Reverse Engineering of Web Cookies: When is too late for your private data?

Nowadays, the online industry contributes to a multi-billion dollar business, facilitates most of the population's everyday activities, and processes vast amounts of data, including personal data. Current work aims to explore the inconsistency or consistency of the content obtained by the websites to generate cookies based on various data that...

Scaling Up, Staying Secure: Assessing the Cyber Risks of Distributed Energy Resources in the Smart Grid

Distributed Energy Resources (DER), like solar panels, are projected to take over power generation responsibilities. This will happen during the transition of the current power grid to the Smart Grid. Due to the importance of this power to society, it is crucial that the grid stays stable.<br/><br/>DER devices are similar to IoT devices in scale...

Attacks on Searchable Symmetric Encryption Systems: Revisiting Similar-data and File Injection Attacks

The amount of data individuals create keeps increasing every year to the point that the data cannot be stored on a single device anymore. Cloud storage provides a solution for this problem, but not everybody wants the cloud storage service providers to peek at their data and they thus encrypt their data before storing it on the service provider...

Hardening Cookies - Preventing Use of Stolen Cookies by Third Parties

In the modern day there exist many different ways that someone can steal your authentication cookies. Each of those ways needs to be mitigated through many different solutions. Would it not be better if instead of preventing theft, we could prevent the use of stolen cookies? This thesis therefore researches both existing and novel solutions that...

RPL-based Passive OS Fingerprinting in Low-power and Lossy Wireless Sensor Networks

Since the introduction of networking protocols for Low-power and Lossy Networks (LLN), many implementations have been created in the form of (real-time) Operating Systems (OS), simplifying their usage and making the technology more widely available. The low cost and low complexity of LLNs allow for large-scaled wireless sensor deployments,...

Measuring the Impact of Certificate Transparency on Scanning Traffic

Certificate transparency (CT) is a system that publishes all issued certificates so that they can be audited and monitored by any party. This allows to detect mis­issued certificates quickly and catch the misbehaving certificate authorities. CT makes the certificate ecosystem more transparent and less reliant on trust that trusted certificate...