- NetSec - lists.gi.de

Call for Participation: PET-CON 2025.1 am 13./14.03.2025 in Dresden
by Florian Tschorsch 28 Jan '25

28 Jan '25

Dear Colleagues, I am pleased to announce that the PET-CON 2025.1 will take place at TU Dresden on March 13–14, 2025. It is a great opportunity to connect, discuss ongoing work, and share ideas in privacy research. Below you will find the full call for participation with all the details---please feel free to share with anyone interested! Kind regards, Florian. (apologies for crossposting) =================================================================== CALL FOR PARTICIPATION =================================================================== 13th Privacy Enhancing Techniques Convention: PET-CON 2025.1 March 13--14, 2025 TU Dresden (Dresden, Germany) pet-con.de =================================================================== We invite you to attend PET-CON 2025.1---the 13th convention in Germany in the area of Privacy Enhancing Techniques. PET-CON brings together students (B.Sc., M.Sc., PhD), junior researchers, privacy activists, and other interested people to discuss work in progress. PET-CON is organized by the PET special interest group of the German Computer Science Society (GI). Previous PET-CONs took place at University of Bamberg, TU Berlin, University of Hamburg, University of Regensburg, TU Dresden, TU Darmstadt, RWTH Aachen, Goethe University Frankfurt, and University of Göttingen. PET-CON is an informal gathering that welcomes various forms of contributions. The main workshop features short contributed talks (10-15 minutes) followed by extensive feedback and discussions (up to 45 minutes). For instance, students can present planned, ongoing, and recently finished theses and projects to receive feedback. We also accept presentations of papers that have already been published elsewhere. Alternatively, you can also attend the convention without giving a talk at all and simply participate in the discussions. # TOPICS OF INTEREST # - Privacy Enhancing Technologies - Privacy Engineering - Inter- and transdisciplinary perspectives to privacy (e.g., techno-legal, techno-economic, ...) In the past, there have been presentations on abuse detection and protection of PETs, anonymous routing, application layer privacy, big data and data protection, economics of PETs, end-user education and training for PETs, HCI issues and usability of PETs, intrusion detection while respecting privacy, location privacy, metrics for quality of protection by the PETs, performance optimization and measurement, privacy engineering, privacy for mobile networks and smartphone applications, privacy in ubiquitous computing environments, related legal issues (data protection). # DATES AND TIMES # Workshop: March 13--14, 2025 The workshop begins on Thursday, March 13 at 1:30 pm and concludes on Friday, March 14 at 2:00 pm. Lunch will be provided on both days at 12:00 pm, and there will be a group dinner on Thursday evening. Please note that all meals are self-paid. Lunch will be arranged locally (e.g., at a canteen) and will offer vegan, vegetarian, and non-vegetarian options. Details about the restaurant for dinner will be shared closer to the event. # REGISTRATION # You can find the registration at https://pet-con.de/ in the upper right corner of the page. Registration is open. Participation is granted on a first come first served basis. There is no participation fee. Further information regarding the program and logistics are available on the website. # LOCATION # TU Dresden Andreas-Pfitzmann-Bau Nöthnitzer Straße 46 01187 Dresden # ORGANIZATION # The event is organized by Carolin Brunn (TU Dresden, Chair of Privacy and Security) Maximilian Weisenseel (TU Dresden, Chair of Privacy and Security) Florian Tschorsch (TU Dresden, Chair of Privacy and Security)

1 0

20.11.2024, 16:00 - 17:00 Uhr: GI PET Talk 5: Opening Pandora’s Dox: How Doxing Impacts Individuals, Organizations, and Societies
by Kai Rannenberg 12 Nov '24

