CASED publication
The Influence of trustworthiness of website layout on security perception of websites
Michaela Kauer, Florian Kiesel, Felix Ueberschaer, Melanie Volkamer, Ralph Bruder
In: 5th MPICC Interdisciplinary Conference on Current Issues in IT Security in Freiburg i. Breisgau, Germany - May 7 - 11,
2012.
Ph.D. scholarship projects funded by the Horst Görtz foundation
GOS: Group-Oriented Signatures
Supervisor: Dr. Mark Manulis, Scholar: Georgy Khoruzhenko
Unlike classical digital signatures, group-oriented signatures (GOS) assume that the signature generation process is related to some group or formation of users. GOS schemes come in different flavors, depending on the assumed setting and security requirements. Examples of GOS include multisignatures, aggregate-signatures, threshold signatures, group signatures, ring signatures, etc. This research project will extend current GOS models and constructions with new properties driven by practical applications. Research activities on the GOS project will last three years and be carried out at the Cryptographic Protocols Group of the TU Darmstadt. The Horst Görtz Stiftung funds the GOS project with one PhD position.Proving Security Properties of Services
Supervisor: Dr. Eric Bodden, Scholar: Kirill Kononenko
In this project, researchers will design and implement novel static and dynamic program-analysis techniques to security properties of web services, primarily programmed in Java.Goal is to prove that services adhere to their security requirements in all contexts in which they may be deployed.The research focuses on properties that can be inferred with little or no help from the user, such as access control or information-flow properties. The research group currently comprises the scholar Kirill Kononenko and Dr. Eric Bodden.
The Horst Görtz Stiftung funds this project with one PhD position. Read more
Privacy in Smart Grids - Evaluation, Requirements and Design of Privacy-Enhancing Technologies for Smart Grids
Supervisor: Dr. Leonardo Martucci, Scholar: Fabio Borges de Oliveira
In this project we are going to evaluate the privacy threats and requirements in Smart Grid scenarios. Furthermore, we aim to design privacy-enhancing mechanisms for protecting the users’ privacy and the liability of electricity providers regarding undesired storage of personal users’ data.Smart Grids are the power grids of the future. They require electronic meters that collect information at the users’ end and send the collected data regarding users’ electricity consumption back to the electricity provider. This necessity raises many fundamental challenges regarding security and privacy threats. Enabling users to determine when, how and what extent information about them is communicated to others is a key aspect of the right of privacy. Such a right needs to be respected, no matter the advantages of Smart Grids.
The Horst Görtz Stiftung funds this project with one PhD position.
Efficient and practically applicable multivariate-based schemes with estimated secure parameters for now and the future
Supervisor: Dr. Stanislav Bulygin, Scholar: Albrecht Petzoldt
The project deals with multivariate-based signature schemes that potentially resist quantum attacks. Besides being post-quantum, these signature schemes are fast and require low computational requirements. This makes them interesting candidates for applications on resource constraint devices.One of the main problems is large key sizes. The goal of the project is to design signature schemes with key sizes suitable for real world applications. Secure parameters of such schemes are to be estimated within the project.
The Horst Görtz Stiftung funds this project with one PhD position.
Usable Secure eMail Communication
Supervisor: Prof. Dr. Melanie Volkamer, Scholar: Christian Moecke
The focus of this project is on improving secure email communication with respect to social and usability aspects. The project will address two different areas:Sending / Receiving confidential and authentic emails: This includes the following questions: How can the gap between E2E encryption and solutions like the DE-Mail concept be closed? What are users’ mental models on keys, key pairs, and PKI? What would a more usable PKI concept based on this secure email system look like, such that people are more likely to use and understand it than current solutions?
Warnings regarding potentially dangerous attachments and phishing emails: New warnings should be developed that incorporate information about the security, the sender identity and the file type of an attachment. These warnings should support the user more precisely in making his decision about opening or ignoring an attachment.
The Horst Görtz Stiftung funds this project with one PhD position in the research group SecUSo.

