Christian Rossow

101 papers A* 33A 28B 6Misc 1Journal 15Unranked 17

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	Await() a Second: Evading Control Flow Integrity by Hijacking C++ Coroutines. USENIX Security Symposium Marcos Bajo, Christian Rossow
2025	A*	`conf`	Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting. NDSS Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow, Michael Schwarz
2025	A	`conf`	GET /large. file HTTP /1.1: Connection-Based TCP Amplification Attacks. ACSAC Yepeng Pan, Lars Richter, Christian Rossow
2025	J	`jnl`	KeyVisor - A Lightweight ISA Extension for Protected Key Handles with CPU-enforced Usage Policies. IACR Trans. Cryptogr. Hardw. Embed. Syst. Fabian Schwarz, Jan Philipp Thoma, Christian Rossow, Tim Güneysu
2025	—	`conf`	NICraft: Malicious NIC Firmware-Based Cache Side-Channel Attack. ESORICS (3) Amit Choudhari, Shorya Kumar, Christian Rossow
2025	A*	`conf`	Peripheral Instinct: How External Devices Breach Browser Sandboxes. WWW Leon Trampert, Lorenz Hetterich, Lukas Gerlach, Mona Schappert, Christian Rossow, Michael Schwarz
2025	A*	`conf`	Styled to Steal: The Overlooked Attack Surface in Email Clients. CCS Leon Trampert, Daniel Weber, Christian Rossow, Michael Schwarz
2024	A*	`conf`	00SEVen - Re-enabling Virtual Machine Forensics: Introspecting Confidential VMs Using Privileged in-VM Agents. USENIX Security Symposium Fabian Schwarz, Christian Rossow
2024	A	`conf`	Down to earth! Guidelines for DGA-based Malware Detection. RAID Bogdan-Constantin Cebere, Jonathan Lasse Bennet Flueren, Silvia Sebastián, Daniel Plohmann, Christian Rossow
2024	J	`jnl`	KeyVisor - A Lightweight ISA Extension for Protected Key Handles with CPU-enforced Usage Policies. CoRR Fabian Schwarz, Jan Philipp Thoma, Christian Rossow, Tim Güneysu
2024	A*	`conf`	Loopy Hell(ow): Infinite Traffic Loops at the Application Layer. USENIX Security Symposium Yepeng Pan, Anna Ascheman, Christian Rossow
2024	A	`conf`	Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8. AsiaCCS Lorenz Hetterich, Markus Bauer, Michael Schwarz, Christian Rossow
2024	A*	`conf`	TCP Spoofing: Reliable Payload Transmission Past the Spoofed TCP Handshake. SP Yepeng Pan, Christian Rossow
2024	A	`conf`	The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments. IMC Raphael Hiesgen, Marcin Nawrocki, Marinho P. Barcellos, Daniel Kopp, Oliver Hohlfeld, Echo Chan, Roland Dobbins, Christian Doerr, Christian Rossow, Daniel R. Thomas, Mattijs Jonker, Ricky K. P. Mok, Xiapu Luo, John Kristoff, Thomas C. Schmidt, Matthias Wählisch, K. C. Claffy
2024	J	`jnl`	The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments. CoRR Raphael Hiesgen, Marcin Nawrocki, Marinho P. Barcellos, Daniel Kopp, Oliver Hohlfeld, Echo Chan, Roland Dobbins, Christian Doerr, Christian Rossow, Daniel R. Thomas, Mattijs Jonker, Ricky K. P. Mok, Xiapu Luo, John Kristoff, Thomas C. Schmidt, Matthias Wählisch, K. C. Claffy
2024	A	`conf`	Understanding Web Fingerprinting with a Protocol-Centric Approach. RAID Bogdan Cebere, Christian Rossow
2023	A	`conf`	Anomaly-based Filtering of Application-Layer DDoS Against DNS Authoritatives. EuroS&P Jonas Bushart, Christian Rossow
2023	A*	`conf`	FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers. CCS Till Schlüter, Amit Choudhari, Lorenz Hetterich, Leon Trampert, Hamed Nemati, Ahmad Ibrahim, Michael Schwarz, Christian Rossow, Nils Ole Tippenhauer
2023	—	`conf`	ResolFuzz: Differential Fuzzing of DNS Resolvers. ESORICS (2) Jonas Bushart, Christian Rossow