12 Nov '24

GI PET Talk 5: Opening Pandora’s Dox: How Doxing Impacts Individuals, Organizations, and Societies 20.11.2024, 16:00 - 17:00 Add to calendar <https://fg-pet.gi.de/veranstaltung/pet-talk-5-doxing/ical> https://fg-pet.gi.de/veranstaltung/pet-talk-5-doxing Doxing — the malicious disclosure of personal information on the internet — is a growing global threat that intersects with online extremism, privacy invasion, and digital activism. Doxers target individuals both privately and professionally for their viewpoints and beliefs, aiming to influence socio-political discourse. This talk will provide an overview of the mechanisms of doxing, explore its profound effects on victims (doxees), and discuss how organizations and societies need to address this pervasive issue. Participation and registration Participation is free but requires registration by 18 November 2024. To register, please send an email to Zoltan Mann (firstname.lastname(a)gmail.com) https://fg-pet.gi.de/veranstaltung/pet-talk-5-doxing

1 0

CfP IFIP Sec 2025, 21-23 May, Maribor, Slovenia, Deadline 20 December 2024 AoE
by Kai Rannenberg 04 Nov '24

04 Nov '24

We would like to invite you to submit a paper the IFIP SEC 2025 conference which will be held in Maribor, Slovenia, 21-23 May 2025. The deadline is 20 December 2024 AoE re is more information below. Thank you in advance, Best regards, Tatjana, Lili, Marko, Kai ------------------------------------------------------------------------------------------------------------------- Call for Papers 40th IFIP TC-11 SEC 2025 International Information Security and Privacy Conference May 21 - 23, 2025 Hotel City, Maribor, Slovenia The IFIP SEC conference is the flagship event of the International Federation for Information Processing (IFIP) Technical Committee 11 on Security and Privacy Protection in Information Processing Systems (TC-11, www.ifiptc11.org<http://www.ifiptc11.org>). We seek submissions from academia, industry, and government presenting novel research on all theoretical and practical aspects of security and privacy protection in ICT Systems. Practitioners and industry representatives are encouraged to submit papers. Topics We welcome contributions within, but not limited to, the following areas: Access control and authentication Applied cryptography Audit and risk analysis Big data security and privacy Cloud security and privacy Critical infrastructure protection Cyber-physical systems security Data and applications security Digital forensics Human aspects of security and privacy Identity management Industry networks security Information security education Information security management Information technology misuse and the law IoT security Managing information security functions Mobile security Multilateral security Network & distributed systems security Pervasive systems security Privacy protection and Privacy-by-design Privacy-enhancing technologies Quantum computations and post-quantum cryptography Side-channel attacks Surveillance and counter-surveillance Trust management Submission of full papers deadline December 20, 2024, AoE Committees General chair Tatjana Welzer, University of Maribor, Faculty of Electrical Engineering and Computer Science, Maribor, Slovenia Programme committee co-chairs Kai Rannenberg, Goethe-University, Frankfurt am Main, Germany Lili Nemec Zlatolas, University of Maribor, Faculty of Electrical Engineering and Computer Science, Maribor, Slovenia Organizing chair Marko Hölbl, University of Maribor, Faculty of Electrical Engineering and Computer Science, Maribor, Slovenia Further information and submission: http://sec2025.um.si/ ---------------------------------------------- Prof. Dr. Kai Rannenberg Kai.Rannenberg(a)m-chair.de<mailto:Kai.Rannenberg@m-chair.de> Chair of Mobile Business & Multilateral Security Goethe University Frankfurt Theodor-W.-Adorno-Platz 4 Phone: +49-69-798-34701 60629 Frankfurt/Main, Germany WWW: www.m-chair.de<http://www.m-chair.de/> PGP key on www.m-chair.de/personal/pgp/Kai_Rannenberg.pgp<http://www.m-chair.de/personal/pgp/Kai_Rannenberg.pgp>

1 0

GI NetSec Lecture Series: Next talk on May 19th
by Prof. Dr. Mathias Fischer 13 May '22

