TY  - JOUR
A1  - Schuba, Marko
T1  - A Performance Evaluation of Connectionless Overlay Networks for ATM
JF  - INFOCOM ´97. Sixteenth Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings Vol. 1
Y1  - 1997
SN  - 0-8186-7780-5
N1  - http://www.schuba.fh-aachen.de/papers/97-INFOCOM.pdf
SP  - 152
EP  - 158
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Reichl, Peter
T1  - An Analysis of Retransmission Strategies for Reliable Multicast Protocols / Schuba, M. ; Reichl, P.
JF  - Performance of information and communication systems : IFIP TC 6,WG 6.3 Seventh International Conference on Performance of Information and Communication Systems (PICS '98), 25 - 28 May, Lund, Sweden / ed. by Ulf Körner ...
Y1  - 1998
SN  - 0-412-83730-7
SP  - 1
EP  - 12
PB  - Chapman  Hall
CY  - London
ER  - 
TY  - CHAP
A1  - Schuba, Marko
A1  - Höfken, Hans-Wilhelm
A1  - Linzbach, Sophie
T1  - An ICS Honeynet for Detecting and Analyzing Cyberattacks in Industrial Plants
T2  - 2021 International Conference on Electrical, Computer and Energy Technologies (ICECET)
N2  - Cybersecurity of Industrial Control Systems (ICS) is an important issue, as ICS incidents may have a direct impact on safety of people or the environment. At the same time the awareness and knowledge about cybersecurity, particularly in the context of ICS, is alarmingly low. Industrial honeypots offer a cheap and easy to implement way to raise cybersecurity awareness and to educate ICS staff about typical attack patterns. When integrated in a productive network, industrial honeypots may not only reveal attackers early but may also distract them from the actual important systems of the network. Implementing multiple honeypots as a honeynet, the systems can be used to emulate or simulate a whole Industrial Control System. This paper describes a network of honeypots emulating HTTP, SNMP, S7communication and the Modbus protocol using Conpot, IMUNES and SNAP7. The nodes mimic SIMATIC S7 programmable logic controllers (PLCs) which are widely used across the globe. The deployed honeypots' features will be compared with the features of real SIMATIC S7 PLCs. Furthermore, the honeynet has been made publicly available for ten days and occurring cyberattacks have been analyzed
KW  - Conpot
KW  - honeypot
KW  - honeynet
KW  - ICS
KW  - cybersecurity
Y1  - 2022
SN  - 978-1-6654-4231-2
SN  - 978-1-6654-4232-9
U6  - http://dx.doi.org/10.1109/ICECET52533.2021.9698746
N1  - 2021 International Conference on Electrical, Computer and Energy Technologies (ICECET). 09-10 December 2021. Cape Town, South Africa.
PB  - IEEE
ER  - 
TY  - JOUR
A1  - Schuba, Marko
T1  - Analyse der Antwortzeit von zuverlässigen Multicast-Protokollen im Internet
JF  - Multicast - Protokolle und Anwendungen : 20. - 21. Mai 1999, Braunschweig; 1. GI-Workshop / [Workshop-Leitung: Martina Zitterbart ...]
