loading
Papers Papers/2020

Research.Publish.Connect.

Affiliation

Select a Subject

FH Campus Wien - University of Applied Sciences, Austria
Context (please use complete words only)
Field
Sort by

14 Papers

Putting Chaos into Perspective: Evaluation of Statistical Test Suite Implementations on Isolated Sequences of Arbitrary Length

Topics: Case Studies; Modeling, Experiments, Sharing Technologies & Platforms; Testing (software engineering; penetration; product development); Adoption challenges and recommendation

Authors: Pol Hölzmer , Manuel Koschuch and Matthias Hudler

Affiliation: Competence Centre for IT Security, University of Applied Sciences FH Campus Wien, Vienna, Austria

Digital Object Identifier: 10.5220/0011087400003194

Proceedings of IoTBDS 2022, ISBN: 978-989-758-564-7

Collapse Button Quick Abstract
Randomness is ambiguously defined as the absence of structure, whereby reliable generation and evaluation thereof imposes a complex problem. Efforts have been made to quantify randomness by developing randomness test suites as aggregation of selected statistical methods. This study aims to evaluate caveats developers may encounter employing such methods, and compares the application of randomness test suites for arbitrary data to evaluate features of randomness. Therefore, an initial set of three open-source Python-based implementations of the NIST SP 800-22 test suite have been analyzed and compared. The results indicate no ”one-size-fits-all” approach when assessing randomness; instead, it demonstrates how deviations between specification and implementation can lead to inaccurate results and erroneous conclusions about randomness.

Secure Key Management in Embedded Systems: A First Proposal

Topics: Case Studies; Security, Privacy and Trust ; Software engineering for security modeling, business process modeling and analytics; Adoption challenges and recommendation

Authors: Gorazd Jank , Silvia Schmidt and Manuel Koschuch

Affiliation: Competence Centre for IT Security, University of Applied Sciences FH Campus Wien, Vienna, Austria

Digital Object Identifier: 10.5220/0010475600810091

Proceedings of IoTBDS 2021, ISBN: 978-989-758-504-3

Collapse Button Quick Abstract
The Internet-of-Things (IoT) domain is highly heterogeneous and comprises a multitude of different devices. Because of this variety, many projects require unique compositions of tools, systems, and use cases. In addition, embedded devices are highly optimized and due to that are subject to different constraints. The interconnection of such products for data analysis or cooperation simultaneously increases the attack surface, which leads to requiring efficient cryptographic methods for the protection of data and communication. To enable this, a secure key management approach is needed. In practice however, there are still difficulties regarding the implementation and associated decision making of said management. All the more so since a generic one-size-fits-all approach in such a complex heterogeneous environment as the IoT simply does not exist. This paper aims to provide initial guidelines to argue the choice of a secure key management approach. To do so the state-of-the-art is presented and benefits as well as limits are evaluated. After that a set of factors and a first taxonomy are presented, which influence the final key management solution.

Experimental Evaluation of Forward Secure Dynamic Symmetric Searchable Encryption using the Searchitect Framework

Topics: Security, Privacy and Trust ; Algorithms, software engineering and development; Data security, data recovery, disaster recovery; Experiments on Using Security Solutions and Proof-of-Concepts

Authors: Ines Kramer , Silvia Schmidt , Manuel Koschuch and Mathias Tausig

Affiliation: Competence Centre for IT Security, University of Applied Sciences FH Campus Wien, Vienna, Austria

Digital Object Identifier: 10.5220/0009337000250035

Proceedings of IoTBDS 2020, ISBN: 978-989-758-426-8

Collapse Button Quick Abstract
In this work we present a prototype implementation of a framework for searchable encryption (SE), “Searchitect”. Our framework can be used to extend applications with search functionality over encrypted data in a protocol agnostic approach, hopefully paving the way for a broader and easier adoption of this promising privacy enhancing technology. Furthermore, it allows for easy comparison and evaluation of different implementations of SE schemes. We discuss dynamic searchable encryption schemes, supporting efficient updates of an encrypted index, as well as forward secure schemes that guarantee additional security properties, which resist file injection attacks. We evaluate the performance characteristics of two implementations of existing forward secure schemes, DynRH and Sophos. Our results show that the DynRH implementation is outperforming Sophos in terms of efficiency in the execution time of the search and update protocol, but needs more bandwidth for a search request. In addition, we augment an existing cloud-storage application with SE functionality using our framework, showing the negligible additional effort required by the implementers to accomplish this.

