It is about the administrative costs Marcus J. Ranum published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 751-753) Info Everything that's old is new again, and if you work in security long enough, you'll see the same ideas re-invented and marketed as the new new thing. Or, you see solutions in …

Read More

Malicious Hypervisor Threat Phase Two: How to Catch the Hypervisor Mikhail Utin published in Magdeburger Journal zur Sicherheitsforschung (2017, #13, p. 754-771) Info In this article we're addressing the matters discussed at DeepSec 2014 (Utin M. 2014) and 2016 (Utin M. 2016) including the current status of the …

Read More

Applicability of Criminal Law and Jus ad Bellum to Cyber-Incidents Oscar Serrano and Florin-Răzvan Radu and Ele-Marit Eomois published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 715-724) Info Despite current efforts to adapt existing legal instruments to regulate hostile activities in cyber space, …

Read More

Bypassing McAfee’s Application Whitelisting for Critical Infrastructure Systems René Freingruber published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 705-714) Info This paper describes the results of the research conducted by SEC Consult Vulnerability Lab on the security of McAfee Application …

Read More

A Death in Athens The Inherent Vulnerability of »Lawful Intercept« James Bamford published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 725-741) Info I will discuss the »Athens Affair,« the subject of a recent investigation by me in The Intercept. In 2004, the NSA and CIA worked secretly with the …

Read More

ZigBee Exploited The good, the bad and the ugly Tobias Zillner published in Magdeburger Journal zur Sicherheitsforschung (2016, #12, p. 699-704) Info The Internet of Things (IoT) is an emerging trend. IoT involves the integration of digital and wireless technologies in physical objects and systems, especially those …

Read More

Civil Society Organisation (CSO) participation in the European Security Research Programme (ESRP) Frank Balzer and Christoph Henseler published in Magdeburger Journal zur Sicherheitsforschung (2016, #11, p. 691-698) Info As one might expect, the interdisciplinary and multi-accessible area of the ESRP shows a broad …

Read More

Extending a Legacy Platform Providing a Minimalistic, Secure Single-Sign-On-Library Bernhard Göschlberger and Sebastian Göttfert published in Magdeburger Journal zur Sicherheitsforschung (2016, #11, p. 686-690) Info Despite decades of security research and authentication standards there is still a vast amount of …

Read More

IT-Sicherheit in der Wasserversorgung Schutz kritischer Infrastrukturen Stefan Schumacher published in Magdeburger Journal zur Sicherheitsforschung (2016, #11, p. 667-685) Info Informationstechnische Systeme werden in immer mehr industriellen Bereichen eingesetzt. Seien es klassische Regelungstechnische Systeme, SCADA …

Read More

IT Security Compliance Management can make sense Adrian Wiesmann published in Magdeburger Journal zur Sicherheitsforschung (2015, #10, p. 661-666) Info What kind of internal and external controls from regulations and other sources are there? What is IT-Risk and IT-Compliance management? Why and for whom does it matter? …

Read More