Publications

F. Menges, T. Latzo, M. Vielberth, S. Soboloa, H. C. Pöhls, A. Puchta, H. P. Reiser and G. Pernul, "Towards GDPR-compliant data processing in modern SIEM systems" , Computers & Security , vol. 103 , 04 2021. Elsevier , https://doi.org/10.1016/j.cose.2020.102165 .
http://henrich.poehls.com/papers/2020_Menges-et-al_Computers-and-Security_Journal_GDPR_Compliant_Data_Processing_in_Modern_SIEM_Systems.pdf

J. D. Parra Rodriguez, "Computational Resource Abuse in Web Applications" , 01 2020.
https://opus4.kobv.de/opus4-uni-passau/files/770/diss-parra-rodriguez.pdf

H. C. Pöhls and N. Tiana Lilie Rakotondravony, "Dynamic Consent: Physical switches and feedback to adjust consent to IoT data collection" in Proceedings of the 2nd International Conference on HCI for Cybersecurity, Privacy and Trust (HCI-CPT 2020) held in conjunsction with the 22nd International Conference on Human Computer Interaction (HCII 2020) , Springer , 07 2020.
https://henrich.poehls.com/papers/2020_PoehlsRakotondravony_HCII2020_DynamicConsent-Physical-%20switches-and-feedback-to-adjust-consent.pdf

H. C. Pöhls, K. Samelin and D. Slamanig, "Fully Invisible Protean Signatures Schemes" , IET Information Security , vol. 14 , pp. 266-285 , 05 2020. IET , https://doi.org/10.1049/iet-ifs.2019.0141 .
http://henrich.poehls.com/papers/2019_KrennPoehlsSamleinSlamanig_FullyInvisibleProteanSignatures_IET-IFS-2019-0141.pdf

N. Petroulakis, K. Fysarakis, H. C. Pöhls, V. Kulkarni, G. Spanoudakis, A. Bröring, M. Papoutsakis, M. Michalodimitrakis and S. Ioannidis, "Pattern-driven Security, Privacy, Dependability and Interoperability in IoT" in Security Risk Management for the Internet of Things: Technologies and Techniques for IoT Security, Privacy and Data Protection , now publishers inc. , 2020 , pp. 121-142.
http://henrich.poehls.com/papers/2020_Pattern-driven-Security-Privacy-Dependability-and-Interoperability-in-IoT_978-1-68083-683-7_ch7.pdf

F. Klement, H. C. Pöhls and K. Spielvogel, "Towards Privacy-Preserving Local Monitoring and Evaluation of Network Traffic from IoT Devices and Corresponding Mobile Phone Applications" in Global Internet of Things Summit (GIoTS) , 07 2020.
http://henrich.poehls.com/papers/2020_KlementPoehlsSpielvogel_GIOTS20_Privacy-preserving-local-monitoring-and-evaluation-of-IoT-network-traffic.pdf

J. D. Parra Rodriguez, "A Generic Lightweight and Scalable Access Control Framework for IoT Gateways" in Information Security Theory and Practice , Springer , 2019. pp. 207-222.

R. C. Staudemeyer, H. C. Pöhls and M. Wójcik, "What it takes to boost Internet of Things privacy beyond encryption with unobservable communication: a survey and lessons learned from the first implementation of DC-net" , Journal of Reliable Intelligent Environments (JRIE) , vol. 5 , no. 1 , pp. 41-64 , 04 2019. https://doi.org/10.1007/s40860-019-00075-0 .
http://henrich.poehls.com/papers/2019_StaudemeyerPoehlsWojcik_BoostIOTPrivacy_JRIE.pdf

N. Mäurer and A. Bilzhause, "A Cybersecurity Architecture for the L-band Digital Aeronautical Communications System (LDACS)" in 2018 IEEE/AIAA 37th Digital Avionics Systems Conference (DASC) , 2018. pp. 1-10.
DOI: 10.1109/DASC.2018.8569878

