Publications

SoK: A Taxonomy for Cybersecurity Incident Response Influence Factors
Cybersecurity incident response has emerged as a critical area of interest for both researchers and practitioners. The corpus of …
Thomas Biege, Marius Brockhoff, Jonas Kaspereit, Fabian Ising, Lea Gröber, Sebastian Schinzel
Cite URL
Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to …
Nico Brüggemann, Marvin Dölzer, Marius Brockhoff, Lukas Schmidt, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite URL
Practical Evaluation of the Crypto-Agility Maturity Model
Cryptographic agility is a key prerequisite for maintaining the long-term security of digital communication, particularly in light of …
Leonie Wolf, Samson Umezulike, Gurur Öndarö, Sebastian Schinzel, Fabian Ising
Cite Preprint
BreachHydra: Measuring the Resilience of an Underground Data Breach Forum
Underground forums are thriving markets for illicit goods and services, such as data leaks. While these forums regularly come under the …
Marius Brockhoff, Lukas Schmidt, Fabian Ising, Sebastian Schinzel
Cite URL
Characterizing Hosting and Security Practices for Public-Facing LDAP Servers
The Lightweight Directory Access Protocol (LDAP) is widely used to make structured data available for standardized lookup, which may …
Gustavo Luvizotto Cesar, Gurur Öndarö, Jonas Kaspereit, Fabian Ising, Sebastian Schinzel, Mattijs Jonker, Ralph Holz
Cite URL
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale
We report on the first broad analysis of real-world S/MIME certificates for digitally signing and encrypting emails. We collected more …
Gurur Öndarö, Jonas Kaspereit, Samson Umezulike, Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Cite URL
LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
The Lightweight Directory Access Protocol (LDAP) is the standard technology to query information stored in directories. These …
Jonas Kaspereit, Gurur Öndarö, Gustavo Luvizotto Cesar, Simon Ebbers, Fabian Ising, Christoph Saatjohann, Mattijs Jonker, Ralph Holz, Sebastian Schinzel
Cite URL
KIM: Kaos In der Medizin
Die sichere E-Mail-Infrastruktur für Ärztinnen, Apothekerinnen, Krankenversicherungen und Kliniken in Deutschland, KIM - Kommunikation …
Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Dissertation: Exploring Corner Cases of Modern Applied Cryptography
The advent of instantaneous communication via the Internet in the 80s and 90s has revolutionized the way we communicate. Suddenly, we …
Fabian Ising
PDF Cite
Content-Type: Multipart/Oracle - Tapping into Format Oracles in Email End-to-End Encryption
S/MIME and OpenPGP use cryptographic constructions repeatedly shown to be vulnerable to format oracle attacks in protocols like TLS, …
Fabian Ising, Damian Poddebniak, Tobias Kappert, Christoph Saatjohann, Sebastian Schinzel
Cite URL
Sicherheit Medizintechnischer Protokolle im Krankenhaus
Medizinische Einrichtungen waren in den letzten Jahren immer wieder von Cyber-Angriffen betroffen. Auch wenn sich diese Angriffe …
Christoph Saatjohann, Fabian Ising, Matthias Gierlings, Dominik Noss, Sascha Schimmler, Alexander Klemm, Leif Grundmann, Tilman Frosch, Sebastian Schinzel
Cite DOI URL
Grand Theft App: Digital Forensics of Vehicle Assistant Apps
Due to the increasing connectivity of modern vehicles, collected data is no longer only stored in the vehicle itself but also …
Simon Ebbers, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI URL
Why TLS Is Better without STARTTLS: A Security Analysis of STARTTLS in the Email Context
TLS is one of today’s most widely used and best-analyzed encryption technologies. However, for historical reasons, TLS for email …
Damian Poddebniak, Fabian Ising, Hanno Böck, Sebastian Schinzel
Cite URL
CORSICA: Cross-Origin Web Service Identification
Vulnerabilities in private networks are difficult to detect for attackers outside of the network. While there are known methods for …
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
Cite DOI URL
STALK: Security Analysis of Smartwatches for Kids
Smart wearable devices become more and more prevalent in the age of the Internet of Things. While people wear them as fitness trackers …
Christoph Saatjohann, Fabian Ising, Luise Krings, Sebastian Schinzel
Cite DOI URL
Office Document Security and Privacy
OOXML and ODF are the de facto standard data formats for word processing, spreadsheets, and presentations. Both are XML-based, …
Jens Müller, Fabian Ising, Christian Mainka, Vladislav Mladenov, Sebastian Schinzel, Jörg Schwenk
Cite URL
Practical Decryption exFiltration: Breaking PDF Encryption
The Portable Document Format, better known as PDF, is one of the most widely used document formats worldwide, and in order to ensure …
Jens Müller, Fabian Ising, Vladislav Mladenov, Christian Mainka, Sebastian Schinzel, Jörg Schwenk
Cite DOI URL
Efail: Breaking S/MIME and OpenPGP Email Encryption Using Exfiltration Channels
OpenPGP and S/MIME are the two prime standards for providing end-to-end security for emails. We describe novel attacks built upon a …
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
Cite URL
Master's Thesis: Analyzing Oracle Attacks against E-mail End-to-End Encryption
Fabian Ising
Cite