% 
% This file was created by the TYPO3 extension
% bib
% --- Timezone: CEST
% Creation date: 2024-04-16
% Creation time: 16-34-38
% --- Number of references
% 4
% 

@Poster { 2024-dahlmanns-sul,
   title = {Poster: Trusted Execution Environment-basierte Sicherheit für digitale Umspannwerke},
   year = {2024},
   month = {3},
   day = {5},
   number = {19},
   tags = {ven2us},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2024/2024-dahlmanns-slt.pdf},
   organization = {VDE ETG/FNN-Tutorial 2024 Schutz- und Leittechnik, March 05-06, 2024, Leipzig, Germany},
   event_place = {Leipzig, Germany},
   event_name = {VDE ETG/FNN-Tutorial 2024 Schutz- und Leittechnik},
   event_date = {March 05-06, 2024},
   reviewed = {1},
   author = {Dahlmanns, Markus and Wark, Andreas and Genzel, Carl-Heinz and Wehrle, Klaus}
}

@Inproceedings { 2023-dahlmanns-docker,
   title = {Secrets Revealed in Container Images: An Internet-wide Study on Occurrence and Impact},
   year = {2023},
   month = {7},
   day = {10},
   pages = {797-811},
   abstract = {Containerization allows bundling applications and their dependencies into a single image. The containerization framework Docker eases the use of this concept and enables sharing images publicly, gaining high momentum. However, it can lead to users creating and sharing images that include private keys or API secrets—either by mistake or out of negligence. This leakage impairs the creator's security and that of everyone using the image. Yet, the extent of this practice and how to counteract it remains unclear.

In this paper, we analyze 337,171 images from Docker Hub and 8,076 other private registries unveiling that 8.5\% of images indeed include secrets. Specifically, we find 52,107 private keys and 3,158 leaked API secrets, both opening a large attack surface, i.e., putting authentication and confidentiality of privacy-sensitive data at stake and even allow active attacks. We further document that those leaked keys are used in the wild: While we discovered 1,060 certificates relying on compromised keys being issued by public certificate authorities, based on further active Internet measurements, we find 275,269 TLS and SSH hosts using leaked private keys for authentication. To counteract this issue, we discuss how our methodology can be used to prevent secret leakage and reuse.},
   keywords = {network security; security configuration; secret leakage; container},
   tags = {ven2us, internet-of-production,},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2023/2023-dahlmanns-asiaccs.pdf},
   publisher = {ACM},
   booktitle = {Proceedings of the 2023 ACM Asia Conference on Computer and Communications Security (ASIACCS '23), July 10-14, 2023, Melbourne, VIC, Australia},
   event_place = {Melbourne, VIC, Australia},
   event_name = {ASIA CCS '23},
   event_date = {July 10-14, 2023},
   ISBN = {979-8-4007-0098-9/23/07},
   DOI = {10.1145/3579856.3590329},
   reviewed = {1},
   author = {Dahlmanns, Markus and Sander, Constantin and Decker, Robin and Wehrle, Klaus}
}

@Inproceedings { 2023-lorz-cired,
   title = {Interconnected grid protection systems - reference grid for testing an adaptive protection scheme},
   year = {2023},
   pages = {3286-3290},
   tags = {ven2us},
   booktitle = {27th International Conference on Electricity Distribution (CIRED 2023), Rome, Italy, June 12-15, 2023},
   event_place = {Rome, Italy},
   event_name = {International Conference \& Exhibition on Electricity Distribution (CIRED)},
   event_date = {June 12-15, 2023},
   DOI = {10.1049/icp.2023.0864},
   reviewed = {1},
   author = {Lorz, Tobias and Jaeger, Johann and Selimaj, Antigona and Hacker, Immanuel and Ulbig, Andreas and Heckel, Jan-Peter and Becker, Christian and Dahlmanns, Markus and Fink, Ina Berenice and Wehrle, Klaus and Erichsen, Gerrit and Schindler, Michael and Luxenburger, Rainer and Lin, Guosong}
}

@Inproceedings { lorenz-ven2us-2022,
   title = {Interconnected network protection systems - the basis for the reliable and safe operation of distribution grids with a high penetration of renewable energies and electric vehicle},
   year = {2022},
   abstract = {Power grids are increasingly faced with the introduction of decentralized, highly volatile power supplies from renewable energies and high loads occurring from e-mobility. However, today’s static grid protection cannot manage all upcoming conditions while providing a high level of dependability and security. It forms a bottleneck of a future decarbonizing grid development. 

In our research project, we develop and verify an adaptive grid protection algorithm. It calculates situation dependent protection parameters for the event of power flow shifts and topology changes caused by volatile power supplies due to the increase of renewable generation and the rapid expansion of e-mobility. As a result the distribution grid can be operated with the optimally adapted protection parameters and functions for changing operating states. To safely adjust the values on protection hardware in the field, i.e., safe from hardware failures and cyberattacks, we research resilient and secure communication concepts for the adaptive and interconnected grid protection system. Finally, we validate our concept and system by demonstrations in the laboratory and field tests.},
   tags = {ven2us},
   booktitle = {Proceedings of the CIRED workshop on E-mobility and power distribution systems 2022, June 2-3, 2022, Porto, Portugal},
   event_place = {Porto},
   event_name = {CIRED workshop on E-mobility and power distribution systems 2022},
   event_date = {June 2-3, 2022},
   DOI = {10.1049/icp.2022.0768},
   reviewed = {1},
   author = {Lorenz, Matthias and Pletzer, Tobias Markus and Schuhmacher, Malte and Sowa, Torsten and Dahms, Michael and Stock, Simon and Babazadeh, Davood and Becker, Christian and Jaeger, Johann and Lorz, Tobias and Dahlmanns, Markus and Fink, Ina Berenice and Wehrle, Klaus and Ulbig, Andreas and Linnartz, Philipp and Selimaj, Antigona and Offergeld, Thomas}
}