L. Sell, H. C. Pöhls and T. Lorünser, "C3S: Cryptographically Combine Cloud Storage for Cost-Efficient Availability and Confidentiality" in Proceedings of the 10th International Conference on Cloud Computing Technology and Science (CLOUDCOM 2018) , IEEE , 2018.
http://henrich.poehls.com/papers/2018_SellPoehlsLoruenser_CostOfSecretSharedCloudStorage_IEEE-CloudCom.pdf

S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Chameleon-Hashes with Dual Long-Term Trapdoors and Their Applications" in Progress in Cryptology (AFRICACRYPT 2018) , Springer , 2018. pp. 11--32.
DOI: https://doi.org/10.1007/978-3-319-89339-6_2
http://henrich.poehls.com/papers/2018_KrennPoehlsSamelinSlamanig_TrapdoorChamHash_AFRICACRYPT2018_full.pdf

T. Lorünser, H. C. Pöhls, L. Sell and T. Länger, "CryptSDLC: Embedding Cryptographic Engineering into Secure Software Development Lifecycle" in Proceedings of the 13th International Conference on Availability, Reliability and Security (ARES 2018) , New York, NY, USA : ACM , 2018. pp. 4:1--4:9.
DOI: https://doi.org/10.1145/3230833.3233765
http://henrich.poehls.com/papers/2018_LoruenserPoehlsSellLaenger_CrypSDLC_ARES2018_preprint.pdf

J. D. Parra Rodriguez and J. Posegga, "CSP \& Co. Can Save Us from a Rogue Cross-Origin Storage Browser Network! But for How Long?" in Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy , New York, NY, USA : ACM , 2018. pp. 170--172.
DOI: 10.1145/3176258.3176951
http://doi.acm.org/10.1145/3176258.3176951

H. C. Pöhls, "Increasing the Legal Probative Value of Cryptographically Private Malleable Signatures" , University of Passau , 2018.
https://opus4.kobv.de/opus4-uni-passau/files/582/Poehls_Thesis_Final.pdf

J. D. Parra Rodriguez and J. Posegga, "Local Storage on Steroids: Abusing Web Browsers for Hidden Content Storage and Distribution" in Proc. of 14th EAI International Conference on Security and Privacy in Communication Networks (SECURECOMM) , 2018.
https://web.sec.uni-passau.de/papers/preprint-securecomm2018.pdf

N. Mäurer and A. Bilzhause, "Paving the way for an it security architecture for LDACS: A datalink security threat and risk analysis" in 2018 Integrated Communications, Navigation, Surveillance Conference (ICNS) , 2018. pp. 1A2-1-1A2-11.
DOI: 10.1109/ICNSURV.2018.8384828

S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Protean Signature Schemes" in Proc. of the 17th conference on Cryptology and Network Security (CANS 2018) , Springer , 2018. pp. 256--276.
DOI: https://doi.org/10.1007/978-3-030-00434-7_13
http://henrich.poehls.com/papers/2018_KrennPoehlsSamelinSlamanig_SanitizableAndDeleteableSignature_CANS-full.pdf

J. D. Parra Rodriguez and J. Posegga, "RAPID: Resource and API-Based Detection Against In-Browser Miners" in ACSAC 2018: Proceedings of the 34th Annual Computer Security Applications Conference , New York, NY, USA : ACM , 2018.
DOI: https://doi.org/10.1145/3274694.3274735
https://web.sec.uni-passau.de/papers/acsac2018-parra.pdf

R. Soza, C. Kiraly and J. D. Parra Rodriguez, "Short Paper: Offloading Execution from Edge to Cloud: a Dynamic Node-RED Based Approach" in {IEEE} 10th International Conference on Cloud Computing Technology and Science, CloudCom 2018, Cyprus, December 10-13, 2018 , 2018.
https://web.sec.uni-passau.de/papers/cloudcomm18-soza-preprint.pdf

R. C. Staudemeyer, H. C. Pöhls and M. Wójcik, "The road to privacy in IoT: beyond encryption and signatures, towards unobservable communication" in {Proc. of The 7th workshop on IoT-SoS: Internet of Things Smart Objects and Services (WOWMOM SOS-IOT 2018)} , IEEE , 2018.
http://henrich.poehls.com/papers/2018_Staudemeyer-Poehls-Wojcik_road2privacy_preprint.pdf

