News

Fingerprint Scanner

Danger to Sensitive Data

Security experts from paluno – The Ruhr Institute for Software Technology at the University of Duisburg-Essen revealed multiple vulnerabilities in security-critical software running in protected memory areas of modern Intel processors. In the worst-case scenario, harmful actions could be infiltrated into sensitive programs, e.g. into the software of fingerprint scanners. With the help of the researchers many vendors already patched their software.

DFG Funding for Research Project in the Field of Nano-Security

"RAINCOAT - Randomization in Secure Nano-Scale Microarchitectures" is a joint project of Lucas Davi and Tim Güneysu working together in the cluster of excellence CASA.

Sicherheitslücke in IP-Webcam gefunden

In der Bachelorarbeit von Lasse Bruns wurde die Sicherheit von IP-Webcams untersucht. IP-Webcams erlauben es dem Benutzer, über das Internet das Kamerabild abzurufen. Hierbei wurde eine Lücke festgestellt, die es erlaubt hat, ein unverschlüsseltes Backup der Konfigurationsdateien herunterzuladen. Dieses Backup enthält alle Einstellungen der Kamera, aber auch die Nutzernamen und Passwörter.

DFG-Project RAINCOAT started

In order to maintain the increasing chip performance while simultaneously advancing miniaturization, manufactures of modern memory- and processing units are increasingly relying on highly optimized, parallelized microarchitectures. With recent microarchitectural attacks like Rowhammer, Spectre and Meltown, it has been demonstrated, that such optimizations may cause unforeseen security risks.

Bachelor Seminar in the Summer Term 2020

In the summer term, we offer a bachelor seminar on Vulnerability Detection and Analysis.

TEE Presentation at INRIA Institute in Rennes, France

A trusted execution environment introduces a hardware-based protection environment for programm code and data. The TEE ensures that neither malicious code nor a compromised operating system can access code and data contained in the TEE. Lucas Davi gave a presentation on the issue of memory corruption attacks in the context of TEEs at the INRIA Institute in Rennes, France.

Re-Entrancy Detection up to Block 8 Million with Sereum

After publishing our Paper on "Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks" at NDSS 2019 we continued running experiments to identify new potential attacks happening in recent blocks of the Ethereum blockchain. We have published the raw data produced by our tool Sereum in a repository on github.com.

Prof. Davi joins Editorial Board of ACM TOPS

Lucas Davi joins as Associate Editor the Editorial Board of the renowned ACM Transactions on Privacy and Security (TOPS). ACM TOPS publishes high-quality research results in the fields of information and system security and privacy.

Bachelor Seminars in the Winter Term 2019/2020

In the winter term, we offer two bachelor seminars with the topics Malware Analysis and Vulnerability Detection and Analysis.