Paper sumbitted to AISC2011 in Perth

A paper with the title “IEEE 802.11 Chipset Fingerprinting by the Measurement of Timing Characteristics”has been submitted to the  Australasian Information Security Conference 2011 (AISC2011), held  17th – 20th January, 2011 in Perth, Australia.
AISC11 is part of the Australasian Computer Science Week 2011 (ACSW2011) which contains a multitude of conferences:

Thanks to Peter for his collaboration and to Vincent for his support!

>> More information about the paper

Abstract—The ability of identifying connected devices could improve the security of a wireless network significantly. It could help to enhance access control mechanisms and would deliver valuable real time information about the connected clients. In this paper we present a technique to create WLAN device fingerprints by measuring timing properties without the use of special purpose hardware. Our proposed process is absolutely passive and can not be detected by the targeted device. The timing measurement is based on a delay caused by the hardware implementation of the CRC checksum algorithm at the network interface card (NIC) of the client. This delay turned out to be significant for a large number of different chipset implementations. As a proof of our concept we present a prototype implementation called WiFinger to evaluate our approach.

VN:F [1.9.3_1094]
Rating: +1 (from 1 vote)
  • Share/Bookmark

Paper accapted at The Ninth International Conference on Cryptology And Network Security (CANS 2010)

A paper about using behavioral fingerprinting to attack a users location privacy in wireless networks has been accapted for presentation at The Ninth International Conference on Cryptology And Network Security (CANS 2010). The paper has been written by me, Peter and Roman.

The conference will be held from 12th to 14th of December 2010 in Kuala Lumpur, Malaysia.

>> More information about the paper.

VN:F [1.9.3_1094]
Rating: +1 (from 1 vote)
  • Share/Bookmark

Paper Published (ACM) – WLAN location determination without active client collaboration

ACM LogoThe paper with the title WLAN location determination without active client collaboration written by Stefan, Udo and me has finally been published by the ACM.

For detailed information please check out this link:

Link to ACM Portal: http://portal.acm.org/citation.cfm?id=1815668#

VN:F [1.9.3_1094]
Rating: +1 (from 1 vote)
  • Share/Bookmark

Paper submitted to CANS 2010

A paper about using behavioral fingerprinting to attack a users location privacy in wireless networks has been submitted to The Ninth International Conference on Cryptology And Network Security (CANS 2010). The paper has been written by me, Peter and Roman.

The conference will be held from 12th to 14th of December 2010 in Kuala Lumpur, Malaysia.

>> More information about the paper.

VN:F [1.9.3_1094]
Rating: 0 (from 0 votes)
  • Share/Bookmark

Programm für die D-A-CH Security 2010 veröffentlicht

Today the official program for D-A-CH Security 2010 conference held in Vienna this September has been pronounced. The conference language is German.

The program can be found here: http://www.syssec.at/ds10_programm/

Topics
  • Risiko- und Sicherheitsmanagement
  • Incident Handling und Business Continuity
  • Sichere elektronische Geschäftsprozesse
  • Multimedia und On-Demand-Dienste
  • Identitäts- und Rechtemanagement
  • Digitale Signaturen und Archivierung
  • Biometrische Verfahren und Anwendungen
  • Computerkriminalität und Gegenmaßnahmen
  • Botnetze, Spam und Phishing
  • Trusted Computing und DRM
  • Security Awareness
  • Secure Embedded Systems
  • Sicherheitsrelevante Anwendungen
  • WLAN, Mobilfunk und mobile Endgeräte
  • Cloud- & Grid-Computing
  • eGovernment, eHealth und eCommerce
  • Kritische Infrastrukturen
  • Sichere Webservices
  • Intrusion Detection und Computer-Forensik
  • Verfügbarkeit und Notfallplanung
  • Sicherheitsinfrastrukturen und PKI
  • Authentifikation und Single-Sign-On
  • Protokollierung und Überwachung
  • Modellierung von Sicherheit
  • Sicherheitstoken, Smartcards und RFID
  • Pervasive und Ubiquitous Computing
  • Netzwerklösungen, VPN und Remote Access
  • Privacy, Datenschutz und Rechtsfragen
  • Best Practice und Fallstudien
  • Folgen, Akzeptanz, Trends & Perspektiven
VN:F [1.9.3_1094]
Rating: 0 (from 0 votes)
  • Share/Bookmark

Paper accepted at i-Know 2010

The paper with the title “RDF Data Analysis with Activation Patterns” written by Peter and me has been accepted for presentation and publication at i-Know 2010.

Thank you for your paper submission and your interest in I-KNOW 2010. This year we received 114 submissions out of which only 34% have been accepted as Full Paper for presentation at I-KNOW 2010.
We are pleased to inform you that your paper RDF Data Analysis with Activation Patterns has been accepted as ** Full Paper ** for presentation at the conference and for publication in the electronic conference proceedings on condition of integrating the recommendations of the reviewers.

Abstract. RDF data can be analyzed with various query languages such as SPARQL or SeRQL. Due to their nature these query languages do not allow the retrieval of results for fuzzy queries. In this paper we present a new method that transforms the information presented by subject-relation-object relations within RDF data into Activation Patterns. These patterns represent a common model that is the basis for a number of sophisticated analysis methods such as semantic relation analysis, semantic search queries,  unsupervised clustering, supervised learning or anomaly detection.
In this paper, we explain the Activation Patterns concept and apply it to an RDF representation of the well known CIA World Factbook.