J. D. Parra Rodriguez, E. Brehm and J. Posegga, "When Your Browser Becomes the Paper Boy" in ICT Systems Security and Privacy Protection , Janczewski, Lech Jan and Kutylowski, Miroslaw, Eds. Cham : Springer International Publishing , 2018. pp. 94--107.
https://web.sec.uni-passau.de/papers/parra-ifisec-preprint18.pdf

J. Camenisch, D. Derler, S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Chameleon-Hashes with Ephemeral Trapdoors And Applications to Invisible Sanitizable Signatures" in Proc. of 20th IACR International Conference on Practice and Theory in Public-Key Cryptography (PKC 2017) , IACR , 2017. pp. 152--182.
DOI: https://eprint.iacr.org/2017/011
http://henrich.poehls.com/papers/2017_CDKPSS_chamhash_with_ephemeral_trapdoors_PKC-eprint.pdf

A. Bilzhause, B. Belgacem, M. Mostafa and T. Gräupl, "Datalink security in the L-band digital aeronautical communications system (LDACS) for air traffic management" , IEEE Aerospace and Electronic Systems Magazine , vol. 32 , no. 11 , pp. 22-33 , 2017.
DOI: 10.1109/MAES.2017.160282

Designing, Developing, and Facilitating Smart Cities: Urban Design to IoT Solutions. .... 1st Springer International Publishing , 2017.
DOI: http://link.springer.com/book/10.1007/978-3-319-44924-1
http://link.springer.com/content/pdf/bfm%3A978-3-319-44924-1%2F1.pdf

H. C. Pöhls and T. Länger, "Einsetzbare Kryptografie für die Cloud" , Zeitschrift für Datenrecht und Informationssicherheit (digma) , vol. 17 , no. 1 , pp. 78--81 , 2017. Schulthess Juristische Medien .

A. Bilzhause, H. C. Pöhls and K. Samelin, "Position Paper: The Past, Present, and Future of Sanitizable and Redactable Signatures" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 12th International Conference on Availability, Reliability and Security (ARES SECPID 2017) , Conference Publishing Services (CPS) , 2017.
http://henrich.poehls.com/papers/2017_BilzhausePoehlsSamelin_ARES17_RSS_SSS_PastPresentFuture.pdf

M. Till Beck, J. Camenisch, D. Derler, S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Practical Strongly Invisible and Strongly Accountable Sanitizable Signatures" in Proc. of 22nd Australasian Conference on Information Security and Privacy (ACISP 2017) , Springer , 2017. pp. 437--452.
DOI: https://eprint.iacr.org/2017/445.pdf
http://henrich.poehls.com/papers/2017_BCDKPSS_Practical-Strongly-Invisible-and-Strongly-Accountable-Sanitizable-Signatures_ACISP.pdf

H. C. Pöhls and B. Petschkuhn, "Towards compactly encoded signed IoT messages" in IEEE International Workshop on Computer-Aided Modeling Analysis and Design of Communication Links and Networks (IEEE CAMAD 2017) , IEEE , 2017.
http://henrich.poehls.com/papers/2017_PoehlsPetschkuhn_IoT_signature_encoding_CAMAD.pdf

A. Kung, F. Kargl, S. Suppan, J. Cuellar, H. C. Pöhls, A. Kapovits, N. Notario and Y. Samuel Martin, "A Privacy Engineering Framework for the Internet of Things" in Proc. of 9th edition of the international conference Computers, Privacy and Data Protection 2016 (CDPD 2016) , 2016.

