Publications

D. Schreckling, J. D. Parra Rodriguez and J. Posegga, "Data centric Security for IoT" in {Proc. of 2nd EAI International Conference on IoT as a Service} , Springer , 2015.

Joaquín García{-}Alfaro and Jordi Herrera{-}Joancomartí and Emil Lupu and Joachim Posegga and Alessandro Aldini and Fabio Martinelli and Neeraj Suri, Eds., Data Privacy Management, Autonomous Spontaneous Security, and Security Assurance - 9th International Workshop, DPM 2014, 7th International Workshop, SETOP 2014, and 3rd International Workshop, QASA 2014, Wroclaw, Poland, September 10-11, 2014. Revised Selected Papers : Lecture Notes in Computer Science .
DOI: 10.1007/978-3-319-17016-9
http://dx.doi.org/10.1007/978-3-319-17016-9

P. Fuchs, "DoS Detection in NodeRED" , Bachelor Thesis , IT-Security Group , University of Passau , 2015.
https://web.sec.uni-passau.de/projects/compose/papers/Fuchs_DoS_in_nodeRED.pdf

D. Ruiz, C. Reyes, A. Fragkiadakis, E. Tragos, V. Siris, A. Traganitis, P. Charalampides, H. C. Pöhls, B. Petschkuhn, J. Bauer, K. Fischer, J. Gessner, S. Suppan, J. Cuellar, M. Wójcik and G. Oikonomou, "Enhancing the autonomous smart objects and the overall system security of IoT based Smart Cities (RERUM Deliverable D3.1)" , internal report , 2015.
http://cordis.europa.eu/docs/projects/cnect/4/609094/080/deliverables/001-609094RERUMD31renditionDownload.pdf

[English] J. D. Parra Rodriguez, D. Schreckling and J. Posegga, "Identity Management in Platforms Offering IoT as a Service" in Internet of Things. User-Centric IoT , Giaffreda, Raffaele and Vieriu, Radu-Laurentiu and Pasher, Edna and Bendersky, Gabriel and Jara, Antonio J. and Rodrigues, Joel J.P.C. and Dekel, Eliezer and Mandler, Benny, Eds. Springer International Publishing , 2015 , pp. 281-288.
DOI: 10.1007/978-3-319-19656-5_40
http://dx.doi.org/10.1007/978-3-319-19656-5_40

N. Tiana Lilie Rakotondravony, "Implementation of an accumulator-based Redactable Signature Scheme on a resource-constrained device" , Final year project report , SUP'COM Tunis , co-supervised at University of Passau , 2015.

G. Baldini, T. Peirce, M. Botterman, M. Chiara Talacchini, A. Pereira, M. Handte, D. Rotondi, H. C. Pöhls, O. Vermesan, A. Baddii, B. Copigneaux, D. Schreckling, L. Vigano, G. Steri, S. Piccione, P. Vlacheas, V. Stavroulaki, D. Kelaidonis, R. Neisse, E. Tragos, P. Smadja, C. Hennebert, M. Serrano, S. Severi, G. Abreu, P. T. Kirstein, S. Varakliotis and A. Skarmeta, Internet of Things -- Governance, Privacy and Security Issues. .... IERC , 2015.

H. C. Pöhls, "JSON Sensor Signatures (JSS): End-to-End Integrity Protection from Constrained Device to IoT Application" in Proc. of the Workshop on Extending Seamlessly to the Internet of Things (esIoT), collocated at the IMIS-2012 International Conference (IMIS 2015) , IEEE , 2015. pp. 306 - 312.
DOI: http://dx.doi.org/10.1109/IMIS.2015.48
http://henrich.poehls.com/papers/2015_Poehls-JSONSensorSignatures_esIoT.pdf

B. Braun, K. Pauli, J. Posegga and M. Johns, "LogSec: Adaptive Protection for the Wild Wild Web" in the 2015 ACM Symposium on Applied Computing (SAC 2015) - to appear , 2015.

K. Schyff and R. C. Staudemeyer, "Monitoring Windows: An Open Source approach with Icinga and NSClient ++ using PowerShell" in Proc. of the Southern African Telecommunication Networks and Applications Conference (SATNAC 2015) , 2015. pp. 189--194.