13 May '22

Dear colleagues, I am happy to announce the second talk of the NetSec Lecture Series [1] that is organized by the GI Netsec working group [2]. On May 19th, 5pm (CEST), Jens Hiller from RWTH Aachen will tell a story of experimentation and centralization: Tracking the deployment of TLS 1.3 on the Web. ---------------------------------------------------- May 19, 5pm (CEST), Jens Hiller (RWTH Aachen) Join via Zoom: https://tu-berlin.zoom.us/j/63223549564?pwd=SUdRSjcvVzJJeVhielM0UE5pNGhlQT09 <https://tu-berlin.zoom.us/j/63223549564?pwd=SUdRSjcvVzJJeVhielM0UE5pNGhlQT09> **Tracking the deployment of TLS 1.3 on the Web: A story of experimentation and centralization** *Abstract:* Transport Layer Security is the most important security protocol on the Web. Before the standardization of its newest version TLS 1.3 in August 2018, the protocol was redesigned over four years in a yet unprecedented design process that involved many cryptographers and key industry stakeholders. Based on the combination of active Internet scans, and passive measurements in large networks and on Android devices, we will look at how large stakeholders experimented with the protocol in the Internet well before its standardization. Their experiments uncovered incompatibilities that influenced the ongoing standardization process. Also, we will analyze the uptake of this mission-critical security protocol after its standardization. In contrast to TLS 1.2, where adoption took more than five years and was prompted by severe attacks on previous versions, TLS 1.3 is deployed surprisingly speedily. The design process thus provides valuable information for future protocol design and deployment. *CV:* Jens Hiller is Researcher and PhD Student at the Chair of Communication and Distributed Systems (COMSYS) at RWTH Aachen University. His research interests revolve around today's prominent secure communication protocols and security and privacy for the Internet of Things. He also spent two summer research stays at the International Computer Science Institute (ICSI) in Berkely analyzing the security of the Web's Internet Public Key Infrastructure. ---------------------------------------------------- Dates in the NetSec Lecture Series --------------------------------------------------- *April 21st (English):* Dr. Robin Sommer, Corelight - "Transition To Practice, They Say: How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup" *May 19th (English):* Jens Hiller, RWTH Aachen - "Tracking the deployment of TLS 1.3 on the Web: A story of experimentation and centralization" *June 15th (English):* Prof. Dr. Andreas Peter, Universität Oldenburg - "DEEPCASE: Semi-Supervised Contextual Analysis of Security Events" *July (German):* Panel "Right to Encryption" --------------------------------------------------- Best, The steering committee of the NetSec working group [1] https://fg-netsec.gi.de/veranstaltung/netsec-lecture-series-tracking-the-de… <https://fg-netsec.gi.de/veranstaltung/netsec-lecture-series-tracking-the-de…> [2] https://fg-netsec.gi.de/

1 0

NetSec Lecture Series: First talk on April 21st
by Prof. Dr. Mathias Fischer 19 Apr '22

19 Apr '22

Dear colleagues, I am happy to announce the NetSec Lecture Series [1] that is organized by the GI Netsec working group [2]. The first digital talk in the series is on April 21st, 5pm (CEST) and our first speaker is Dr. Robin Sommer from Corelight. ---------------------------------------------------- April 21st, 5pm (CEST), Dr. Robin Sommer (Corelight) Join via Zoom: https://tu-berlin.zoom.us/j/63223549564?pwd=SUdRSjcvVzJJeVhielM0UE5pNGhlQT09 *Transition To Practice, They Say: How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup* *Abstract:* In academia, it can require perseverance and patience to see your research gaining real-world traction. In this presentation we will recap the journey that turned the open source network security monitor Zeek (formerly Bro) from a little known research platform into a powerful operational security tool that’s now helping protect some of the largest, most sensitive organizations. Over a period of more than two decades, Zeek went through a series of quite distinct phases (as well as a couple of near-death experiences) that, in hindsight, all proved critical to exploit the full potential of the original technology. Today, the Zeek project is thriving more than ever: An active open source community continues to extend the system’s capabilities, while a venture-backed startup founded by its creators provides turn-key products to large enterprises and government organizations. *CV:* Robin Sommer is a Co-Founder at Corelight, a San Francisco-based security startup providing open NDR solutions based on Zeek. He has been leading the development team behind Zeek for many years. Before Corelight, Robin was a Senior Researcher at the International Computer Science Institute (ICSI) in Berkeley, California, where he led a range of research projects on network security and privacy. Robin has served on numerous review committees for academic conferences and funding organizations, and as the General Chair for the 2013 IEEE Security & Privacy Symposium. He holds a doctorate degree from the Technical University of Munich, Germany, and is now back living in Munich as well, from where he continues to lead Corelight’s open source development team. ---------------------------------------------------- Dates in the NetSec Lecture Series --------------------------------------------------- *April 21st (English):* Dr. Robin Sommer, Corlight - "Transition To Practice, They Say: How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup" *May (English):* Jens Hiller, RWTH Aachen *June 15th (English):* Prof. Dr. Andreas Peter, Universität Oldenburg *July (German):* Panel "Right to Encryption" --------------------------------------------------- Best, The steering committee of the NetSec working group [1] https://gi.de/veranstaltung/netsec-lecture-series [2] https://fg-netsec.gi.de/

