% 
% This file was created by the TYPO3 extension
% bib
% --- Timezone: CEST
% Creation date: 2024-04-20
% Creation time: 14-23-36
% --- Number of references
% 9
% 

@Inproceedings { 2021-krude-nfp-pred,
   title = {Determination of Throughput Guarantees for Processor-based SmartNICs},
   year = {2021},
   month = {12},
   day = {7},
   tags = {maki},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2021/2021-krude-nfp-pred.pdf},
   publisher = {ACM},
   booktitle = {The 17th International Conference on emerging Networking EXperiments and Technologies (CoNEXT '21)},
   ISBN = {978-1-4503-9098-9/21/12},
   DOI = {10.1145/3485983.3494842},
   reviewed = {1},
   author = {Krude, Johannes and R{\"u}th, Jan and Schemmel, Daniel and Rath, Felix and Folbort, Iohannes-Heorh and Wehrle, Klaus}
}

@Inproceedings { 2019-krude-online-reprogramming,
   title = {Online Reprogrammable Multi Tenant Switches},
   year = {2019},
   month = {12},
   day = {9},
   tags = {maki},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2019/2019-krude-online-reprogramming.pdf},
   publisher = {ACM},
   booktitle = {1st ACM CoNEXT Workshop on Emerging in-Network Computing Paradigms (ENCP '19)},
   ISBN = {978-1-4503-7000-4/19/12},
   DOI = {10.1145/3359993.3366643},
   reviewed = {1},
   author = {Krude, Johannes and Hofmann, Jaco and Eichholz, Matthias and Wehrle, Klaus and Koch, Andreas and Mezini, Mira}
}

@Inproceedings { 2019-glebke-in-network-cv,
   title = {Towards Executing Computer Vision Functionality on Programmable Network Devices},
   year = {2019},
   month = {12},
   day = {9},
   tags = {reflexes,maki,internet-of-production},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2019/2019-glebke-in-network-cv.pdf},
   misc2 = {Online},
   publisher = {ACM},
   booktitle = {1st ACM CoNEXT Workshop on Emerging in-Network Computing Paradigms (ENCP '19)},
   language = {en},
   ISBN = {978-1-4503-7000-4/19/12},
   DOI = {10.1145/3359993.3366646},
   reviewed = {1},
   author = {Glebke, Ren{\'e} and Krude, Johannes and Kunze, Ike and R{\"u}th, Jan and Senger, Felix and Wehrle, Klaus}
}

@Inproceedings { 2019-krude-chain-opt,
   title = {Optimizing Data Plane Programs for the Network},
   year = {2019},
   month = {8},
   day = {23},
   abstract = {With the move of Software-defined networking from fixed to programmable data planes, network functions are written with P4 or eBPF for targets such as programmable switches, CPU based flow processors and commodity CPUs.
These data plane programs are, however, limited in per-packet time budget (e.g., 67.2 ns at 10GbE) and program size, making program optimization imperative.
Existing approaches focus on optimizing the distribution of flow rules in fixed data planes or they are limited to a single switch.
We see great potential in integrating the network topology into program optimization.},
   tags = {maki},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2019/2019-krude-chain-opt.pdf},
   publisher = {ACM},
   booktitle = {NetPL '19: ACM SIGCOMM Workshop on Networking and Programming Languages},
   event_place = {Beijing, China},
   ISBN = {978-1-4503-6877-3/19/08},
   DOI = {10.1145/3341561.3349590},
   reviewed = {1},
   author = {Krude, Johannes and Eichholz, Matthias and Winck, Maximilian and Wehrle, Klaus and Mezini, Mira}
}

@Inproceedings { 2019-hohlfeld-bpfperf,
   title = {Demystifying the Performance of XDP BPF},
   year = {2019},
   month = {6},
   day = {25},
   tags = {maki,reflexes},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2019/2019-hohlfeld-bpfperf.pdf},
   publisher = {IEEE},
   booktitle = {IEEE International Conference on Network Softwarization (NetSoft)},
   event_name = {IEEE International Conference on Network Softwarization},
   DOI = {10.1109/NETSOFT.2019.8806651},
   reviewed = {1},
   author = {Hohlfeld, Oliver and Krude, Johannes and Reelfs, Jens Helge and R{\"u}th, Jan and Wehrle, Klaus}
}