Search, Find and Resolve: Towards a Taxonomy for Searchable Encryption Schemes

Topics: Security, Privacy and Risk; Proofs-of-concepts and Large-scale Experiments; Security as a Service including any Algorithms, Methodology and Software Proof-of-concepts; Adoption challenges and recommendation; Surveys and their quantitative analysis

Authors: Ines Kramer , Silvia Schmidt , Mathias Tausig and Manuel Koschuch

Affiliation: Competence Centre for IT Security, University of Applied Sciences FH Campus Wien, Vienna and Austria

Digital Object Identifier: 10.5220/0007753804140421

Proceedings of IoTBDS 2019, ISBN: 978-989-758-369-8

Collapse Button Quick Abstract
Searchable Encryption (SE) schemes are a promising solution to the problem of outsourcing one’s data to a cloud provider in a secure way, while still retaining the ability to search for and easily retrieve specific documents. A multitude of different schemes have been proposed and designed, yet in general they still lack usability/applicability for a specific use case or proper security analysis in order to be widely implemented and used. To address this issue we started a project to determine which SE schemes fit certain use cases - mainly focusing on usability. We examined nearly 400 papers on SE schemes from the last 13 years and extracted categorization domains for SE schemes. Furthermore we took a time-based look at these domains and tried to identify future trends in SE technologies. In this position paper we introduce our methodology and give a short overview of our current work-in-progress.

How Little is Enough? Implementation and Evaluation of a Lightweight Secure Firmware Update Process for the Internet of Things

Topics: Energy Efficiency; Software Architecture and Middleware ; Security, Privacy and Trust ; Performance Evaluation and Modeling ; Algorithms, software engineering and development; Encryption (all aspects); Experiments of using security solutions and proof-of-concepts; Trust and privacy; Data security, data recovery, disaster recovery

Authors: Silvie Schmidt 1 , Mathias Tausig 1 , Manuel Koschuch 1 , Matthias Hudler 1 , Georg Simhandl 2 , Patrick Puddu 3 and Zoran Stojkovic 3

Affiliations: 1 University of Applied Sciences, Austria , 2 Adaptiva GmbH, Austria , 3 Embed-IT GmbH, Austria

Digital Object Identifier: 10.5220/0006670300630072

Proceedings of IoTBDS 2018, ISBN: 978-989-758-296-7

Collapse Button Quick Abstract
With an ever growing number of devices connecting to each other and to the Internet (usually subsumed under the ”Internet-of-Things” moniker), new challenges arise in terms of keeping these devices safe, secure and usable. Against better judegment, a large number of such devices never gets updated after being deployed, be it from negligence, inconvenience or sheer technical challenges. And all that while a plethora of valid approaches already exists for secure wireless remote update processes for such devices. In this work, we present another approach to solve this problem, with a special focus on the ease of integration into existing systems: we try to provide the absolute bare minimum to enable a secure over-the-air update process, analyze the security of this approach, and evaluate the performance impact of the implementation. We show that our solution can deal with nearly 80% of the identified threats, with a negligible impact on practical performance in terms of processing power and energy consumption.
Collapse Button Related Ontology Subjects/Areas/Topics (6)
Energy Efficiency

Industrial Engineering

Obstacles

Energy Efficiency and Green Manufacturing

Informatics in Control, Automation and Robotics

Sensor Networks

Searchitect - A Developer Framework for Hybrid Searchable Encryption (Position Paper)

Topics: Security, Privacy and Risk; System design and implementation; Encryption (all aspects); Experiments of using security solutions and proof-of-concepts; Trust and privacy; Conceptual frameworks and models

Authors: Ulrich Haböck , Manuel Koschuch , Ines Kramer , Silvie Schmidt and Mathias Tausig