1 0

Digitale NetSec Lecture Series
by Prof. Dr. Mathias Fischer 15 Apr '22

15 Apr '22

Liebe Kolleginnen und Kollegen, pünktlich zu Ostern ein kleines Geschenk der Fachgruppe NetSec: die digitale "NetSec Lecture Series" im Sommersemester. https://fg-netsec.gi.de/veranstaltung/netsec-lecture-series Die erste Veranstaltung findet am 21. April von 17-18:30 Uhr über Zoom statt. Unser erster Vortragender ist Dr. Robin Sommer (Corelight), der über die Reise des Open-Source-IDS Zeek von einem akademischen Forschungsprojekt hin zu einem Silicon-Valley-Startup referieren wird. Termine in der NetSec Lecture Series --------------------------------------------------- *21. April 2022:* Dr. Robin Sommer, Corlight - "Transition To Practice, They Say: How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup" *Mai 2022:* Jens Hiller, RWTH Aachen *15. Juni:* Prof. Dr. Andreas Peter, Universität Oldenburg *Juli 2022:* Podiumsdiskussion zum Thema "Recht auf Verschlüsselung" --------------------------------------------------- Die Zoom-Einwahldaten für die Veranstaltung sind: https://tu-berlin.zoom.us/j/63223549564?pwd=SUdRSjcvVzJJeVhielM0UE5pNGhlQT09 Erster Talk am 21. April 2022, 17 Uhr: ---------------------------------------------------- *Transition To Practice, They Say: How Two Decades of Security Research Ultimately Spawned a Silicon Valley Startup* *Abstract:* In academia, it can require perseverance and patience to see your research gaining real-world traction. In this presentation we will recap the journey that turned the open source network security monitor Zeek (formerly Bro) from a little known research platform into a powerful operational security tool that’s now helping protect some of the largest, most sensitive organizations. Over a period of more than two decades, Zeek went through a series of quite distinct phases (as well as a couple of near-death experiences) that, in hindsight, all proved critical to exploit the full potential of the original technology. Today, the Zeek project is thriving more than ever: An active open source community continues to extend the system’s capabilities, while a venture-backed startup founded by its creators provides turn-key products to large enterprises and government organizations. *CV:* Robin Sommer is a Co-Founder at Corelight, a San Francisco-based security startup providing open NDR solutions based on Zeek. He has been leading the development team behind Zeek for many years. Before Corelight, Robin was a Senior Researcher at the International Computer Science Institute (ICSI) in Berkeley, California, where he led a range of research projects on network security and privacy. Robin has served on numerous review committees for academic conferences and funding organizations, and as the General Chair for the 2013 IEEE Security & Privacy Symposium. He holds a doctorate degree from the Technical University of Munich, Germany, and is now back living in Munich as well, from where he continues to lead Corelight’s open source development team. -------------------------------------------------------------------------------------------------------------- Viele Grüße Das Leitungsgremium und Freunde der FG NetSec