D. Demirel, D. Derler, C. Hanser, H. C. Pöhls, D. Slamanig and G. Traverso, "Overview of Functional and Malleable Signature Schemes (PRISMACLOUD Deliverable D4.4)" , 2015.
http://henrich.poehls.com/papers/2015_TechReport_PRISMACLOUD_D_4_4.pdf

H. C. Pöhls, J. Cuellar, R. Weber, R. C. Staudemeyer, S. Suppan, E. Tragos, A. Fragkiadakis, M. Wójcik, J. Bauer, B. Petschkuhn and D. Ruiz, "Privacy enhancing techniques in Smart City applications (RERUM Deliverable D3.2)" , 2015.
https://bscw.ict-rerum.eu/pub/bscw.cgi/d31975/RERUM%20deliverable%20D3_2.pdf

E. Z. Tragos, H. C. Pöhls, R. C. Staudemeyer, D. Slamanig, A. Kapovits, S. Suppan, A. Fragkiadakis, G. Baldini, R. Neisse, P. Langendörfer, Z. Dyka and C. Wittke, "Securing the Internet of Things - Security and Privacy in a Hyperconnected World" in Building the Hyperconnected Society - IoT Research and Innovation Value Chains, Ecosystems and Markets , Ovidiu Vermesan and Peter Friess, Eds. River Publishers , 2015 , pp. 189-219.
http://henrich.poehls.com/papers/Building_the_Hyperconnected_Society_IERC_2015_Cluster_eBook_978-87-93237-98-8_P_Web.pdf

C. L. Nehaniv, J. Rhodes, A. Egri-Nagy, P. Dini, E. Rothstein Morris, G. Horváth, F. Karimi, D. Schreckling and M. J. Schilstra, "Symmetry structure in discrete models of biochemical systems: natural subsystems and the weak control hierarchy in a new model of computation driven by interactions" , Philosophical Transactions of the Royal Society of London A: Mathematical, Physical and Engineering Sciences , vol. 373 , no. 2046 , 2015. The Royal Society .
DOI: 10.1098/rsta.2014.0223

F. Geelkerken, H. C. Pöhls and S. Fischer-Hübner, "The legal status of malleable- and functional signatures in light of Regulation (EU) No910/2014" in {Proc. of 3rd International Academic Conference of Young Scientists on Law \& Psychology 2015 (LPS 2015)} , L'viv Polytechnic Publishing House , 2015. pp. 404-410.
https://drive.google.com/file/d/0B-Yu3Ni9z3PXM2lBajhCXzhoWk0/view

T. Lorünser, C. Bastos Rodriguez, D. Demirel, S. Fischer-Hübner, T. Gross, T. Länger, M. Noes, H. C. Pöhls, B. Rozenberg and D. Slamanig, "Towards a New Paradigm for Privacy and Security in Cloud Services" in New LEIT projects on Security-by-Design - 4th Cyber Security and Privacy EU Forum, CSP Forum 2015, Brussels, Belgium, April 28 - 29 , Springer , 2015.
DOI: http://arxiv.org/abs/1506.05980v2
http://henrich.poehls.com/papers/2015_DerlerPoehlsSamelinSlamanig-GeneralFrameworkForRedactableSignatures_ICISC.pdf

B. Braun, "Web-based Secure Application Control" , University of Passau, Germany , 2015.
http://web.sec.uni-passau.de/papers/2015_Braun.pdf

J. D. Parra Rodriguez and J. Posegga, "Why Servers Should Fear their Clients: Abusing Websockets in Browsers for DoS" in Proc. of 11th EAI International Conference on Security and Privacy in Communication Networks (SECURECOMM) , 2015.
https://web.sec.uni-passau.de/papers/2015_Parra-WebSockets.pdf

B. Braun, J. Köstler, J. Posegga and M. Johns, "A Trusted UI for the Mobile Web" in 29th IFIP International Information Security and Privacy Conference (IFIP SEC 2014) , 2014.
DOI: http://dx.doi.org/10.1007/978-3-642-55415-5_11
http://web.sec.uni-passau.de/papers/2014_Braun_Koestler_Posegga_Johns-Trusted-UI-Mobile-Web.pdf

H. C. Pöhls, B. Petschkuhn, J. Rückert and M. Mössinger, "Aggregation and Perturbation in Practice: Case-Study of Privacy, Accuracy and Performance" in IEEE International Workshop on Computer-Aided Modeling Analysis and Design of Communication Links and Networks (IEEE CAMAD 2014) , IEEE , 2014.
DOI: http://dx.doi.org/10.1109/CAMAD.2014.7033231
http://henrich.poehls.com/papers/2014_PoehlsMoessingerPetschkuhnRueckert_AggregationAndPerturbationInPractice_CAMAD2014.pdf

E. Z. Tragos, V. Angelakis, A. Fragkiadakis, D. Gundlegard, S. Nechifor, G. Oikonomou, H. C. Pöhls and A. Gavras, "Enabling Reliable and Secure IoT-based Smart City Applications" in Proc. of 1st International IEEE Workshop on Pervasive Systems for Smart Cities , IEEE , 2014.
DOI: http://dx.doi.org/10.1109/PerComW.2014.6815175
http://dx.doi.org/10.1109/PerComW.2014.6815175

