News

Großer Erfolg beim 8. Deutschen IT-Sicherheitspreis

Alle zwei Jahre zeichnet die Horst Görtz Stiftung mit insgesamt 200.000 Euro die besten zukunfts-relevanten Innovationen der IT-Sicherheit aus. Für ihr neuartiges Werkzeug TeeRex zur Schwachstellenanalyse von Trusted Execution Environments, kurz TEEs, hat unsere Gruppe mit Tobias Cloosters, Michael Rodler und Prof. Lucas Davi dabei den 3. Preis (40.000 Euro) erhalten. Der deutsche IT-Sicherheitspreis ist der renommierteste und höchstdotierte Award der Branche. ...

Paper Accepted at NDSS: Framework HERA allows hotpatching of real-time embedded systems

The paper 'HERA: Hotpatching of Embedded Real-time Applications' has been accepted at the Network and Distributed System Security Symposium (NDSS) 2021. We present the first framework to allow hotpatching of real-time embedded systems without any influence on the real-time behavior of the embedded device.

Christian Niesler wins Eurobits Award

With his Master Thesis "Securing Real-time Embedded Systems Through Hotpatching" Christian Niesler wins the Eurobits Award that is endowed with prize money of 1000€. Congratulatons!

CSAW'20 Best Paper Finalist: TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves

Das Paper „TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves“ von Tobias Cloosters, Michael Rodler und Lucas Davi wurde von CSAW Europe in die Finalrunde der zehn besten Paper des Jahres 2020 aufgenommen.

New Technology Fixes Security Vulnerabilities in Smart Contracts

Smart Contracts have made Ethereum the world's second largest crypto currency. However, recent criminal attacks exploited errors in the programmed contracts. Our research group, together with partners from industry, has developed and evaluated a technique that enables published smart contracts to be improved instantly.

New Technology Fixes Security Vulnerabilities in Smart Contracts

Smart contracts have made Ethereum the world's second largest crypto currency. However, recent criminal attacks have exploited errors in the contracts programmed. Together with partners, the paluno working group of Prof. Lucas Davi has developed and evaluated a technique that enables published smart contracts to be improved instantly.

New Research Assistant

In October Christian Niesler joined the group of Prof. Lucas Davi.

Lectures in the Winter Term 2020/2021

We have two lectures and a project group in the winter term.

Danger to Sensitive Data

In the course of our research on Trusted Execution Environments we discovered multiple vulnerabilities in security-critical software running in protected memory areas of modern Intel processors. In the worst-case scenario, harmful actions could be infiltrated into sensitive programs, e.g. into the software of fingerprint scanners. With the help of our team the affected vendors already patched their software.