Y1  - 1999
SP  - 1
EP  - 14
CY  - Braunschweig
ER  - 
TY  - JOUR
A1  - Schuba, Marko
T1  - Analysis of Feedback Error Control Schemes for Block Based Video Communication / Meggers, Jens ; Schuba, Marko
Y1  - 1999
ER  - 
TY  - CHAP
A1  - Stöbe, Rolf
A1  - Höfken, Hans-Wilhelm
A1  - Schuba, Marko
A1  - Breuer, Michael
T1  - Artificial ageing of mobile devices using a simulated GSM/GPRS network
T2  - Eighth International Conference on Availability, Reliability and Security (ARES) : 2-6 Sept. 2013, Regensburg
Y1  - 2013
SP  - 493
EP  - 497
PB  - IEEE
ER  - 
TY  - JOUR
A1  - Serror, Martin
A1  - Hack, Sacha
A1  - Henze, Martin
A1  - Schuba, Marko
A1  - Wehrle, Klaus
T1  - Challenges and Opportunities in Securing the Industrial Internet of Things
JF  - IEEE Transactions on Industrial Informatics
Y1  - 2021
U6  - http://dx.doi.org/10.1109/TII.2020.3023507
SN  - 1941-0050
VL  - 17
IS  - 5
SP  - 2985
EP  - 2996
PB  - IEEE
CY  - New York
ER  - 
TY  - CHAP
A1  - Lindenlauf, Simon
A1  - Höfken, Hans-Wilhelm
A1  - Schuba, Marko
T1  - Cold Boot Attacks on DDR2 and DDR3 SDRAM
T2  - 10th International Conference on Availability, Reliability and Security (ARES) 2015
Y1  - 2015
U6  - http://dx.doi.org/10.1109/ARES.2015.28
SP  - 287
EP  - 292
ER  - 
TY  - CHAP
A1  - Neth, Jannik
A1  - Schuba, Marko
A1  - Brodkorb, Karsten
A1  - Neugebauer, Georg
A1  - Höner, Tim
A1  - Hack, Sacha
T1  - Digital forensics triage app for android
T2  - ARES '23: Proceedings of the 18th International Conference on Availability, Reliability and Security
N2  - Digital forensics of smartphones is of utmost importance in many criminal cases. As modern smartphones store chats, photos, videos etc. that can be relevant for investigations and as they can have storage capacities of hundreds of gigabytes, they are a primary target for forensic investigators. However, it is exactly this large amount of data that is causing problems: extracting and examining the data from multiple phones seized in the context of a case is taking more and more time. This bears the risk of wasting a lot of time with irrelevant phones while there is not enough time left to analyze a phone which is worth examination. Forensic triage can help in this case: Such a triage is a preselection step based on a subset of data and is performed before fully extracting all the data from the smartphone. Triage can accelerate subsequent investigations and is especially useful in cases where time is essential. The aim of this paper is to determine which and how much data from an Android smartphone can be made directly accessible to the forensic investigator – without tedious investigations. For this purpose, an app has been developed that can be used with extremely limited storage of data in the handset and which outputs the extracted data immediately to the forensic workstation in a human- and machine-readable format.
KW  - Android
KW  - Digital triage
KW  - Triage-app
Y1  - 2023
SN  - 9798400707728
U6  - http://dx.doi.org/10.1145/3600160.3605017
N1  - ARES 2023: The 18th International Conference on Availability, Reliability and Security. August 29 - September 1, 2023. Benevento, Italy.
PB  - ACM
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Wrona, Konrad
T1  - Electronic Commerce Transactions in a Wireless Environment / Schuba, Marko. ; Wrona, Konrad
Y1  - 1999
N1  - IWTEC ´99
SP  - 1
EP  - 9
ER  - 
TY  - JOUR
A1  - Maus, Stefan
A1  - Höfken, Hans-Wilhelm
A1  - Schuba, Marko
T1  - Forensic Analysis of Geodata in Android Smartphones
Y1  - 2011
N1  - Cyberforensics 2011, Glasgow
SP  - 1
EP  - 11
ER  - 
TY  - CHAP
A1  - Christian, Esser
A1  - Montag, Tim
A1  - Schuba, Marko
A1  - Allhof, Manuel
T1  - Future critical infrastructure and security - cyberattacks on charging stations
T2  - 31st International Electric Vehicle Symposium & Exhibition and International Electric Vehicle Technology Conference (EVS31 & EVTeC 2018)
Y1  - 2018
SN  - 978-1-5108-9157-9
SP  - 665
EP  - 671
PB  - Society of Automotive Engineers of Japan (JSAE)
CY  - Tokyo
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Reichl, Peter
A1  - Hoff, Simon
T1  - How to Model Complex Periodic Traffic with TES / Reichl, Peter ; Schuba, Marko ; Hoff, Simon
JF  - Proc. of 13th United Kingdom Workshop on Performance Engineering, Edinburgh, UK, July 1997
Y1  - 1997
SP  - 17/1
EP  - 17/11
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Reichl, Peter
T1  - How to Place Connectionless Servers in ATM Networks / Schuba, Marko ; Reichl, Peter
JF  - Proc. of Fourth IFIP Workshop on Performance Modelling and Evaluation of ATM Networks
Y1  - 1996
N1  - Fourth IFIP Workshop on Performance Modelling and Evaluation of ATM Networks, Ilkley, West Yorkshire, U.K., July 1996
SP  - 09/1
EP  - 09/10
ER  - 
TY  - CHAP
A1  - Bonney, Gregor
A1  - Höfken, Hans-Wilhelm
A1  - Paffen, Benedikt
A1  - Schuba, Marko
T1  - ICS/SCADA Security - Analysis of a Beckhoff CX5020 PLC
T2  - 1st International Conference on Information Systems Security and Privacy : ICISSP 2015
Y1  - 2015
SP  - 1
EP  - 6
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Spaniol, Otto
T1  - Interconnection of Local Area Networks via ATM / Spaniol, Otto ; Schuba, Marko
JF  - High performance networks for multimedia applications / edited by André Danthine ...
