News

Seminar Embedded Security in Sommersemester 2022

Im Sommersemester findet ein Seminar zum Thema Embedded Security statt. In diesem Seminar werden Grundlagen und Methoden der Sicherheitsanalyse solcher eingebetteten Systeme vermittelt. Der Schwerpunkt dieses Seminars liegt in der schriftlichen Ausarbeitung, es werden aber auch praktische Probleme der Security von Embedded Devices behandelt.

Protection for Safety-Critical Systems

Trustworthiness is the basis for every good collaboration. This applies to humans as well as machines. Professor Lucas Davi and his team from the software engineering institute paluno at the University of Duisburg-Essen have developed a solution to check the integrity of embedded devices without affecting their runtime behavior.

New Security Solution for Embedded Realtime Systems

Our work on "software-based attestation for realtime systems" was presented in November on the A* conference CCS.

My Fuzzer Beats Them All! ...Does it?

Fuzzing is a popular method for detecting errors in software code. However, it is difficult to rate the performance of different fuzzing techniques. Prof. Davi’s group has developed a framework that allows a fair comparison of fuzzers based on statistical analysis.

Fuzzing Evaluation Framework Accepted at ESORICS

Our work on the evaluation of fuzzers has been accepted at 26th European Symposium on Research in Computer Security (ESORICS) 2021. In our paper My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers (David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi) we present our novel setup to evaluate and compare different fuzzers.

Erklärvideo „TeeRex: Sicherheitsscanner für Intel SGX-Enklaven”

Trusted Exceution Environments automatisch nach Schwachstellen absuchen mit TeeRex.

Seminar Embedded Security in Sommersemester 2021

Im Sommersemester findet ein Seminar zum Thema Embedded Security statt. In diesem Seminar werden Grundlagen und Methoden der Sicherheitsanalyse solcher eingebetteten Systeme vermittelt. Neben einer theoretischen Ausarbeitung werden die Studierenden hierbei mit unterschiedlichen Tools praktische Erfahrungen sammeln.

Lehre im Sommersemester 2021

Im Sommersemester bietet die Arbeitsgruppe "Sichere Software Systeme " die Bachelorvorlesung "Concurrency" an. Außerdem findet die Master-Projektgruppe "HiFE" statt, die einen High-Speed Fuzzer für Smart Contracts entwickelt.

German IT Security Award: Great Success for paluno Researchers

Every two years, the Horst Görtz Foundation awards a total of 200,000 euros to the best future-relevant innovations in IT security. Tobias Cloosters, Michael Rodler, and Prof. Lucas Davi won the 3rd place (40,000 euros) for their innovative tool TeeRex. It facilitates the vulnerability analysis of Trusted Execution Environments (TEEs). The German IT Security Award is the most prestigious and highest endowed award of its kind in Germany.