% % This file was created by the TYPO3 extension % bib % --- Timezone: UTC % Creation date: 2025-03-16 % Creation time: 09-26-52 % --- Number of references % 4 % @Inproceedings { 2025-wolsing-geco, title = {GeCos Replacing Experts: Generalizable and Comprehensible Industrial Intrusion Detection}, year = {2025}, month = {8}, url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2025/2025-wolsing-geco.pdf}, booktitle = {Proceedings of the 34th USENIX Security Symposium (USENIX Sec)}, event_place = {Seattle, WA, USA}, event_name = {34th USENIX Security Symposium}, event_date = {August 13-15, 2025}, state = {accepted}, reviewed = {1}, author = {Wolsing, Konrad and Wagner, Eric and Lux, Luisa and Wehrle, Klaus and Henze, Martin} } @Inproceedings { 2025-wagner-caiba, title = {CAIBA: Multicast Source Authentication for CAN Through Reactive Bit Flipping}, year = {2025}, month = {6}, booktitle = {Proceedings of the 2025 IEEE 10th European Symposium on Security and Privacy (EuroS\&P)}, event_place = {Venice, Italy}, event_name = {10th European Symposium on Security and Privacy}, event_date = {June 30 - July 4, 2025}, state = {accepted}, reviewed = {1}, author = {Wagner, Eric and Basels, Frederik and Bauer, Jan and Zimmermann, Till and Wehrle, Klaus and Henze, Martin} } @Inproceedings { 2025-fink-hybridmon, title = {Advancing Network Monitoring with Packet-Level Records and Selective Flow Aggregation}, year = {2025}, month = {5}, abstract = {Due to its superior efficiency, network operators frequently prefer flow monitoring over full packet captures. However, packet-level information is crucial for the timely and reliable detection, investigation, and mitigation of security incidents. Currently, no solution effectively balances these two contradicting approaches, forcing network operators to compromise between efficiency and accuracy. In this paper, we thus propose HybridMon, a hybrid solution that combines condensed packet-level monitoring with selective flow-based aggregation to strike a new balance between efficiency and accuracy. Operating on the data plane of P4-programmable switches, HybridMon enables fine-grained, practical, and flexible network monitoring at Tbps speeds. We validate the effectiveness of HybridMon through extensive evaluations using Internet backbone and university campus traffic traces, demonstrating its reliability and performance in network forensics and intrusion detection contexts. Our results show that HybridMon reliably monitors all flows while reducing the output bandwidth to 12 \% to 20 \% compared to packet monitoring when exporting standard features.}, keywords = {Security Services; Control and Data Plane Programmability; Monitoring and Measurements}, url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2025/2025-fink-hybridmon.pdf}, publisher = {IEEE}, booktitle = {Proceedings of the 2025 IEEE/IFIP Network Operations and Management Symposium (NOMS '25), May 12-16, 2025, Honolulu, HI, USA}, event_place = {Honolulu, HI, USA}, event_name = {2025 IEEE/IFIP Network Operations and Management Symposium}, event_date = {May 12-16, 2025}, state = {accepted}, reviewed = {1}, author = {Fink, Ina Berenice and Kunze, Ike and Hein, Pascal and Pennekamp, Jan and Standaert, Benjamin and Wehrle, Klaus and R{\"u}th, Jan} } @Inproceedings { 2025_querfurth_transformer, title = {Transformer-Based Integrative Patient Representations from Single-Cell RNA Data}, year = {2025}, month = {4}, day = {28}, keywords = {health; rfc; rust}, booktitle = {Learning Meaningful Representations of Life Workshop (LMRL '25), co-located with the 13th International Conference on Learning Representations (ICLR '25), April 24-28, 2025, Singapore, Singapore}, event_place = {Singapore, Singapore}, event_date = {April 24-28, 2025}, state = {accepted}, reviewed = {1}, author = {von Querfurth, Benedikt and Lohm{\"o}ller, Johannes and Pennekamp, Jan and Bleckwehl, Tore and Kramann, Rafael and Wehrle, Klaus and Hayat, Sikander} }