R. C. Staudemeyer and C. W. Omlin, "Extracting salient features for network intrusion detection using machine learning methods" , South African Computer Journal , vol. 52 , no. July , pp. 82--96 , 2014.
DOI: http://dx.doi.org/10.18489/sacj.v52i0.200
http://sacj.cs.uct.ac.za/index.php/sacj/article/download/200/99

B. Braun, C. Gries, B. Petschkuhn and J. Posegga, "Ghostrail: Ad Hoc Control-Flow Integrity for Web Applications" in 29th IFIP International Information Security and Privacy Conference (IFIP SEC 2014) , 2014.
DOI: http://dx.doi.org/10.1007/978-3-642-55415-5_22
http://web.sec.uni-passau.de/papers/2014_Braun_Gries_Petschkuhn_Posegga-Ghostrail.pdf

H. Meer, H. C. Pöhls, J. Posegga and K. Samelin, "On the Relation between Redactable and Sanitizable Signature Schemes" in Proc. of the 6th International Symposium on Engineering Secure Software and Systems (ESSoS 2014) , Jürjens, Jan and Piessens, Frank and Bielova, Nataliia, Eds. Springer International Publishing , 2014. pp. 113-130.
DOI: http://dx.doi.org/10.1007/978-3-319-04897-0_8
http://henrich.poehls.com/papers/2014_DeMeerPoehlsPoseggaSamelin_Relation-between-Sanitizable-and-Redactable-Signatures_ESSOS2014.pdf

H. C. Pöhls and K. Samelin, "On Updatable Redactable Signatures" in Proc. of the 12th International Conference on Applied Cryptography and Network Security (ACNS 2014) , Springer , 2014.
DOI: http://link.springer.com/chapter/10.1007/978-3-319-07536-5_27
http://henrich.poehls.com/papers/2014_PoehlsSamelin_OnUpdatableRedactableSignatures_ACNS14_full.pdf

B. Braun, J. Köstler, M. Johns and J. Posegga, "PhishSafe: Leveraging Modern JavaScript API's for Transparent and Robust Protection" in Fourth ACM Conference on Data and Application Security and Privacy (ACM CODASPY 2014) , 2014.
DOI: http://dx.doi.org/10.1145/2557547.2557553
http://web.sec.uni-passau.de/papers/2014_Braun_Koestler_Johns_Posegga-PhishSafe_Leveraging_Modern_JavaScript_APIs_for_Transparent_and_Robust_Protection.pdf

[English] H. Meer, H. C. Pöhls, J. Posegga and K. Samelin, "Redactable Signature Schemes for Trees with Signer-Controlled Non-Leaf-Redactions" , vol. 455 , pp. 155-171 , 2014. Springer Berlin Heidelberg .
DOI: http://dx.doi.org/10.1007/978-3-662-44791-8_10
http://henrich.poehls.com/papers/2014_DeMeerPoehlsPoseggaSamlin_RSS-for-Trees-With-Signer-Controlled-Non-Leaf-Redactions_CCIS.pdf

H. C. Pöhls and M. Karwe, "Redactable Signatures to Control the Maximum Noise for Differential Privacy in the Smart Grid" in Proc. of the 2nd Workshop on Smart Grid Security (SmartGridSec 2014) , Jorge Cuellar, Eds. Springer International Publishing , 2014.
DOI: http://link.springer.com/chapter/10.1007/978-3-319-10329-7_6/fulltext.html
http://henrich.poehls.com/papers/2014_Poehls_Karwe_RedactableSignaturesToControlTheMaximumNoiseForDifferentialPrivacyInTheSmartGrid.pdf

H. C. Pöhls, V. Angelakis, S. Suppan, K. Fischer, G. Oikonomou, E. Z. Tragos, R. Diaz Rodriguez and T. Mouroutis, "RERUM: Building a Reliable IoT upon Privacy- and Security- enabled Smart Objects" in Proc. of the IEEE WCNC 2014 Workshop on Internet of Things Communications and Technologies , IEEE , 2014.
DOI: http://dx.doi.org/10.1109/WCNCW.2014.6934872
http://dx.doi.org/10.1109/WCNCW.2014.6934872

B. Braun, C. Pollak and J. Posegga, "A Survey on Control-Flow Integrity Means in Web Application Frameworks" in 18th Nordic Conference on Secure IT Systems (NordSec 2013) , 2013.
DOI: http://dx.doi.org/10.1007/978-3-642-41488-6_16
http://web.sec.uni-passau.de/papers/2013_Braun_Pollak_Posegga-A_Survey_on_CFI_in_Web_Frameworks.pdf

B. Mandler, F. Antonelli, R. Kleinfeld, C. Pedrinaci, D. Carrera, A. Gugliotta, D. Schreckling, I. Carreras, D. Raggett, M. Pous, C. Vicente Villares and V. Trifa, "COMPOSE - A journey from the Internet of Things to the Internet of Services" in Workshop: Cloud Computing Project and Initiatives - CCPI'13 , Barcelona, Spain , 2013.

