, co-located with the 7th European Cyber Week (ECW 2022), CEUR Workshop Proceedings},

volume = {3329},

number = {1},

pages = {35\textendash46},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lavaur2022federated,

title = {Federated Learning as enabler for Collaborative Security between not Fully-Trusting Distributed Parties},

author = {L\'{e}o Lavaur and Benjamin Cost\'{e} and Marc-Oliver Pahl and Yann Busnel and Fabien Autrel},

year  = {2022},

date = {2022-01-01},

booktitle = {C\&ESAR 2022-29th Computer \& Electronics Security Application Rendezvous},

pages = {1\textendash16},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{hmamouche2022key,

title = {Key Attack Strategies Against Black-Box DNNs},

author = {Yassine Hmamouche and Yehya Nasser and Amer Baghdadi and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {GDR-SOC2},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{varga2022proceedings,

title = {Proceedings of the 18th IEEE/IFIP Network Operations and Management Symposium (NOMS 2022)},

author = {Pal Varga and Lisandro Zambenedetti Granville and Alex Galis and Noura Limam and Prosper Chemouil and J\'{e}r\^{o}me Fran\c{c}ois and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lubben2022autonomous,

title = {Autonomous convergence mechanisms for collaborative crowd-sourced data-modeling},

author = {Christian L\"{u}bben and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash5},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2022optimal,

title = {Optimal Access Control Deployment in Network Function Virtualization},

author = {Manel Smine and David Espes and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash9},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lubben2022continuous,

title = {Continuous Microservice Re-Placement in the IoT},

author = {Christian L\"{u}bben and Simon Sch\"{a}ffner and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{dimov2022resource,

title = {Resource tradeoffs for TLS-secured MQTT-based IoT Management},

author = {Valentin Dimov and Erkin Kirdan and Marc-Oliver Pahl},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wustrich2022ac,

title = {AC/DCIM: Acoustic Channels for Data Center Infrastructure Monitoring},

author = {Lars W\"{u}strich and Sebastian Gallenm\"{u}ller and Marc-Oliver Pahl and Georg Carle},

year  = {2022},

date = {2022-01-01},

booktitle = {NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium},

pages = {1\textendash5},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lavaur2021.gtsslr,

title = {Federated Security Approaches for IT and OT},

author = {Leo Lavaur and Marc-Oliver Pahl and Yann Busnel and Fabien Autrel},

year  = {2021},

date = {2021-05-11},

urldate = {2021-05-11},

pages = {2},

abstract = {The Internet of Things has begun to spread over a variety of domains, including industry and finance. It represents an increasing threat for both IT and OT. The lack of collaboration results in the same attacks targeting different organizations one after the other. Often employed as an answer to this problem, cyber threat-intelligence sharing induces its own set of challenges: trust, privacy, and traceability.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{213227,

title = {Cyber-Physical Anomaly Detection for ICS},

author = {Lars Wuestrich and Lukas Schr\"{o}der and Marc-Oliver Pahl},

url = {http://xxxxx/213227.pdf},

year  = {2021},

date = {2021-05-01},

booktitle = {IFIP/IEEE International Symposium on Integrated Network Management co-located with IM},

abstract = {Industrial Control Systems (ICS) are complex systems made up of many components with different tasks. For a safe and secure operation, each device needs to carry out its tasks correctly. To monitor a system and ensure the correct behavior of systems anomaly detection systems are used. Models of expected behavior often rely only on cyber or physical features for anomaly detection. We propose an anomaly detection system that combines both types of features to create a dynamic fingerprint of an ICS. We present how such a system can be designed and which challenges need to be overcome for a successful implementation.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{barbeau2021metrics,

title = {Metrics to enhance the resilience of cyber-physical systems},

author = {Michel Barbeau and Fr\'{e}d\'{e}ric Cuppens and Nora Cuppens and Romain Dagnas and Joaquin Garcia-Alfaro},

url = {https://doi.org/10.1109/TrustCom50675.2020.00156},

doi = {10.1109/TrustCom50675.2020.00156},

year  = {2021},

date = {2021-01-01},

booktitle = {2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)},

pages = {1167--1172},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{9565553,

title = {Detecting and Preventing Faked Mixed Reality},

author = {Fabian Kilger and Alexandre Kabil and Volker Tippmann and Gudrun Klinker and Marc-Oliver Pahl},

doi = {10.1109/MIPR51284.2021.00074},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE 4th International Conference on Multimedia Information Processing and Retrieval (MIPR)},

pages = {399-405},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{smine2021priority,

title = {A priority-based domain type enforcement for exception management},

author = {Manel Smine and David Espes and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1\textendash3, 2020, Revised Selected Papers 13},

pages = {65\textendash81},

organization = {Springer International Publishing},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wustrich2021cyber,

title = {Cyber-physical anomaly detection for ICS},

author = {Lars W\"{u}strich and Lukas Schr\"{o}der and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IFIP/IEEE International Symposium on Integrated Network Management (IM)},

pages = {950\textendash955},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kilger2021detecting,

title = {Detecting and Preventing Faked Mixed Reality},

author = {Fabian Kilger and Alexandre Kabil and Volker Tippmann and Gudrun Klinker and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE 4th International Conference on Multimedia Information Processing and Retrieval (MIPR)},

pages = {399\textendash405},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{delcombel2021cybercopter,

title = {CyberCopter: a 3D helical visualisation for periodic signals of cyber attacks},

author = {Nicolas Delcombel and Alexandre Kabil and Thierry Duval and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {VR4Sec 2021 (Security for XR and XR for Security)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{kabil2021training,

title = {Training and Data Analysis use cases for Cybersecurity through Mixed Reality Applications},

author = {Alexandre Kabil and Thierry Duval and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {VR4Sec 2021 (Security for XR and XR for Security)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{larsen2021authenticating,

title = {Authenticating IDS autoencoders using multipath neural networks},

author = {Rapha\"{e}l MJI Larsen and Marc-Oliver Pahl and Gouenou Coatrieux},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 5th Cyber Security in Networking Conference (CSNet)},

pages = {1\textendash9},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lavaur2021federated,

title = {Federated security approaches for IT and OT},

author = {L\'{e}o Lavaur and Marc-Oliver Pahl and Yann Busnel and Fabien Autrel},

year  = {2021},

date = {2021-01-01},

booktitle = {SSLR 2021-Journ\'{e}e th\'{e}matique du GT sur la S\'{e}curit\'{e} des Syst\`{e}mes, Logiciels et R\'{e}seaux},

pages = {1\textendash2},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lubben2021advances,

title = {Advances in ml-based anomaly detection for the iot},

author = {Christian L\"{u}bben and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 5th Cyber Security in Networking Conference (CSNet)},

pages = {18\textendash22},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{pahl2021priority,

title = {A Priority-Based Domain Type Enforcement for Exception Management},

author = {Manel Smine and David Espes and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Marc-Oliver Pahl},

year  = {2021},

date = {2021-01-01},

booktitle = {Foundations and Practice of Security: 13th International Symposium, FPS 2020, Montreal, QC, Canada, December 1--3, 2020, Revised Selected Papers},

volume = {12637},

pages = {65},

organization = {Springer Nature},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{bender2021open,

title = {Open-source mqtt evaluation},

author = {Melvin Bender and Erkin Kirdan and Marc-Oliver Pahl and Georg Carle},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE 18th Annual Consumer Communications \& Networking Conference (CCNC)},

pages = {1\textendash4},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}