News

My Fuzzer Beats Them All! ...Does it?

Fuzzing is a popular method for detecting errors in software code. However, it is difficult to rate the performance of different fuzzing techniques. Prof. Davi’s group has developed a framework that allows a fair comparison of fuzzers based on statistical analysis.

Fuzzing Evaluation Framework Accepted at ESORICS

Our work on the evaluation of fuzzers has been accepted at 26th European Symposium on Research in Computer Security (ESORICS) 2021. In our paper My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers (David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi) we present our novel setup to evaluate and compare different fuzzers.

Erklärvideo „TeeRex: Sicherheitsscanner für Intel SGX-Enklaven”

Trusted Exceution Environments automatisch nach Schwachstellen absuchen mit TeeRex.

Seminar Embedded Security in Sommersemester 2021

Im Sommersemester findet ein Seminar zum Thema Embedded Security statt. In diesem Seminar werden Grundlagen und Methoden der Sicherheitsanalyse solcher eingebetteten Systeme vermittelt. Neben einer theoretischen Ausarbeitung werden die Studierenden hierbei mit unterschiedlichen Tools praktische Erfahrungen sammeln.

Lehre im Sommersemester 2021

Im Sommersemester bietet die Arbeitsgruppe "Sichere Software Systeme " die Bachelorvorlesung "Concurrency" an. Außerdem findet die Master-Projektgruppe "HiFE" statt, die einen High-Speed Fuzzer für Smart Contracts entwickelt.

German IT Security Award: Great Success for paluno Researchers

Every two years, the Horst Görtz Foundation awards a total of 200,000 euros to the best future-relevant innovations in IT security. Tobias Cloosters, Michael Rodler, and Prof. Lucas Davi won the 3rd place (40,000 euros) for their innovative tool TeeRex. It facilitates the vulnerability analysis of Trusted Execution Environments (TEEs). The German IT Security Award is the most prestigious and highest endowed award of its kind in Germany.

Großer Erfolg beim 8. Deutschen IT-Sicherheitspreis

Alle zwei Jahre zeichnet die Horst Görtz Stiftung mit insgesamt 200.000 Euro die besten zukunfts-relevanten Innovationen der IT-Sicherheit aus. Für ihr neuartiges Werkzeug TeeRex zur Schwachstellenanalyse von Trusted Execution Environments, kurz TEEs, hat unsere Gruppe mit Tobias Cloosters, Michael Rodler und Prof. Lucas Davi dabei den 3. Preis (40.000 Euro) erhalten. Der deutsche IT-Sicherheitspreis ist der renommierteste und höchstdotierte Award der Branche. ...

Paper Accepted at NDSS: Framework HERA allows hotpatching of real-time embedded systems

The paper 'HERA: Hotpatching of Embedded Real-time Applications' has been accepted at the Network and Distributed System Security Symposium (NDSS) 2021. We present the first framework to allow hotpatching of real-time embedded systems without any influence on the real-time behavior of the embedded device.

Christian Niesler wins Eurobits Award

With his Master Thesis "Securing Real-time Embedded Systems Through Hotpatching" Christian Niesler wins the Eurobits Award that is endowed with prize money of 1000€. Congratulatons!