1 0

Annual Privacy Forum (APF) 2022 - Call for Papers - Extended deadline
by Kai Rannenberg 07 Feb '22

07 Feb '22

Dear colleagues, ENISA, DG CONNECT, the Cardinal Stefan Wyszyński University and the Koźmiński University are organizing the Annual Privacy Forum (APF) 2022 on 23-24 June 2022 in Warsaw, Poland. **Important dates** - Submission of full papers: 21 February 2022 23:59 GMT - Notification to author(s): 17 March 2022 - Camera-ready versions: 7 April 2022 In APF 2022, we invite papers presenting original work on the themes of data protection and privacy and their repercussions on technology, business, government, law, society, policy and law enforcement. An inter-disciplinary approach is high in demand to contribute to bridging the gap between research, business models and policy, much like proposing new models and interpretations. Additional information on the event and the call for papers are available under https://privacyforum.eu/call-for-papers Submission can be made through Easychair at https://easychair.org/my/conference?conf=apf2022 On behalf of the PC Chairs, P.D. --- Dr. Prokopios Drogkaris Cybersecurity Expert - Policy Development and Implementation European Union Agency for Cybersecurity (ENISA) Phone: (+30) 2814 409 650 Mobile: (+30) 6973 399 328 Email: Prokopios.Drogkaris(a)enisa.europa.eu

1 0

Einladung zum Workshop: Ende-zu-Ende-Verschlüsselung am 29.07.2020
by Matthias Marx 14 Jul '20

14 Jul '20

Sehr geehrte Damen und Herren, die GI-Fachgruppe NETSEC lädt ein zum ** Workshop: Ende-zu-Ende-Verschlüsselung ** am Mittwoch, den 29. Juli 2020, von 16 Uhr bis 19 Uhr, online via Zoom. Die Teilnahme ist kostenfrei. Um Anmeldung unter https://fg-netsec.gi.de/veranstaltung/workshop-ende-zu-ende-verschluesselung wird gebeten. Messenger- und Video-Konferenz-Dienste sind sowohl im Privatleben als auch in Firmen unabdingbar geworden. Sie sind bedeutende Kommunikationskanäle, über die private Nachrichten oder Firmeninterna ausgetauscht werden. Daher stellt sich unmittelbar die Frage nach dem Datenschutz und der Datensicherheit. Insbesondere das Thema Ende-zu-Ende-Verschlüsselung wird oft vorgebracht und polarisiert. Es gibt funktionale und nichtfunktionale Argumente, die auf technischer und politischer Ebene für oder gegen Ende-zu-Ende-Verschlüsselung sprechen. Zu dem Workshop tragen Vertreter*innen unterschiedlicher Standpunkte ihre Sichtweise bei. Gemeinsam wollen wir anschließend Pros und Kontras von Ende-zu-Ende-Verschlüsselung diskutieren und auf diese Weise eine Meinungsbildung unter den Teilnehmer*innen fördern. Bitte reichen Sie diese Ankündigung an interessierte Kolleginnen und Kollegen weiter. Ein ausführliches Programm finden Sie unter https://fg-netsec.gi.de/veranstaltung/workshop-ende-zu-ende-verschluesselung. Mit freundlichem Grüßen Monina Schwarz und Matthias Marx -- Matthias Marx Tel: +49-40-42883-2344 - https://svs.informatik.uni-hamburg.de/ Universität Hamburg - FB Informatik - Sicherheit in Verteilten Systemen

1 0

inladung zum Thementag Sichere Hardware am 25.10.2019
by Matthias Marx 17 Oct '19