J. D. Parra Rodriguez, D. Schreckling and J. Posegga, "Addressing Data-Centric Security Requirements for IoT-Based Systems" in {2016 International Workshop on Secure Internet of Things (SIoT)} , 2016. pp. 1-10.
DOI: https://doi.org/10.1109/SIoT.2016.007

G. Moldovan, E. Z. Tragos, A. Fragkiadakis, H. C. Pöhls and D. Calvo, "An IoT middleware for enhanced security and privacy: the RERUM approach" in Proc. of 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS 2016) , IEEE , 2016.
http://henrich.poehls.com/papers/2016_Moldovan-et-al_IoT-middleware-for-enhanced-sec-and-priv-RERUM_NTMS.pdf

A. Bilzhause, M. Huber, H. C. Pöhls and K. Samelin, "Cryptographically Enforced Four-Eyes Principle" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 11th International Conference on Availability, Reliability and Security (ARES SECPID 2016) , Conference Publishing Services (CPS) , 2016.
http://henrich.poehls.com/papers/2016_BilzhauseHuberPoehlsSamelin_4EyesPrinciple_ARES_SECPID.pdf

E. Z. Tragos, A. Fragkiadakis, V. Angelakis and H. C. Pöhls, "Designing Secure IoT Architectures for Smart City Applications" in Designing, Developing, and Facilitating Smart Cities: Urban Design to IoT Solutions , Springer , 2016 .

J. Bauer, R. C. Staudemeyer, H. C. Pöhls and A. Fragkiadakis, "ECDSA on things: IoT integrity protection in practise" in Proc. of Information and Communications Security (ICICS 2016) , K.-Y. Lam et al., Eds. Springer , 2016.
http://henrich.poehls.com/papers/2016_Bauer-et-al_ECDSA-on-things_ICICS.pdf

C. Frädrich, H. C. Pöhls, W. Popp, N. Rakotondravony and K. Samelin, "Integrity and Authenticity Protection with Selective Disclosure Control in the Cloud and IoT" in Proc. of Information and Communications Security (ICICS 2016) , K.-Y. Lam et al., Eds. Springer , 2016.
http://henrich.poehls.com/papers/2016_SelectiveDisclosureControl_ICICS2016_full.pdf

G. Oikonomou, R. C. Staudemeyer, A. Fragkiadakis, M. Wójcik, E. Tragos, G. Papadopoulos, H. C. Pöhls, D. Gundlegard, V. Angelakis, S. Katuri, J. Bauer, B. Petschkuhn, P. Charalampidis, G. Stamatakis, M. Surligas and A. Makrogiannakis, "Laboratory Evaluation Results (RERUM Deliverable D5.2)" , internal report , 2016.
http://cordis.europa.eu/docs/projects/cnect/4/609094/080/deliverables/001-RERUMdeliverableD32Ares20153669911.pdf

M. Mössinger, "Measurement of Elliptic Curve Cryptography Implementations for Contiki on a Re-MOTE" , Master thesis , IT-Security Group , University of Passau , 2016.

D. Ruiz-López, J. Cuellar, R. C. Staudemeyer, P. Charalampidis, A. Fragkiadakis, P. Kasinathan, H. C. Pöhls, S. Suppan, E. Tragos and R. Weber, "Modelling the trustworthiness of the IoT (RERUM Deliverable D3.3)" , 2016.

T. Lorünser, D. Slamanig, T. Länger and H. C. Pöhls, "PRISMACLOUD Tools: A Cryptographic Toolbox for Increasing Security in Cloud Services" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 11th International Conference on Availability, Reliability and Security (ARES SECPID 2016) , Conference Publishing Services (CPS) , 2016.
http://henrich.poehls.com/papers/2016_LoruenserSlamanigLaengerPoehls_PRISMCLOUD-Architecture_SECPID_ARES.pdf

T. Marktscheffel, W. Gottschlich, W. Popp, P. Werli, S. Dominik Fink, A. Bilzhause and H. Meer, "QR Code Based Mutual Authentication Protocol for Internet of Things" in {Proc. of The 5th workshop on IoT-SoS: Internet of Things Smart Objects and Services (WOWMOM SOS-IOT 2016)} , IEEE , 2016.