2022	A*	`conf`	AmpFuzz: Fuzzing for Amplification DDoS Vulnerabilities. USENIX Security Symposium Johannes Krupp, Ilya Grishchenko, Christian Rossow
2022	—	`conf`	Browser-Based CPU Fingerprinting. ESORICS (3) Leon Trampert, Christian Rossow, Michael Schwarz
2022	A*	`conf`	FeIDo: Recoverable FIDO2 Tokens Using Electronic IDs. CCS Fabian Schwarz, Khue Do, Gunnar Heide, Lucjan Hanzlik, Christian Rossow
2022	A*	`conf`	Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels. CCS Ahmad Ibrahim, Hamed Nemati, Till Schlüter, Nils Ole Tippenhauer, Christian Rossow
2022	J	`jnl`	Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels. CoRR Ahmad Ibrahim, Hamed Nemati, Till Schlüter, Nils Ole Tippenhauer, Christian Rossow
2022	A	`conf`	TyPro: Forward CFI for C-Style Indirect Function Calls Using Type Propagation. ACSAC Markus Bauer, Ilya Grishchenko, Christian Rossow
2021	B	`conf`	ANYway: Measuring the Amplification DDoS Potential of Domains. CNSM Olivier van der Toorn, Johannes Krupp, Mattijs Jonker, Roland van Rijswijk-Deij, Christian Rossow, Anna Sperotto
2021	A	`conf`	BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks. EuroS&P Johannes Krupp, Christian Rossow
2021	J	`jnl`	BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks. CoRR Johannes Krupp, Christian Rossow
2021	A	`conf`	Cali: Compiler-Assisted Library Isolation. AsiaCCS Markus Bauer, Christian Rossow
2021	A	`conf`	NoVT: Eliminating C++ Virtual Calls to Mitigate Vtable Hijacking. EuroS&P Markus Bauer, Christian Rossow
2021	A*	`conf`	Osiris: Automated Discovery of Microarchitectural Side Channels. USENIX Security Symposium Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
2021	J	`jnl`	Osiris: Automated Discovery of Microarchitectural Side Channels. CoRR Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
2021	A*	`conf`	YARIX: Scalable YARA-based Malware Intelligence. USENIX Security Symposium Michael Brengel, Christian Rossow
2020	A	`conf`	DPIFuzz: A Differential Fuzzing Framework to Detect DPI Elusion Strategies for QUIC. ACSAC Gaganjeet Singh Reen, Christian Rossow
2020	A	`conf`	On the Origin of Scanning: The Impact of Location on Internet-Wide Scans. Internet Measurement Conference Gerry Wan, Liz Izhikevich, David Adrian, Katsunari Yoshioka, Ralph Holz, Christian Rossow, Zakir Durumeric
2020	—	`conf`	Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS. FOCI @ USENIX Security Symposium Jonas Bushart, Christian Rossow
2020	A*	`conf`	SENG, the SGX-Enforcing Network Gateway: Authorizing Communication from Shielded Clients. USENIX Security Symposium Fabian Schwarz, Christian Rossow
2020	—	`conf`	Slitheen++: Stealth TLS-based Decoy Routing. FOCI @ USENIX Security Symposium Benedikt Birtel, Christian Rossow
2019	A*	`conf`	Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. NDSS Marius Steffens, Christian Rossow, Martin Johns, Ben Stock
2019	A	`conf`	MALPITY: Automatic Identification and Exploitation of Tarpit Vulnerabilities in Malware. EuroS&P Walla Sebastian, Christian Rossow
2019	J	`jnl`	Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS. CoRR Jonas Bushart, Christian Rossow
2018	—	`ed.`	12th USENIX Workshop on Offensive Technologies, WOOT 2018, Baltimore, MD, USA, August 13-14, 2018. WOOT @ USENIX Security Symposium Christian Rossow, Yves Younan
2018	A	`conf`	DNS Unchained: Amplified Application-Layer DoS Attacks Against DNS Authoritatives. RAID Jonas Bushart, Christian Rossow
2018	A*	`conf`	Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. NDSS Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow
2018	B	`conf`	Evasive Malware via Identifier Implanting. DIMVA Rui Tanabe, Wataru Ueno, Kou Ishii, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Daisuke Inoue, Christian Rossow
2018	A	`conf`	Identifying Key Leakage of Bitcoin Users. RAID Michael Brengel, Christian Rossow
2018	B	`conf`	MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps. DIMVA Michael Brengel, Christian Rossow
2018	J	`jnl`	Speculose: Analyzing the Security Implications of Speculative Execution in CPUs. CoRR Giorgi Maisuradze, Christian Rossow
2018	A*	`conf`	The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
2018	A*	`conf`	ret2spec: Speculative Execution Using Return Stack Buffers. CCS Giorgi Maisuradze, Christian Rossow
2018	J	`jnl`	ret2spec: Speculative Execution Using Return Stack Buffers. CoRR Giorgi Maisuradze, Christian Rossow
2018	A*	`conf`	teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts. USENIX Security Symposium Johannes Krupp, Christian Rossow
2017	J	`jnl`	Cross-architecture bug search in binary executables. it Inf. Technol. Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
2017	A*	`conf`	Dachshund: Digging for and Securing (Non-)Blinded Constants in JIT Code. NDSS Giorgi Maisuradze, Michael Backes, Christian Rossow
2017	A*	`conf`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	J	`jnl`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	A	`conf`	Linking Amplification DDoS Attacks to Booter Services. RAID Johannes Krupp, Mohammad Karami, Christian Rossow, Damon McCoy, Michael Backes
2017	A	`conf`	Millions of targets under attack: a macroscopic characterization of the DoS ecosystem. Internet Measurement Conference Mattijs Jonker, Alistair King, Johannes Krupp, Christian Rossow, Anna Sperotto, Alberto Dainotti
2017	A*	`conf`	Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals. WWW Milivoj Simeonovski, Giancarlo Pellegrino, Christian Rossow, Michael Backes
2016	A	`conf`	- vatiCAN - Vetted, Authenticated CAN Bus. CHES Stefan Nürnberger, Christian Rossow
2016	J	`jnl`	Angreiferjagd im "Internet der Dinge". Datenschutz und Datensicherheit Sebastian Gerling, Christian Rossow
2016	B	`conf`	Detecting Hardware-Assisted Virtualization. DIMVA Michael Brengel, Michael Backes, Christian Rossow
2016	A*	`conf`	Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A*	`conf`	Identifying the Scan and Attack Infrastructures Behind Amplification DDoS Attacks. CCS Johannes Krupp, Michael Backes, Christian Rossow
2016	J	`jnl`	IoTPOT: A Novel Honeypot for Revealing Current IoT Threats. J. Inf. Process. Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Christian Rossow
2016	A	`conf`	On the Feasibility of TTL-Based Filtering for DRDoS Mitigation. RAID Michael Backes, Thorsten Holz, Christian Rossow, Teemu Rytilahti, Milivoj Simeonovski, Ben Stock
2016	A*	`conf`	POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A	`conf`	SandPrint: Fingerprinting Malware Sandboxes to Provide Intelligence for Sandbox Evasion. RAID Akira Yokoyama, Kou Ishii, Rui Tanabe, Yinmin Papa, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Daisuke Inoue, Michael Brengel, Michael Backes, Christian Rossow
2016	A	`conf`	Uses and Abuses of Server-Side Requests. RAID Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow
2016	A*	`conf`	What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses. USENIX Security Symposium Giorgi Maisuradze, Michael Backes, Christian Rossow