VN:F [1.9.3_1094]
Rating: +1 (from 1 vote)
  • Share/Bookmark

Paper accepted at DACH Security 2010

The paper with the title “Location Privacy in Kabellosen Netzwerken” has been accepted for publication at the D-A-CH Security 2010 conference held in September in Vienna.

Authors: Günther Lackner and Peter Teufl

Abstract. Kabellose Netzwerke, zu denen neben WiFi auch Mobilfunknetzwerke gezählt werden müssen sind aus unserem Alltag nicht mehr weg zu denken. Durch moderne kryptographische Verfahren sind die Inhalte der Kommunikation in solchen Netzwerken bereits sehr gut gesichert. Ein anderer Aspekt, die Privatsphäre der Benutzer betreffend wurde aber stark vernachlässigt. Dieser Artikel zeigt, dass es sehr einfach möglich ist die Identität und Position von Kommunikationsgeräten und deren Benutzern zu jeder beliebigen Zeit zu bestimmen. Diese Informationen sind als sehr sensibel anzusehen und können in den falschen Händen sehr großen Schaden anrichten.

The final version will be available for download soon…

VN:F [1.9.3_1094]
Rating: +2 (from 2 votes)
  • Share/Bookmark

Paper accepted at MMM-ACNS 2010

The paper with the title From NLP (Natural Language Processing) to MLP (Machine Language Processing) has been accepted at the conference for Mathematical Methods, Models and Architectures for Computer Networks Security 2010 held in St. Petersburg, Russia from September 8 to 11.

More information about the paper can be found in the current work section.

About MMM-ACNS:
The previous International Conferences “Mathematical Methods, Models and Architectures for Computer Networks Security” (MMM-ACNS-2001 (http://space.iias.spb.su/mmm-acns01/), MMM-ACNS-2003 (http://space.iias.spb.su/mmm-acns03/), MMM-ACNS-2005 (http://space.iias.spb.su/mmm-acns05/) and MMM-ACNS-2007 (http://www.comsec.spb.ru/mmm-acns07/)) organized in 2001, 2003, 2005 and 2007 respectively by St. Petersburg Institute for Informatics and Automation, Binghamton University (SUNY) and supported by the European Office of Aerospace Research and Development USAF, Office of Naval Research Global, and Russian Foundation for Basic Research were very successful. These conferences demonstrated the high interest of the international scientific community to the theoretical and practical aspects of the computer network and information security.

The goals of MMM-ACNS-2010 Conference to bring together leading researchers from academia and governmental organizations as well as practitioners to advance the states of the art and practice in the area of computer networks and information security with a focus on novel theoretical aspects of computer network security, facilitate personal interactions and discussions on various aspects of information technologies in conjunction with computer network and information security problems arising in large-scale computer networks.

These conferences demonstrated the high interest of the international scientific community to the theoretical aspects of the computer network and information security and the need for conducting of such conferences as on-going series.

The proposed MMM-ACNS-2010 Conference is intended as a next step in this series and will be focused on theoretical problems in the area under consideration.

Its objectives are to bring together leading researchers from academia and governmental organizations as well as practitioners in the area of computer networks and information security, facilitating personal interactions and discussions on various aspects of information technologies in conjunction with computer network and information security problems arising in large-scale computer networks engaged in information storing, transmitting, and processing.

.

VN:F [1.9.3_1094]
Rating: +1 (from 1 vote)
  • Share/Bookmark

Paper for DACH Security 2010 submitted

Titel: Location Privacy in Kabellosen Netzwerken

Abstract. Kabellose Netzwerke, zu denen neben WiFi auch Mobilfunknetzwerke gezählt werden müssen sind aus unserem Alltag nicht mehr weg zu denken. Durch moderne kryptographische Verfahren sind die Inhalte der Kommunikation in solchen Netzwerken bereits sehr gut gesichert. Ein anderer Aspekt, die Privatsphäre der Benutzer betreffend wurde aber stark vernachlässigt. Dieser Artikel zeigt, dass es sehr einfach möglich ist die Identität und Position von Kommunikationsgeräten und deren Benutzern zu jeder beliebigen Zeit zu bestimmen. Diese Informationen sind als sehr sensibel anzusehen und können in den falschen Händen sehr großen Schaden anrichten.

VN:F [1.9.3_1094]
Rating: 0 (from 2 votes)
  • Share/Bookmark

i-KNOW 2010 Paper submitted

Peter and me submitted a paper to i-KNOW 2010.

For further information please refer to the current work section.

Title: RDF Data Analysis with Activation Patterns

Abstract. RDF data can be analyzed with various query languages such as SPARQL or SeRQL. Due to their nature these query languages do not allow the retrieval of results for fuzzy queries. In this paper we present a new method that transforms the information presented by subject-relation-object relations within RDF data into Activation Patterns. These patterns represent a common model that is the basis for a number of sophisticated analysis methods such as semantic relation analysis, semantic search queries,  unsupervised clustering, supervised learning or anomaly detection.
In this paper, we explain the Activation Patterns concept and apply it to an RDF representation of the well known CIA World Factbook.

VN:F [1.9.3_1094]
Rating: 0 (from 0 votes)
  • Share/Bookmark