% 
% This file was created by the TYPO3 extension
% bib
% --- Timezone: CEST
% Creation date: 2024-05-10
% Creation time: 10-29-32
% --- Number of references
% 4
% 

@Inproceedings { 2024_dahlmanns_ipv6-deployments,
   title = {Unconsidered Installations: Discovering IoT Deployments in the IPv6 Internet},
   year = {2024},
   month = {5},
   day = {10},
   abstract = {Internet-wide studies provide extremely valuable insight into how operators manage their Internet of Things (IoT) deployments in reality and often reveal grievances, e.g., significant security issues. However, while IoT devices often use IPv6, past studies resorted to comprehensively scan the IPv4 address space. To fully understand how the IoT and all its services and devices is operated, including IPv6-reachable deployments is inevitable-although scanning the entire IPv6 address space is infeasible. In this paper, we close this gap and examine how to best discover IPv6-reachable IoT deployments. To this end, we propose a methodology that allows combining various IPv6 scan direction approaches to understand the findability and prevalence of IPv6-reachable IoT deployments. Using three sources of active IPv6 addresses and eleven address generators, we discovered 6658 IoT deployments. We derive that the available address sources are a good starting point for finding IoT deployments. Additionally, we show that using two address generators is sufficient to cover most found deployments and save time as well as resources. Assessing the security of the deployments, we surprisingly find similar issues as in the IPv4 Internet, although IPv6 deployments might be newer and generally more up-to-date: Only 39\% of deployments have access control in place and only 6.2\% make use of TLS inviting attackers, e.g., to eavesdrop sensitive data.},
   keywords = {Internet of Things, security, Internet measurements, IPv6, address generators},
   tags = {internet-of-production},
   publisher = {IEEE},
   booktitle = {Proceedings of the 2024 IEEE/IFIP Network Operations and Management Symposium (NOMS '24), May 6-10, 2024, Seoul, Korea},
   event_place = {Seoul, Korea},
   event_name = {2024 IEEE Network Operations and Management Symposium},
   event_date = {May 6-10, 2024},
   state = {accepted},
   reviewed = {1},
   author = {Dahlmanns, Markus and Heidenreich, Felix and Lohm{\"o}ller, Johannes and Pennekamp, Jan and Wehrle, Klaus and Henze, Martin}
}

@Inproceedings { 2024-dahlmanns-doctoralsym,
   title = {Protocol Security in the Industrial Internet of Things},
   year = {2024},
   month = {5},
   day = {10},
   abstract = {Advances like Industry 4.0 lead to a rising number of Internet-connected industrial deployments and thus an Industrial Internet of Things with growing attack vectors. To uphold a secure and safe operation of these deployments, industrial protocols nowadays include security features, e.g., end-to-end secure communication. However, so far, it is unclear how well these features are used in practice and which obstacles might prevent operators from securely running their deployments. In this research description paper, we summarize our recent research activities to close this gap. Specifically, we show that even secure-by-design protocols are by far no guarantee for secure deployments. Instead, many deployments still open the doors for eavesdropping attacks or malicious takeovers. Additionally, we give an outlook on how to overcome identified obstacles allowing operators to configure their deployments more securely.},
   publisher = {IEEE},
   booktitle = {Proceedings of the 2024 IEEE/IFIP Network Operations and Management Symposium (NOMS '24), May 6-10, 2024, Seoul, Korea},
   event_place = {Seoul, Korea},
   event_name = {2024 IEEE Network Operations and Management Symposium},
   event_date = {May 6-10, 2024},
   state = {accepted},
   reviewed = {1},
   author = {Dahlmanns, Markus and Wehrle, Klaus}
}

@Poster { 2024-dahlmanns-sul,
   title = {Poster: Trusted Execution Environment-basierte Sicherheit für digitale Umspannwerke},
   year = {2024},
   month = {3},
   day = {5},
   number = {19},
   tags = {ven2us},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2024/2024-dahlmanns-slt.pdf},
   organization = {VDE ETG/FNN-Tutorial 2024 Schutz- und Leittechnik, March 05-06, 2024, Leipzig, Germany},
   event_place = {Leipzig, Germany},
   event_name = {VDE ETG/FNN-Tutorial 2024 Schutz- und Leittechnik},
   event_date = {March 05-06, 2024},
   reviewed = {1},
   author = {Dahlmanns, Markus and Wark, Andreas and Genzel, Carl-Heinz and Wehrle, Klaus}
}

@Inproceedings { 2024-dahlmanns-fps,
   title = {Collectively Enhancing IoT Security: A Privacy-Aware Crowd-Sourcing Approach},
   year = {2024},
   volume = {14551},
   abstract = {Security configurations remain challenging for trained administrators. Nowadays, due to the advent of the Internet of Things (IoT), untrained users operate numerous and heterogeneous Internet-facing services in manifold use case-specific scenarios. In this work, we close the growing gap between the complexity of IoT security configuration and the expertise of the affected users. To this end, we propose ColPSA, a platform for collective and privacy-aware security advice that allows users to optimize their configuration by exchanging information about what security can be realized given their IoT deployment and scenario.},
   editor = {Mohamed Mosbah, Florence S{\`e}des, Nadia Tawbi, Toufik Ahmed, Nora Boulahia-Cuppens, Joaquin Garcia-Alfaro},
   publisher = {Springer Cham},
   series = {Lecture Notes in Computer Science},
   booktitle = {Proceedings of the 16th International Symposium on Foundations and Practice of Security (FPS '23), December 11-13, 2023, Bordeaux, France},
   event_place = {Bordeaux, France},
   event_name = {International Symposium on Foundations and Practice of Security 2023 (FPS 23)},
   event_date = {December 11-13, 2023},
   state = {unpublished},
   DOI = {10.1007/978-3-031-57540-2_2},
   reviewed = {1},
   author = {Dahlmanns, Markus and Matzutt, Roman and Dax, Chris and Wehrle, Klaus}
}