Affiliation: University of Applied Sciences and FH Campus Wien, Austria

Digital Object Identifier: 10.5220/0006789402910298

Proceedings of IoTBDS 2018, ISBN: 978-989-758-296-7

Collapse Button Quick Abstract
In light of the trend towards cloud-based applications, privacy enhancing technologies are becoming increasingly important. Searchable encryption (SE) allows to outsource data to the cloud in a secure way, whilst permitting search functionality on that encrypted data: the host is able to perform search queries on behalf of the user, but without having access to the encryption keys. We propose Searchitect, a developer framework which allows to enhance existing cloud-based applications with searchable encryption. Searchitect provides a ready-to-use client-server infrastructure, which is expandable by custom SE schemes, the server being a configurable webservice offering searchable encryption as a service (SEaaS). Unlike other searchable encryption frameworks our approach is hybrid: Searchitect separates the index component from the data encryption scheme, leaving the application’s own specific encryption paradigm and access control untouched. In this way, we hope to ease the integration of searchable encryption into already existing cloud-based applications, requiring only the client code to be modified. Further, as searchable encryption is a very active field of research, we emphasize the experimental character of Searchitect’s framework. It aims at developers keeping track of recent SE developments, providing an easy deployable solution for testing in public and private clouds.

Speaking in Tongues - Practical Evaluation of TLS Cipher Suites Compatibility

Topics: Network Protocols; Internet Technologies; Performance Evaluation; Implementation and Experimental Test-Beds

Authors: Manuel Koschuch 1 , Taro Fruhwirth 2 , Alexander Glaser 2 , Silvie Schmidt 2 and Matthias Hudler 1

Affiliations: 1 FH Campus Wien - University of Applied Science, Austria , 2 FH Campus Wien and University of Applied Sciences, Austria

Digital Object Identifier: 10.5220/0005507900130023

Proceedings of DCNET 2015/ICETE, ISBN: 978-989-758-112-0

Collapse Button Quick Abstract
The Transport Layer Security (TLS) protocol is still the de-facto standard for secure network connections over an insecure medium like the internet. But its flexibility concerning the algorithms used for securing a channel between two parties can also be a weakness, due to the possible agreement on insecure ciphers. In this work we examine an existing white paper (Applied Crypto Hardening) giving recommendations on how to securely configure SSL/TLS connections with regard to the practical feasibility of these recommendations. In addition we propose an additional configuration set with the aim of increasing compatibility as well as security. We also developed a small Cipher Negotiation Crawler (CiNeg) to test TLS-handshakes using given cipher configurations with a supplied list of websites and show its practical usability.
Collapse Button Related Ontology Subjects/Areas/Topics (8)
Data Communication Networking

Network Protocols

Software Project Management

Implementation and Experimental Test-Beds

Performance Evaluation

Telecommunications
Internet Technologies

Software Engineering

Papers, Please... - X.509 Certificate Revocation in Practice

Topics: Network Protocols; Implementation and Experimental Test-Beds; Network Applications (Web, Multimedia Streaming, Gaming, Etc.)

Authors: Manuel Koschuch and Ronald Wagner

Affiliation: FH Campus Wien - University of Applied Science, Austria

Digital Object Identifier: 10.5220/0005113800360040

Proceedings of DCNET 2014/ICETE, ISBN: 978-989-758-042-0

Collapse Button Quick Abstract
X.509v3 certificates are the current standard of verifiable associating an entity with a public key, and are widely used in different networking applications: from HTTPS in browsers, SSH connections, to e-mail, PDF and code signing. This wide usage also necessitates the existence of a robust, reliable way to detect and deal with compromised or otherwise invalid certificates. Certificate Revocation Lists (CRLs) and the Online Certificate Status Protocol (OCSP) are the two mechanisms currently deployed to handle revoked certificates. In this position paper we present preliminary results of our research into the practical use of these protocols, using an existing data-set to show that almost 85% of certificates currently in use contain no revocation information, and compare different browsers under different operating systems as to their dealing with unreachable OCSP servers. We find that browser behaviour in this case ranges from opening the site without any warnings whatsoever to totally blocking it, indicating no clear default reaction and no reliable behaviour.
Collapse Button Related Ontology Subjects/Areas/Topics (5)
Data Communication Networking

Network Applications (Web, Multimedia Streaming, Gaming, Etc.)