17 Oct '19

Sehr geehrte Damen und Herren, die GI-Fachgruppe NETSEC lädt ein zum ** Thementag Hardwaresicherheit ** am Freitag, den 25. Oktober 2019, von 13 Uhr bis 17 Uhr im Einstein Center Digital Future, Robert-Koch-Forum, Wilhelmstraße 67, 10117 Berlin. Die Teilnahme ist kostenfrei. Um Anmeldung unter https://fg-netsec.gi.de/veranstaltung/thementag-sichere-hardware/ wird gebeten. Auf unserer letzten Veranstaltung haben wir uns damit befasst, dass immer mehr virtuelle und physische Gegenstände in allen Bereichen unserer Lebens- und Arbeitswelt miteinander vernetzt werden. Die Grundlage dieser Vernetzung bildet eine moderne und sichere (Netz-)Infrastruktur. Der Schwerpunkt unseres zweiten Thementages ist die Hardware, die für solche Infrastrukturen benötigt wird. Die Veranstaltung beginnt mit Vorträgen über sichere Systeme für eine verlässliche Digitalisierung, über Messsysteme für kritische Infrastruktur und über Fingerprinting von CAN-Bussen. Danach folgen Kurzvorträge zu aktuellen Highlights aus der Forschung. Abschließend gibt es Gelegenheit zum Austausch, zur Diskussion und zum Netzwerken. Ein ausführliches Programm gibt es unter https://fg-netsec.gi.de/veranstaltung/thementag-sichere-hardware/. Wir würden uns sehr freuen, Sie dort begrüßen zu dürfen. Bitte reichen Sie diese Ankündigung an interessierte Kolleginnen und Kollegen weiter. Mit freundlichem Grüßen Monina Schwarz und Matthias Marx für die GI-Fachgruppe NETSEC -- Matthias Marx Tel: +49-40-42883-2344 - https://svs.informatik.uni-hamburg.de/ Universität Hamburg - FB Informatik - Sicherheit in Verteilten Systemen

1 0

Thementag Sicherheit in Intelligenten Netzen und IoT am 18.03.2019
by Matthias Marx 20 Feb '19

20 Feb '19

Sehr geehrte Damen und Herren, die GI-Fachgruppe NETSEC sowie die Hamburger Dialogplattform Industrie 4.0 in Kooperation mit der Universität Hamburg, dem Industrieverband Hamburg sowie dem Hamburger Unternehmen Simplexion laden ein zum ** Thementag Sicherheit in Intelligenten Netzen und IoT ** am Montag, den 18. März 2019, von 14 Uhr bis 20 Uhr in der Handelskammer Hamburg, Alster-Zimmer, Adolphsplatz 1, 20457 Hamburg. Die Teilnahme ist kostenfrei. Um Anmeldung unter https://fg-netsec.gi.de/veranstaltung/thementag-sicherheit-in-intelligenten… wird gebeten. Die zunehmende Vernetzung von virtuellen und physischen Gegenständen in allen Bereichen unserer Lebens- und Arbeitswelt führt zu neuen Sicherheitsrisiken. Nicht nur Alltagsgegenstände, sondern ganze Industrieanlagen und Maschinen werden vernetzt. Sensible Daten können verloren gehen oder Produktionsstraßen für Wochen lahmgelegt werden. In den ersten Vorträgen werden Vertreter aus Industrie und Forschung über Sicherheit in Bahnnetzen, über den Wandel der Stromnetze und über resiliente Netze, die bei einem Ausfall von Teilsystemen nicht vollständig versagen, berichten. In den anschließenden Vorträgen und Keynotes mit dem Schwerpunkt IoT werden die Themen Context-Aware Authentication, Anforderungen an die Datensicherheit und Datensicherheit in der Geräteentwicklung behandelt. Die Veranstaltung schließt mit einem Get-together und bietet Gelegenheit zum Austausch, zu Diskussion und zum Netzwerken. Bitte reichen Sie diese Ankündigung an interessierte Kolleginnen und Kollegen weiter. Ein ausführliches Programm finden Sie unter https://fg-netsec.gi.de/veranstaltung/thementag-sicherheit-in-intelligenten…. Mit freundlichen Grüßen Matthias Marx -- Matthias Marx Tel: +49-40-42883-2344 - https://svs.informatik.uni-hamburg.de/ Universität Hamburg - FB Informatik - Sicherheit in Verteilten Systemen

1 0