Projects
Steganography Patterns Project (since 2021)
- coordinator; currently not funded
Selected Funded Projects (excluding NDA projects)
| Project | Funding by | Role | Duration |
|---|---|---|---|
| ATTRIBUT (Phase 2 and Phase 3) | Cyberagentur (sub-contract of Univ. Magdeburg) | Co-PI (leading project partners HSW+ULM) | 2023-2027 |
| EMPOWER, Sub-project on Cyber Security | BMBFTR | Co-PI (leading partner HSW) | 2023-2027 |
| KIASH (KI-gestützte Anomalieerkennung für Smart Homes) | BMBF | Co-PI (leading partner HSW) | 2022-2025 |
| KISAT (AI-driven Secure Aging for Pandemy-resilient Digital Infrastructures) (German: KI-gestütztes sicheres Altern für eine pandemieresiliente digitale Infrastruktur | MWWK/RLP | PI | 2020-2022 |
| SIVERT (Secure and Intelligent Visualization and Real-time Reconstruction Techniques for Proton Computed Tomograph) | MWWK/RLP | Co-PI | 2020-2023 |
| MADISA (Machine Learning-based Attack Detection for Industrial Control Systems) | EU EFRE/RLP 2019-2021 | PI | 2019-2021 |
| ACCAEL (Anti Cyber-crime Actions on the European Level | BMBF | PI | 2020 |
| E2S2E (Energy-efficient and Secure Smart Environments) | BMBF | PI | 2016-2018 |
| BARNI (Building Automation Reliable Network Infrastructure) | BMBF | PI | 2014-2016 |
Software Projects (Mostly Historic)
- WendzelNNTPd - an NNTP server (2004-today)
- Covert channel/tunneling/compression software:
- AMPhitryon (IFIP SEC 2026) - a flow-wise compression scheme enhancing censorship circumvention and covert channels; implementation of a covert channel amplification and history covert channel (2026)
- AdullamoT (IH&MMSec 2026) - using IoT devices as relays for time-decoupled covert data exchange (2026)
- NEL tool (Sicherheit 2012) - a research tool for network environment learning/active warden testing (2017-2018)
- CCEAP (ACM CCS 2016) - a tool for teaching network covert channels (2016-2020)
- PCT - protocol channel tool (PoC, 2008)
- PHCCT - protocol hopping covert channel tool (PoC, 2007)
- VSTT - ICMP, POP3 and plaintext tunnel via fifo/socket in/out (2006)
- PCAW (protocol channel-aware active warden, ICIMP 2012) - a countermeasure for protocol switching covert channels (2012)
- WoDiCoF (Worms Distributed Covert Channel Detection Framework, J.UCS 2018) - a covert channel detection framework (2017-2018)
- cchttpd: HTTP server, capable of loading C modules to perform server-side website generation and request handling; capable of serving PCAP files through filters (2008-2024)
- Hardened Linux Security Distribution (project initiator/leader and developer; 2006-2008)
- AstroCam stepengine control software (2001-2011)
- Security hacks:
Misc stuff (2000-2009), mostly not accessible anymore:
- OBPkg: a Synaptic-like tool for OpenBSD
- cwa: a web programming system for C (like PHP, but you can run C code instead)
- xyriaDNSd: a performance-optimized DNS server with load-balancing capabilities (old version from 2008 available on sourceforge)
- sysmon: shell- and web-based system monitoring tool for Solaris 8
- MSS: Multiple server scanner (a port scanner supporting various scan types; written ca. 2001 with friends)
- cpfos: An extended Slackware-based packet system for Hardened Linux
- sfnetmapper - visualizes connections of sf.net users and their projects (2011)
- Fluxbat - displays laptop battery status in the fluxbox menu (2007)
- fupids2: a user-space version of FUPIDS (see above)
- various other security tools, mostly to learn how to handle sockets under Linux and BSD, incl. a RIP routing update spoofer, some PoC backdoors using covert channels, and a TCP connection hijacker.
Maintainance of OpenBSD Ports
I contributed the `pscan’ port (a C code vulnerability scanner) to OpenBSD.
Patches for Other Projects
I contributed several patches to the Open Source Software (OSS) community, including mostly bugfixes but also few feature improvements:
- Operating Systems (packaging/build scripts, tools, …):
- Slackware Linux (several patches for package build scripts)
- My OpenBSD patches
- Patches for several network-related tools: gftp, icmpinfo, Ping Tunnel
- A number of manpage fixes (mostly Ubuntu/Debian)