Y1  - 1999
SN  - 0-7923-8274-9
SP  - 1
EP  - 10
PB  - Kluwer Academic Publ.
CY  - Dordrecht
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Gerstenberger, Volker
A1  - Lahaije, Paul
T1  - Internet ID – Flexible Reuse of Mobile Phone Authentication Security for Service Access / Schuba, Marko ; Gerstenberger, Volker, ; Lahaije, Paul
Y1  - 2004
N1  - Nordsec 2004, Helsinki ; Nordic Workshop on Secure IT-systems <9, 2004>
SP  - 1
EP  - 7
ER  - 
TY  - CHAP
A1  - Granat, Andreas
A1  - Höfken, Hans-Wilhelm
A1  - Schuba, Marko
T1  - Intrusion Detection of the ICS Protocol EtherCAT
N2  - Control mechanisms like Industrial Controls Systems (ICS) and its subgroup SCADA (Supervisory Control and Data Acquisition) are a prerequisite to automate industrial processes. While protection of ICS on process management level is relatively straightforward – well known office IT security mechanisms can be used – protection on field bus level is harder to achieve as there are real-time and production requirements like 24x7 to consider. One option to improve security on field bus level is to introduce controls that help to detect and to react on attacks. This paper introduces an initial set of intrusion detection mechanisms for the field bus protocol EtherCAT. To this end existing Ethernet attack vectors including packet injection and man-in-the-middle attacks are tested in an EtherCAT environment, where they could interrupt the EtherCAT network and may even cause physical damage. Based on the signatures of such attacks, a preprocessor and new rule options are defined for the open source intrusion detection system Snort demonstrating the general feasibility of intrusion detection on field bus level.
Y1  - 2017
N1  - International Conference on Computer, Network Security and Communication Engineering (CNSCE 2017), March 26-27, 2017, Bangkok, Thailand
SP  - 1
EP  - 5
ER  - 
TY  - CHAP
A1  - Schütz, P.
A1  - Breuer, M.
A1  - Höfken, Hans-Wilhelm
A1  - Schuba, Marko
T1  - Malware proof on mobile phone exhibits based on GSM/GPRS traces
T2  - The Second International Conference on Cyber Security, Cyber Peacefare and Digital Forensic (CyberSec 2013) : 04.03. - 06.03.2013, Kuala Lumpur, Malaysia
Y1  - 2013
SN  - 978-0-9853483-7-3
SP  - 89
EP  - 96
PB  - The Society of Digital Information and Wireless Communication
ER  - 
TY  - JOUR
A1  - Schuba, Marko
A1  - Wrona, Konrad
T1  - Mobile Chip Electronic Commerce: Enabling Credit Card Payment for Mobile Devices / Schuba, Marko ; Wrona, Konrad
Y1  - 2000
N1  - eBiz2000 Specialist Conference @ CommunicAsia2000, Singapore, June 2000
SP  - 1
EP  - 6
ER  -