Detection of critical infrastructure devices on the public Internet

Supervisory Control and Data Acquisition (SCADA) systems are sometimes exposed on the public Internet. It is possible to quickly and efficiently identify such exposed services. They are commonly part of critical infrastructure, so they need to be protected against cyber attacks. In the past, researchers have scanned the Internet to detect such...

Rendering Non-Euclidean Space in Virtual Reality Using Portals

Simulating non-Euclidean geometry in virtual reality is of interest to a wide variety of fields of research. However it is still quite a challenge. Various methods are already known, but they vary greatly in performance and applicability. This paper compares some methods of rendering a non-Euclidean space. We focus on the order-5 square tiling...

Increasing privacy-related transparency on the web using a self-disclosing standard

Large amounts of trackers and other data collection forms increasingly invade users’ privacy on the web. The General Data Protection Regulation (GDPR) aims to address these issues in Europe, but many violations are still made, and overall transparency is low. However, GDPR auditing frameworks and mechanisms are still missing. Weaddress this...

Blockchain-Based Verifiable and Privacy-Preserving Machine Learning Inference

The Machine Learning (ML) technology has taken the world by storm since it equipped the machines with previously unimaginable decision-making capabilities. However, building powerful ML models is not an easy task, but the demand for their utilization in different industries and areas of expertise is high. This was recognized by entities that...

Scaling Up, Staying Secure: Assessing the Cyber Risks of Distributed Energy Resources in the Smart Grid

Distributed Energy Resources (DER), like solar panels, are projected to take over power generation responsibilities. This will happen during the transition of the current power grid to the Smart Grid. Due to the importance of this power to society, it is crucial that the grid stays stable.<br/><br/>DER devices are similar to IoT devices in scale...

Reverse Engineering of Web Cookies: When is too late for your private data?

Nowadays, the online industry contributes to a multi-billion dollar business, facilitates most of the population's everyday activities, and processes vast amounts of data, including personal data. Current work aims to explore the inconsistency or consistency of the content obtained by the websites to generate cookies based on various data that...

RPL-based Passive OS Fingerprinting in Low-power and Lossy Wireless Sensor Networks

Since the introduction of networking protocols for Low-power and Lossy Networks (LLN), many implementations have been created in the form of (real-time) Operating Systems (OS), simplifying their usage and making the technology more widely available. The low cost and low complexity of LLNs allow for large-scaled wireless sensor deployments,...

Analyzing the Use of CNAME Cloaking in the Wild

CNAME (Canonical Name) cloaking has emerged as a deceptive technique employed by website operators to obfuscate the true origin of their content. This master thesis aims to comprehensively examine the utilization and prevalence of CNAME cloaking across the web.<br/><br/>To achieve this, a custom program was developed to crawl websites and gather...

Searchable Symmetric Encryption Attacks: More power with more knowledge

A searchable symmetric encryption (SSE) scheme allows a user to securely perform a keyword search on an encrypted database. This search capability is useful but comes with the price of unintentional information leakage. An attacker abuses leakage to steal confidential information by launching SSE attacks. In this work, our goal is to design a...

Measuring the Impact of Certificate Transparency on Scanning Traffic

Certificate transparency (CT) is a system that publishes all issued certificates so that they can be audited and monitored by any party. This allows to detect mis­issued certificates quickly and catch the misbehaving certificate authorities. CT makes the certificate ecosystem more transparent and less reliant on trust that trusted certificate...

Attacks on Searchable Symmetric Encryption Systems: Revisiting Similar-data and File Injection Attacks

The amount of data individuals create keeps increasing every year to the point that the data cannot be stored on a single device anymore. Cloud storage provides a solution for this problem, but not everybody wants the cloud storage service providers to peek at their data and they thus encrypt their data before storing it on the service provider...

Parallel Dissector: Parallel Processing of DDoS Data

Distributed Denial of Service (DDoS) leverages the power of multiple servers to disrupt the operations of a victim service. Due to the financial risks posed by downtimes on critical online infrastructure, DDoS is among the top threats in the cybersecurity landscape.<br/><br/>In this paper, we analyze the characteristics of previously launched...

Hardening Cookies - Preventing Use of Stolen Cookies by Third Parties

In the modern day there exist many different ways that someone can steal your authentication cookies. Each of those ways needs to be mitigated through many different solutions. Would it not be better if instead of preventing theft, we could prevent the use of stolen cookies? This thesis therefore researches both existing and novel solutions that...

Backdoor attacks in federated learning with regression

Machine learning, a pivotal aspect of artificial intelligence, has dramatically altered our interaction with technology and our handling of extensive data. Through its ability to learn and make decisions from patterns and previous experiences, machine learning is growing in influence on different aspects of our lives. It is, however, shown that...

Completely FROST-ed: IoT issued FROST signature for Hyperledger Fabric blockchain

Threshold signatures play a crucial role in the security of blockchain applications. An efficient threshold signature can be applied to enhance the security of wallets and transactions by enforcing multi-device-based authentication, as this requires adversaries to compromise more devices to recover the key. Additionally, threshold signatures can...