Archive

This page lists publications, software and lab projects that are no longer updated. They remain available for reference.

2022

  1. Study · Mobile Security · Privacy & Crypto

    Analysis of the Fingerprintability of iOS devices

    This report examines the sources of information provided by the iOS programming interface suitable for recognizing iOS devices and their …

  2. Study · Web & Cloud · Mobile Security

    Secure Edge Computing Technologies

    Complex tasks are often outsourced to the cloud because many small and mobile devices do not have the necessary computing power for such …

2021

  1. Study · Mobile Security · Privacy & Crypto

    Cross-User Security on Android

    This report takes a closer look at the security of the isolation between different user accounts on Android.

  2. Study · Web & Cloud · E-Government

    Whitepaper APIs in E-Government (DE)

    Application Programming Interfaces, or APIs for short, enable the provision of web services and data via machine-readable interfaces while …

  3. Study · Privacy & Crypto · Web & Cloud

    Challenges of Encyption: Recovery and Computation

    Encryption represents a fundamental tool to protect the confidentiality of sensitive data, such as identity attributes, medical data, and …

  4. Study · Blockchain

    Incremental Bitcoin Snapshots

    This project presents an architecture for a compressible blockchain, which supplements the primary blockchain with a second linked …

  5. Study · Digital Identity · Privacy & Crypto

    SSI Strong Authentication

    Self-Sovereign Identity (SSI) is a new identity model, which aims to eliminate central trusted parties.

2020

  1. Study · Digital Identity · Mobile Security

    DIGITAL ID CARDS

    Physical credentials are omnipresent in our everyday lives.

  2. Study · Blockchain

    Compressible Blockchain

    In this project, we propose a compressible blockchain.

  3. Study · Blockchain · Web & Cloud

    IPFS Security Analysis

    During this project, IPFS, a decentralized peer-to-peer hypermedia system, was subjected to a security analysis.

  4. Study · Digital Identity · Privacy & Crypto

    IoT Devices in Service Compositions

    Online applications are often composed of services provided by multiple service providers.

  5. Study · Mobile Security · Privacy & Crypto

    Providing Smartphone Features on the Desktop

    Current personal computing devices, such as smartphones, laptops, and traditional desktop computers, are geared towards different …

  6. Study · Privacy & Crypto · Transparency

    Privacy-preserving Verifiable Data Audits

    The main aim of this project was to build a prototype system that adds transparency to the way different parties interact with sensitive …

  7. Study · Digital Identity · E-Government

    SSI Offline-Verifiable Attributes

    In a world with an increasing number of online services, digital identities become more and more important.

  8. Software · Digital Identity · Web & Cloud

    MOCCA

    MOCCA was a free, modular, open-source Citizen Card Environment by EGIZ. Development ended in 2021.

  9. Study · Privacy & Crypto · Mobile Security

    Behavioral Authentication in Digitales-Amt-App

    Biometric authentication has become one of the most widely used authentication methods, especially on smartphones and in the Digitales-Amt …

  10. Study · Web & Cloud · Mobile Security

    Analysis of Electroneum Cloud Mining

    Electroneum is one of the first cryptocurrencies that allows users to mine coins with a mobile device.

  11. Article · Digital Identity · Web & Cloud

    ID Austria

    The Citizen Card will become the New ID Austria in 2021, following a piloting phase in the second half of 2020.

  12. Study · Blockchain

    Analysis of the Bitcoin UTXO Set

    This project describes and analyzes the set of unspent transaction outputs (UTXO set) in Bitcoin.

2019

  1. Study · Web & Cloud · Privacy & Crypto

    Policy Enforcement in Distributed Environments

    In scenarios in which several participants with different properties operate on a common database, the need for (automated) policy …

  2. Study · Privacy & Crypto · Web & Cloud

    Browser Detection Methods

    How ad networks recognise users by their browser without cookies and what helps against it.

  3. Study · Mobile Security

    Semantic correlation of properties in Android

    In addition to an approximate version of the original program code, function descriptions, an authorization model, UI elements, etc. are …

  4. Study · Transparency · Mobile Security

    Remote Attestation State-of-the-Art

    Remote attestation and trusted computing are becoming increasingly important – especially in the mobile sector and in the DRM context.

  5. Study · Privacy & Crypto

    Topological Analysis of Program Code

    The findings from this project show an innovative approach to hierarchically prepare program code and to map this hierarchy „flat“ again …

  6. Study · Web & Cloud · Digital Identity

    Detecting Certificate Misissue via CT Logs

    Certificate Transparency (CT) is an open framework that provides visibility of newly issued SSL/TLS certificates by enforcing Certificate …

  7. Study · Web & Cloud

    Threat Modeling based on hardware

    Threat modeling is well established in the software engineering field to show potential IT vulnerabilities of an artefact and to make …

  8. Article · Web & Cloud · Blockchain

    Distributed Event System

    The use of distributed systems always requires a minimum amount of parallelism.