@Inproceedings { 2018-krude-circuit,
   title = {Circuit Switched VM Networks for Zero-Copy IO},
   year = {2018},
   month = {8},
   day = {20},
   pages = {1-7},
   tags = {maki},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2018/2018-krude-xocks.pdf},
   publisher = {ACM},
   booktitle = {Proceedings of the 2018 Afternoon Workshop on Kernel Bypassing Networks (KBNets'18)},
   event_place = {Budapest, Hungary},
   event_name = {Afternoon Workshop on Kernel Bypassing Networks},
   event_date = {20.8.2018},
   DOI = {10.1145/3229538.3229539},
   reviewed = {1},
   author = {Krude, Johannes and Stoffers, Mirko and Wehrle, Klaus}
}

@Inproceedings { 2017-teubert-secuware-hugin,
   title = {Hugin: A Scalable Hybrid Android Malware Detection System},
   year = {2017},
   month = {9},
   pages = {168-176},
   abstract = {Mobile operating systems are a prime target of today’s malware authors and cyber criminals. In particular, Google’s Android suffers from an ever increasing number of malware attacks in the form of malicious apps. These typically originate from poorly policed third-party app stores that fail to vet the apps prior to publication. In this paper, we present Hugin, a machine learning-based app vetting system that uses features derived from dynamic, as well as static analysis and thus falls into the scarcely studied class of hybrid approaches. Hugin is unique with respect to using IPC/RPC monitoring as source for dynamically extracted features. Furthermore, Hugin uses a short (and yet effective) feature vector that leads to a high efficiency in training as well as classification. Our evaluation shows that Hugin achieves a detection accuracy of up to 99.74\% on an up-to- date data set consisting of more than 14,000 malware samples and thus, is easily capable of competing with other current systems.},
   keywords = {mobile malware detection; app vetting; machine learning},
   url = {http://www.thinkmind.org/download.php?articleid=securware_2017_10_20_30067},
   publisher = {IARIA},
   booktitle = {SECUWARE 2017},
   event_name = {The Eleventh International Conference on Emerging Security Information, Systems and Technologies Hugin: A Scalable Hybrid Android Malware Detection Syste},
   event_date = {September 2017},
   ISBN = {978-1-61208-582-1},
   extern = {1},
   reviewed = {1},
   author = {Teubert, Dominik and Krude, Johannes and Sch{\"u}ppen, Samuel and Meyer, Ulrike}
}

@Proceedings { 2017-SymPerfPoster,
   title = {SymPerf: Predicting Network Function Performance},
   year = {2017},
   month = {8},
   day = {21},
   tags = {spp,erc,symbiosys,reflexes},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2017/2017-rath-sym-perf-poster.pdf},
   publisher = {ACM},
   event_place = {Los Angeles, USA},
   event_name = {ACM SIGCOMM 2017 Poster},
   event_date = {21.8.2017 - 25.8.2017},
   language = {en},
   ISBN = {978-1-4503-5057-0/17/08},
   DOI = {10.1145/3123878.3131977},
   reviewed = {1},
   author = {Rath, Felix and Krude, Johannes and R{\"u}th, Jan and Schemmel, Daniel and Hohlfeld, Oliver and Bitsch Link, J{\'o} Agila and Wehrle, Klaus}
}

@Inproceedings { 2013-krude-ccsw-sandbox,
   title = {A Versatile Code Execution Isolation Framework with Security First},
   year = {2013},
   month = {11},
   pages = {1-10},
   abstract = {In PaaS architectures, code execution needs to be isolated to protect tenants from unauthorized access to their data by other tenants and to protect the host system from any type of intrusion by other tenants. In this paper we propose a simple and lightweight framework that provides such code execution isolation units. All design decisions taken for our framework follow well-established design principles for protection mechanisms, such that in our design we put security first. Our framework uses the process barrier and the seccomp filter mechanism to restrict access to memory and to the system call interface. For access to additional resources a request delegation scheme is used. We evaluate our implementation on a small PaaS example architecture. For plain computations, the applied techniques do not introduce any overhead.

In general, setup time for isolation units is negligible and the framework achieves acceptable throughput for broad network access. Our work brings tight and versatile isolation units to current unmodified Linux operating systems.},
   publisher = {ACM},
   booktitle = {Proceedings of the 2013 ACM workshop on Cloud computing security workshop (CCSW '13)},
   ISBN = {978-1-4503-2490-8},
   DOI = {10.1145/2517488.2517499},
   extern = {1},
   reviewed = {1},
   author = {Krude, Johannes and Meyer, Ulrike}
}