Telecommunications
Implementation and Experimental Test-Beds

Network Protocols

Token-based Authentication for Smartphones

Topics: Network Protocols; Performance Evaluation; Implementation and Experimental Test-Beds; Ubiquitous Communication Networks

Authors: Manuel Koschuch , Matthias Hudler , Hubert Eigner and Zsolt Saffer

Affiliation: University of Applied Science, Austria

Digital Object Identifier: 10.5220/0004520000510056

Proceedings of DCNET 2013/ICETE, ISBN: 978-989-8565-72-3

Collapse Button Quick Abstract
Due to short - but frequent - sessions of smartphone usage, the fast and easy usability of authentication mechanisms in this special environment has a big impact on user acceptance. In this work we propose a user-friendly alternative to common authentication methods (like PINs and patterns). The advantages of the proposed method are its security, fastness, and easy usage, requiring minimal user interaction compared to other authentication techniques currently used on smartphones. The mechanism described uses the presence of a Bluetooth-connected hardware-token to authenticate the user and can easily be implemented on current smartphones. It is based on an authentication protocol which meets the requirements on energy efficiency and limited resources by optimizing the communication effort. A prototype was implemented on an Android smartphone and an MSP430 based MCU. The token allows fast authentication without the need for additional user action. The entire authentication process can be completed in less than one second, the developed software prototype requires no soft- or hardware modifications (like rooting) of the Android phone.
Collapse Button Related Ontology Subjects/Areas/Topics (8)
Data Communication Networking

Performance Evaluation

Telecommunications

Implementation and Experimental Test-Beds

Software Engineering

Ubiquitous Communication Networks
Network Protocols

Software Project Management

Towards Algorithm Agility for Wireless Sensor Networks - Comparison of the Portability of Selected Hash Functions

Topics: Performance Evaluation; Sensor Nets and Embedded Systems; Implementation and Experimental Test-Beds

Authors: Manuel Koschuch , Matthias Hudler and Zsolt Saffer

Affiliation: FH Campus Wien - University of Applied Science, Austria

Digital Object Identifier: 10.5220/0004612500640068

Proceedings of DCNET 2013/ICETE, ISBN: 978-989-8565-72-3

Collapse Button Quick Abstract
Cryptographic hash functions are an important building block used in many cryptosystems. The flexibility and ability of a system designer to choose the most fitting function for a given system enables fast, efficient and secure designs. In this position paper we give preliminary results of porting three selected hash algorithms to Iris and MicaZ Sensor nodes in terms of achieved performance, memory requirements and the influence of different compiler optimizations on these measurements. Our main goal is to provide a sort of baseline approximation of how much effort is needed to port reference code of these algorithms to a new platform without trying to optimize it, leaving all this work to the compiler; enabling designers to not having to stick to already ported algorithms, when they might be suboptimally suited for a given environment.
Collapse Button Related Ontology Subjects/Areas/Topics (7)
Data Communication Networking

Sensor Nets and Embedded Systems

Software Project Management

Implementation and Experimental Test-Beds

Software Engineering

Telecommunications
Performance Evaluation

Topic(s):

Filter listed results, by

Publication date

From:
To:
Author
Locate Author in list below
Data pager
Data pager
12
 Page 1 of 2, items 1 to 10 of 18.
Add Author(s) to filter:

- Science and Technology Publications, Lda.
RESOURCES

Proceedings

Papers

Authors

Ontology

CONTACTS

Science and Technology Publications, Lda
Avenida de S. Francisco Xavier, Lote 7 Cv. C,
2900-616 Setúbal, Portugal.

Phone: +351 265 520 185
Fax: +351 265 520 186
Email: info@scitepress.org

EXTERNAL LINKS

PRIMORIS

INSTICC

SCITEVENTS

CROSSREF

PROCEEDINGS SUBMITTED FOR INDEXATION BY:

dblp

Ei Compendex

SCOPUS

Semantic Scholar

Google Scholar

Microsoft Academic