2018

  1. Study · Privacy & Crypto · Mobile Security

    Secure Push Notifications

    Push Notifications are key components for mobile application developers used to alert their users of important updates and reengage their …

  2. Study · Mobile Security · Web & Cloud

    Disaster Communication using Mesh Software

    This project demonstrates the creation of a mesh network consisting of stationary and mobile nodes, based on cost-efficient hardware and …

  3. Study · Digital Identity · Web & Cloud

    eIDAS Node Monitor

    The eIDAS Node Monitor watches the current eIDAS test and production nodes of the Member states with regard to their availability.

  4. Software · Web & Cloud · Mobile Security

    MOA-ZS

    MOA ZS manages the electronic delivery process from a sender’s perspective.

  5. Study · Mobile Security

    Similarity of Source Code in Applications

    In order to gain a more abstract understanding of the behavior of program code, this project uses current scientific approaches to …

  6. Study · Blockchain · Transparency

    Decentralised Data Storage

    Decentralised data storage is a complex topic, especially with regard to authenticity and integrity of data.

  7. Study · Blockchain · Privacy & Crypto

    Redactable Blockchain

    This project report starts by giving an overview of various data insertion methods available in Bitcoin.

  8. Study · Web & Cloud · Privacy & Crypto

    Access Control of Finance APIs

    The PSD2 Directive has redefined the framework for interfaces for payment service providers.

  9. Study · E-Government · Mobile Security

    Overview on E-Voting

    A study provides an overview of the technical background on e-voting and shows ways in which e-voting could be implemented in …

  10. Study · Web & Cloud · Mobile Security

    IoT-isolation via mini-router

    This project shows the possibility to segregate IoT devices from the rest of the home network via an additional router.

  11. Study · Blockchain · Privacy & Crypto

    Overview of Modern Cryptocurrencies

    This study gives an overview of cryptocurrencies that are optimized for privacy or scalability.

  12. Study · E-Government · Digital Identity

    Demonstrator IBE for Key Management

    The project demonstrates an alternative approach of managing cryptographic keys in organisations (by using concepts of identity-based …

  13. Study · Digital Identity · Blockchain

    Whitepaper – Self-Sovereign Identity

    Self-Sovereign Identity (SSI) is a new concept for electronic identities that is based upon the blockchain technology.

  14. Study · Transparency · Privacy & Crypto

    Merging Skytrust Tools

    The project provides demonstrators to CrySIL (formerly „SkyTrust“).

2017

  1. Study · E-Government

    Multilateral Integration of XACML Policies

    In this project an administrative model was extended to support the translation of abstract, semantic security policies into XACML policies.

  2. Study · Mobile Security · Privacy & Crypto

    Fingerprinting Code of Mobile Applications

    The analysis of applications for mobile platforms (Android, iOS) has shown that security-relevant problems are often not to be found in …

  3. Study · Digital Identity · Web & Cloud

    Device Enrolment Using Flexible Authentication

    In order to provide solutions such as managed devices to end users, we compiled concepts for authenticating devices, with a focus on the …

  4. Study · Privacy & Crypto · Digital Identity

    Traces on the Internet

    A study deals with daily activities on the Internet, which leave traces, and shows how these can be used to identify individuals.

  5. Study · Blockchain · Web & Cloud

    Blockchain & Smart Contracts

    This report explains different types of Blockchains as well as different consensus algorithms.

  6. Study · Digital Identity · Privacy & Crypto

    Rich End-to-End Encryption

    This project discusses the requirements of a solution to decouple the authentication process from an application that uses the Skytrust …

  7. Study · Mobile Security · Web & Cloud

    Traffic Analysis of Mobile Applications

    As a supporting measure for the inspection of mobile applications, the data sent and received to/from the Internet has always been of …

  8. Software · Digital Identity · Privacy & Crypto

    Citizen Card Encrypted (CCE)

    CCE enables container-based encryption of files and folders.

  9. Study · Privacy & Crypto

    Automated Reasoning over Security Policies

    Applied approaches on authorization management often focus on a single system or environment, neglecting the need to address the security …

  10. Study · Blockchain · Mobile Security

    Decentralisation of Centralised Services

    The project demonstrates how standard services relying on centralised infrastructure might employ decentralised paradigms.

2016

  1. Study · Mobile Security · Privacy & Crypto

    Static Analysis of iOS Applications

    The behavioral analysis of mobile applications for Apple iOS is still a very challenging procedure, both in terms of time and resources …

  2. Study · Digital Identity · Transparency

    CA-less Authentication of Cloud Services

    This project evaluates different authentication methods that can be used to authenticate services and entities without relying on a CA.

  3. Study · Blockchain · Transparency

    Technology Overview Blockchain

    As part of this project, a survey on Distributed Ledger Technologies (commonly referred to as Blockchain) was conducted.

  4. Study · Mobile Security · Digital Identity

    Analysis of Car Applications

    This survey evaluates the state of the art of mobile applications for cars.