H. C. Pöhls, "Contingency Revisited: Secure Construction and Legal Implications of Verifiably Weak Integrity" in Trust Management VII , Fernandez-Gago, Carmen and Martinelli, Fabio and Pearson, Siani and Agudo, Isaac, Eds. Springer Berlin Heidelberg , 2013. pp. 136-150.
DOI: http://dx.doi.org/10.1007/978-3-642-38323-6_10
http://henrich.poehls.com/papers/2013_Poehls_Contingency.pdf

B. Braun, P. Gemein, H. P. Reiser and J. Posegga, "Control-Flow Integrity in Web Applications" in International Symposium on Engineering Secure Software and Systems (ESSoS 2013) , Lecture Notes in Computer Science (LNCS), Springer , 2013.
DOI: http://dx.doi.org/10.1007/978-3-642-36563-8_1
http://web.sec.uni-passau.de/papers/2013_Braun_Gemein_Reiser_Posegga-Control-Flow_Integrity_in_Web_Applications.pdf

R. C. Staudemeyer and T. Kucza, Das Nagios/Icinga Kochbuch. .... O'Reilly; Auflage: 1 , 2013.

C. Brzuska, H. C. Pöhls and K. Samelin, "Efficient and Perfectly Unlinkable Sanitizable Signatures without Group Signatures" in Proc. of the 10th European Workshop: Public Key Infrastructures, Services and Applications (EuroPKI 2013) , Katsikas, Sokratis and Agudo, Isaac, Eds. Springer Berlin Heidelberg , 2013. pp. 12-30.
DOI: http://dx.doi.org/10.1007/978-3-642-53997-8_2
http://henrich.poehls.com/papers/2013_BrzuskaPoehlsSamelin_Efficient-and-Perfectly-Unlinkable-Sanitizable-Signatures_EuroPKI13.pdf

R. C. Staudemeyer and C. W. Omlin, "Evaluating performance of long short-term memory recurrent neural networks on intrusion detection data" in Prof. of the conf. on South African Institute for Computer Scientists and Information Technologists (SAICSIT'13) , ACM Press , 2013. pp. 218--224.
DOI: http://dx.doi.org/10.1145/2513456.2513490
http://dl.acm.org/citation.cfm?id=2513456.2513490

H. C. Pöhls, S. Peters, K. Samelin, J. Posegga and H. Meer, "Malleable Signatures for Resource Constrained Platforms" in Information Security Theory and Practice. Security of Mobile and Cyber-Physical Systems , Cavallaro, Lorenzo and Gollmann, Dieter, Eds. Springer-Verlag , 2013. pp. 18-33.
DOI: http://dx.doi.org/10.1007/978-3-642-38530-8_2
http://henrich.poehls.com/papers/2013_PoehlsPetersSamelinPoseggaDeMeer_WISTP.pdf

R. Wimmer, "Proof-Carrying Android Applications to Validate Data-Centric User Policies" , IT-Security Group , University of Passau , 2013.

H. Meer, H. C. Pöhls, J. Posegga and K. Samelin, "Scope of Security Properties of Sanitizable Signatures Revisited" in Proc. of the 8th International Conference on Availability, Reliability and Security (ARES 2013) , IEEE , 2013. pp. 188-197.
DOI: http://dx.doi.org/10.1109/ARES.2013.26
http://henrich.poehls.com/papers/2013_DeMeer_Poehls_Posegga_Samelin-ScopeofSecurityPropertiesofSanitizableSignaturesRevisited.pdf

D. Schreckling, S. Huber, F. Höhne and J. Posegga, "URANOS: User-Guided Rewriting for Plugin-Enabled ANdroid ApplicatiOn Security" in Proc. of the 7th Workshop in Information Security Theory and Practice (WISTP 2013) , Springer-Verlag , 2013.

D. Hausknecht, "Variability-aware data-flow Analysis for Smartphone Applications" , Software Product-Lines Group and IT-Security Group , University of Passau , 2013.
https://web.sec.uni-passau.de/projects/compose/papers/Hausknecht_Variability_aware_data_flow_analysis_for_Smartphone_Applications.pdf

B. Braun, S. Kucher, M. Johns and J. Posegga, "A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities" in {Trust, Privacy and Security in Digital Business (TrustBus '12)} , Lecture Notes in Computer Science (LNCS), Springer , 2012. pp. 17-29.
DOI: http://dx.doi.org/10.1007/978-3-642-32287-7_2
http://web.sec.uni-passau.de/papers/2012_Braun_Kucher_Johns_Posegga_SessionImagination.pdf