Editor

Building Your Own Web Application Firewall as a Service And Forgetting about False Positives

Jun 25, 2020 · 4 min read · deepsec waf web-application-firewall security-architecture web-application ·

Building Your Own Web Application Firewall as a Service And Forgetting about False Positives Juan Berner published in Magdeburger Journal zur Sicherheitsforschung (2020, #19, p. 987-994) Info When a Web Application Firewall (WAF) is presented as a defensive solution to web application attacks, there is usually a …

BitCracker BitLocker meets GPUs

Nov 9, 2019 · 3 min read · editor bitlocker hash sha-256 aes gpu cuda cryptographicattack passwordcracking ·

Share on:

BitCracker BitLocker meets GPUs Elena Agostini and Massimo Bernaschi published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 977-986) Info BitLocker is a full-disk encryption feature available in recent Windows versions. It is designed to protect data by providing encryption for entire volumes and it …

Drones, the New Threat from the Sky

Oct 17, 2019 · 2 min read · - editor drones risks countermeasures critical-infrastructure risk-management signal-hacking-and-disruption ·

Share on:

Drones, the New Threat from the Sky Dominique C. {Brack} published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 969-976) Info This paper is about drones. Drone risks and countermeasures. Drones have become an inherent risk not just for critical infrastructure but also public events (sports, concerts) …

Defense Informs Offense Improves Defense How to Compromise an Industrial Control Systems Network – and How to Defend it

Sep 15, 2019 · 3 min read · editor ics industrial-control-systems trisis crashoverride malware pentest penetration-testing blackenergy ·

Share on:

Defense Informs Offense Improves Defense How to Compromise an Industrial Control Systems Network – and How to Defend it Joseph Slowik published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 960-968) Info ICS attacks have an aura of sophistication, high barriers to entry, and significant investment in …

Efail and other Failures with Encryption and E-Mail Outdated Crypto Standards and HTML Mails as a Security Risk

Sep 2, 2019 · 3 min read · - editor mail encryption gnupg pgp smime cryptography html ·

Share on:

Efail and other Failures with Encryption and E-Mail Outdated Crypto Standards and HTML Mails as a Security Risk Hanno Böck published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 952-959) Info The Efail bug against encrypted e-mails showed a variety of problems with the interaction of outdated …

New Attack Vectors for Mobile Core Networks

Aug 5, 2019 · 2 min read · - editor ipx ss7 interconnection diameter charging 4g 5g-mobile-network ·

Share on:

New Attack Vectors for Mobile Core Networks Silke Holtmanns published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 943-951) Info Mobile network operators connect towards each other through the private interconnection network (IPX). This closed private network enables international calls, data, …

Without a Trace Cybercrime, who are the Defendants?

Jun 29, 2019 · 2 min read · - editor cybercrime law unsolved-cases ·

Share on:

Without a Trace Cybercrime, who are the Defendants? Edith Huber and Bettina Pospisil and Walter Seböck published in Magdeburger Journal zur Sicherheitsforschung (2019, #17, p. 938-942) Info Since 2006, cases of computer crime in Austria have been recorded in official crime statistics under the collective term …

XFLTReaT Unified Tunneling

May 11, 2019 · 2 min read · - editor malware web-application-firewalls penetration-testing bypass-techniques ethical-hacking red-team ·

Share on:

XFLTReaT Unified Tunneling Balazs Bucsay published in Magdeburger Journal zur Sicherheitsforschung (2019, #17, p. 927-937) Info This paper aims to recognize the similarities between existing tunneling solutions and gives advice on possible framework implementation. The reference implementation can be found on Github …

Web Application Firewall Bypassing An Approach for Penetration Testers

Apr 5, 2019 · 2 min read · - editor malware web-application-firewalls penetration-testing bypass-techniques ethical-hacking red-team ·

Share on:

Web Application Firewall Bypassing An Approach for Penetration Testers Khalil Bijjou published in Magdeburger Journal zur Sicherheitsforschung (2019, #17, p. 900-926) Info Security experts perform security assessments of web applications in order to identify vulnerabilities that could be exploited by malicious users. …

Malware Analysis Machine Learning Approaches

Nov 17, 2018 · 2 min read · - editor malware machine-learning malware-analysis deep-learning ·

Share on:

Malware Analysis Machine Learning Approaches Chiheb Chebbi published in Magdeburger Journal zur Sicherheitsforschung (2018, #16, p. 893-899) Info Machine learning is obviously the hottest trend in the tech industry at the moment, thanks to the huge amount of data collected in many organizations. It is so powerful to …