  5. Study · Privacy & Crypto

    Contextual Data Exchange

    We present a reusable data structure that addresses the issues of static, inflexible and practically non-interoperable authorization …

  6. Study · Digital Identity · Web & Cloud

    Dynamic Key Usage Policies

    More and more data and resources are moved to the cloud.

  7. Software · Digital Identity · Transparency

    Certificate Status Application

    The Certificate Status Tool is designed to provide certificate status information based on manually defined trust anchors as well as …

  8. Study · Web & Cloud · Digital Identity

    Secure Integration in the Cloud

    A study explored how existing approaches to interacting across domain boundaries work together with cloud platforms.

  9. Software · Web & Cloud · Digital Identity

    SSL/TLS Check for Clients/Server

    The A-SIT SSL/TLS tool tests the security properties of Web browsers and Web Servers.

  10. Study · Web & Cloud · E-Government

    Multidimensional Security Policies

    A-SIT developed a framework consisting of OWL vocabularies for cross-system definition and representation of web resources and security …

2015

  1. Study · Mobile Security · Web & Cloud

    Platform Independent CMA System

    A cloud-based mobile augmentation solution enables the efficient use of mobile device performance by decoupling resources such as the …

  2. Study · Web & Cloud · Mobile Security

    Apache Cordova Cryptography Plugin

    This project implements a cryptography plugin for the Cross-Platform Framework Apache Cordova.

  3. Study · Transparency

    TPMv2 Analysis

    The „Trusted Computing“ technology offers interesting  concepts and methods to increase the trustworthiness of connected systems.

  4. Study · Digital Identity · Web & Cloud

    eID in the Cloud with SCIM

    System for Cross-Domain Identity Management (SCIM) describes a new protocol that facilitates and supports the management of e-identities …

  5. Study · Digital Identity · E-Government

    Citizen Card Plugin for KeePass

    A plugin to use the Austrian citizen card with the free password manager KeePass has been developed.

2014

  1. Study · Digital Identity · Transparency

    Threats Posed by Malicious USB Devices

    Recently, manipulated USB devices have appeared that can not be detected as a threat to current protection measures.

  2. Study · Web & Cloud

    Secure Peer-to-Peer communication

    This project proposes a flexible and modular approach for existing peer-to-peer frameworks to enable a secure communication using …

  3. Study · Digital Identity · Web & Cloud

    Cloud-based Signature Solutions: A Study

    In order to compare cloud-based signing solutions with conventional, paper-based signatures we reviewed seven representative examples of …

  4. Study · Web & Cloud · Privacy & Crypto

    Create and decode CMS in Javascript

    This project implements a demo that provides encryption and decryption in a browser using CMS.

  5. Study · Digital Identity · Mobile Security

    Alternative Two-Factor Authentication

    Two-factor authentication (2FA) is an essential mechanism that enables secure access to remote services.

  6. Study · Mobile Security · Privacy & Crypto

    Security Analysis of Smartphone Platforms

    Current smartphones have significant data-processing capabilities and are increasingly being used to process critical corporate data.

2013

  1. Study · Web & Cloud · Digital Identity

    Signature verification in the cloud

    In this project analysed if it is suitable to deploy an existing e-Government service, namely the Signature Verification Service at a …

2012

  1. Article · Digital Identity · Web & Cloud

    Smart Card Applet

    The Smart Card Applet identifies cards according to their ATR (Answer to Reset).

2009

  1. Article · Digital Identity

    Open Office Signature

    The plugin allowed qualified electronic signatures on PDF documents created from Open Office.

  2. Article · Digital Identity · E-Government

    Open-Office-Signatur

    [Placeholder: teaser]

2008

  1. Study · Privacy & Crypto

    Mail Test

    A utility for checking how email clients handle various types of emails Standard email clients usually behave differently with encrypted …

  2. Study · Web & Cloud · Digital Identity

    Circular-Resolution Database

    Electronic documents in general and in particular resolution proposals usually need to be created, signed, and made accessible to a …

2007

  1. Article · Digital Identity · Web & Cloud

    Testnormal BKU

    Tool to test functionalities of your Citizen Card Environment (BKU).

  2. Article · Digital Identity · E-Government

    Security Layer New (SeLaN)

    On the behalf of the Federal Chancellery the „Security Capsule“ was developed as a reference implementation of Citizen Card Interface.

  3. Study · Web & Cloud · Digital Identity

    DKIM Proxy

    DKIM Proxy is a reference implementation of the RFC 4871 (DomainKeys Identified Mail) standard.

2006

  1. Article · Web & Cloud · AI

    Behaviour Blocker

    The Behaviour Blocker demonstrated the detection of malware by analyzing the system calls it employed.

2005

  1. Article · Digital Identity · E-Government

    Word Signature

    Applications such as MS-Word are undisputely mostly widespread and used for the tasks such as document editing.

2003

  1. Article · Digital Identity · Privacy & Crypto

    SMIME Mail Container

    With this simple Java Tool users can sign and/or encrypt arbitrary content.