A. Fragkiadakis, G. Oikonomou, H. C. Pöhls, E. Z. Tragos and M. Wójcik, "Securing Communications Among Severely Constrained, Wireless Embedded Devices" in Engineering Secure Internet of Things Systems , Benjamin Aziz and Alvaro Arenas and Bruno Crispo, Eds. The Institute of Engineering and Technology , 2016 .
http://www.theiet.org/resources/books/security/secIoT.cfm

R. C. Staudemeyer, H. C. Pöhls and B. W. Watson, "Security & Privacy for the Internet-of-Things communication in the SmartCity" in Designing, Developing, and Facilitating Smart Cities: Urban Design to IoT Solutions , Springer , 2016 , pp. 28.

T. Länger, H. C. Pöhls and S. Ghernaouti, "Selected Cloud Security Patterns to Improve End User Security and Privacy in Public Clouds" in Privacy Technologies and Policy - 4th Annual Privacy Forum (APF 2016) , Springer , 2016.
http://henrich.poehls.com/papers/2016_LaengerPoehlsGhernaouti_SecurityPatternsForClouds_ENISA-APF.pdf

D. Derler, C. Hanser, H. C. Pöhls and D. Slamanig, "Towards Authenticity and Privacy Preserving Accountable Workflows" in {Privacy and Identity Management. Time for a Revolution? - Proc. of 10th IFIP WG 9.2, 9.5, 9.6/11.7, 11.4, 11.6/SIG 9.2.2 International Summer School} , Springer , 2016. pp. 170-186.
DOI: http://www.springer.com/de/book/9783319417622
http://henrich.poehls.com/papers/2015_DerlerHanserPoehlsSlamanig_Towards_Auth_Private_Accountable_Workflows.pdf

M. Mössinger, B. Petschkuhn, J. Bauer, R. C.Staudemeyer, M. Wójcik and H. C. Pöhls, "Towards quantifying the cost of a secure IoT: Overhead and energy consumption of ECCsignatures on an ARM-based device" in {Proc. of The 5th workshop on IoT-SoS: Internet of Things Smart Objects and Services (WOWMOM SOS-IOT 2016)} , IEEE , 2016.
DOI: http://dx.doi.org/10.1109/WoWMoM.2016.7523559
http://henrich.poehls.com/papers/2016_Moessinger_et_al-Towards_quantifying_the_cost_of_a_secure_IoT.pdf

E. Z. Tragos, J. Bernal Bernabe, R. C. Staudemeyer, J. Luis, H. Ramos, A. Fragkiadakis, A. Skarmeta, M. Nati and A. Gluhak, "Trusted IoT in the complex landscape of governance, security, privacy, availability and safety" in Digitising the Industry - Internet of Things Connecting the Physical, Digital and Virtual Worlds , 2016 , pp. 1--30.

D. Derler, H. C. Pöhls, K. Samelin and D. Slamanig, "A General Framework for Redactable Signatures and New Constructions" in {Proc. of 18th Annual International Conference on Information Security and Cryptology (ICISC 2015)} , Springer , 2015. pp. 3-19.
DOI: http://link.springer.com/content/pdf/10.1007%2F978-3-319-30840-1_1.pdf
http://henrich.poehls.com/papers/2015_DerlerPoehlsSamelinSlamanig-GeneralFrameworkForRedactableSignatures_ICISC.pdf

H. C. Pöhls and K. Samelin, "Accountable Redactable Signatures" in Proc. of the 10th International Conference on Availability, Reliability and Security (ARES 2015) , IEEE , 2015.
http://henrich.poehls.com/papers/2015_Poehls-Samelin_Accountable-Redactable-Signatures_ARES15.pdf

R. C. Staudemeyer, "Applying long short-term memory recurrent neural networks to intrusion detection" , South African Computer Journal , vol. 56 , no. 1 , pp. 136--154 , 2015.
DOI: http://dx.doi.org/10.18489/sacj.v56i1.248
http://sacj.cs.uct.ac.za/index.php/sacj/article/download/248/150

R. C. Staudemeyer and J. Connan, "Burning money with firewalls" , South African Computer Journal , vol. 56 , no. July , pp. 165--167 , 2015.
DOI: http://dx.doi.org/10.18489/sacj.v56i1.322
http://sacj.cs.uct.ac.za/index.php/sacj/article/download/322/152