TY  - CHAP
A1  - Serror, Martin
A1  - Henze, Martin
A1  - Hack, Sacha
A1  - Schuba, Marko
A1  - Wehrle, Klaus
T1  - Towards in-network security for smart homes
T2  - 13th International Conference on Availability, Reliability and Security, ARES 2018; Hamburg; Germany; 27 August 2018 through 30 August 2018
Y1  - 2018
SN  - 978-145036448-5
U6  - http://dx.doi.org/10.1145/3230833.3232802
SP  - Article numer 3232802
ER  - 
TY  - JOUR
A1  - Serror, Martin
A1  - Hack, Sacha
A1  - Henze, Martin
A1  - Schuba, Marko
A1  - Wehrle, Klaus
T1  - Challenges and Opportunities in Securing the Industrial Internet of Things
JF  - IEEE Transactions on Industrial Informatics
Y1  - 2021
U6  - http://dx.doi.org/10.1109/TII.2020.3023507
SN  - 1941-0050
VL  - 17
IS  - 5
SP  - 2985
EP  - 2996
PB  - IEEE
CY  - New York
ER  - 
TY  - CHAP
A1  - Neth, Jannik
A1  - Schuba, Marko
A1  - Brodkorb, Karsten
A1  - Neugebauer, Georg
A1  - Höner, Tim
A1  - Hack, Sacha
T1  - Digital forensics triage app for android
T2  - ARES '23: Proceedings of the 18th International Conference on Availability, Reliability and Security
N2  - Digital forensics of smartphones is of utmost importance in many criminal cases. As modern smartphones store chats, photos, videos etc. that can be relevant for investigations and as they can have storage capacities of hundreds of gigabytes, they are a primary target for forensic investigators. However, it is exactly this large amount of data that is causing problems: extracting and examining the data from multiple phones seized in the context of a case is taking more and more time. This bears the risk of wasting a lot of time with irrelevant phones while there is not enough time left to analyze a phone which is worth examination. Forensic triage can help in this case: Such a triage is a preselection step based on a subset of data and is performed before fully extracting all the data from the smartphone. Triage can accelerate subsequent investigations and is especially useful in cases where time is essential. The aim of this paper is to determine which and how much data from an Android smartphone can be made directly accessible to the forensic investigator – without tedious investigations. For this purpose, an app has been developed that can be used with extremely limited storage of data in the handset and which outputs the extracted data immediately to the forensic workstation in a human- and machine-readable format.
KW  - Android
KW  - Digital triage
KW  - Triage-app
Y1  - 2023
SN  - 9798400707728
U6  - http://dx.doi.org/10.1145/3600160.3605017
N1  - ARES 2023: The 18th International Conference on Availability, Reliability and Security. August 29 - September 1, 2023. Benevento, Italy.
PB  - ACM
ER  - 
TY  - CHAP
A1  - Küppers, Malte
A1  - Schuba, Marko
A1  - Neugebauer, Georg
A1  - Höner, Tim
A1  - Hack, Sacha
T1  - Security analysis of the KNX smart building protocol
T2  - ARES '23: Proceedings of the 18th International Conference on Availability, Reliability and Security
N2  - KNX is a protocol for smart building automation, e.g., for automated heating, air conditioning, or lighting. This paper analyses and evaluates state-of-the-art KNX devices from manufacturers Merten, Gira and Siemens with respect to security. On the one hand, it is investigated if publicly known vulnerabilities like insecure storage of passwords in software, unencrypted communication, or denialof-service attacks, can be reproduced in new devices. On the other hand, the security is analyzed in general, leading to the discovery of a previously unknown and high risk vulnerability related to so-called BCU (authentication) keys.
Y1  - 2023
U6  - http://dx.doi.org/10.1145/3600160.3605167
N1  - Article No.: 87

ARES 2023, August 29–September 01, 2023, Benevento, Italy
SP  - 1
EP  - 7
PB  - ACM
ER  -