2015	A	`conf`	AmpPot: Monitoring and Defending Against Amplification DDoS Attacks. RAID Lukas Krämer, Johannes Krupp, Daisuke Makita, Tomomi Nishizoe, Takashi Koide, Katsunari Yoshioka, Christian Rossow
2015	J	`jnl`	Amplification and DRDoS Attack Defense - A Survey and New Perspectives. CoRR Fabrice J. Ryba, Matthew Orlinski, Matthias Wählisch, Christian Rossow, Thomas C. Schmidt
2015	—	`conf`	Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics. WOOT Giancarlo Pellegrino, Christian Rossow, Fabrice J. Ryba, Thomas C. Schmidt, Matthias Wählisch
2015	A*	`conf`	Cross-Architecture Bug Search in Binary Executables. IEEE Symposium on Security and Privacy Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
2015	A	`conf`	Going Wild: Large-Scale Classification of Open DNS Resolvers. Internet Measurement Conference Marc Kührer, Thomas Hupperich, Jonas Bushart, Christian Rossow, Thorsten Holz
2015	—	`conf`	IoTPOT: Analysing the Rise of IoT Compromises. WOOT Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Christian Rossow
2015	A*	`conf`	POSTER: In the Net of the Spider: Measuring the Anonymity-Impact of Network-level Adversaries Against Tor. CCS Michael Backes, Simon Koch, Sebastian Meiser, Esfandiar Mohammadi, Christian Rossow
2015	A	`conf`	Reliable Recon in Adversarial Peer-to-Peer Botnets. Internet Measurement Conference Dennis Andriesse, Christian Rossow, Herbert Bos
2015	A	`conf`	Zeus Milker: Circumventing the P2P Zeus Neighbor List Restriction Mechanism. ICDCS Shankar Karuppayah, Stefanie Roos, Christian Rossow, Max Mühlhäuser, Mathias Fischer
2015	A	`conf`	jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. RAID Giancarlo Pellegrino, Constantin Tschürtz, Eric Bodden, Christian Rossow
2014	A*	`conf`	Amplification Hell: Revisiting Network Protocols for DDoS Abuse. NDSS Christian Rossow
2014	A*	`conf`	Exit from Hell? Reducing the Impact of Amplification DDoS Attacks. USENIX Security Symposium Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
2014	—	`conf`	Hell of a Handshake: Abusing TCP for Reflective Amplification DDoS Attacks. WOOT Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
2014	A	`conf`	Leveraging semantic signatures for bug search in binary programs. ACSAC Jannik Pewny, Felix Schuster, Lukas Bernhard, Thorsten Holz, Christian Rossow
2014	—	`conf`	On advanced monitoring in resilient and unstructured P2P botnets. ICC Shankar Karuppayah, Mathias Fischer, Christian Rossow, Max Mühlhäuser
2014	—	`conf`	On measuring the impact of DDoS botnets. EUROSEC Arne Welzel, Christian Rossow, Herbert Bos
2014	—	`conf`	On the (In)Security of Mobile Two-Factor Authentication. Financial Cryptography Alexandra Dmitrienko, Christopher Liebchen, Christian Rossow, Ahmad-Reza Sadeghi
2014	A	`conf`	Paint It Black: Evaluating the Effectiveness of Malware Blacklists. RAID Marc Kührer, Christian Rossow, Thorsten Holz
2013	J	`jnl`	CoCoSpot: Clustering and recognizing botnet command and control channels using traffic analysis. Comput. Networks Christian J. Dietrich, Christian Rossow, Norbert Pohlmann
2013	Misc	`conf`	Exploiting visual appearance to cluster and detect rogue software. SAC Christian J. Dietrich, Christian Rossow, Norbert Pohlmann
2013	—	`conf`	Highly resilient peer-to-peer botnets are here: An analysis of Gameover Zeus. MALWARE Dennis Andriesse, Christian Rossow, Brett Stone-Gross, Daniel Plohmann, Herbert Bos
2013	B	`conf`	ProVeX: Detecting Botnets with Encrypted Command and Control Channels. DIMVA Christian Rossow, Christian J. Dietrich
2013	A*	`conf`	SoK: P2PWNED - Modeling and Evaluating the Resilience of Peer-to-Peer Botnets. IEEE Symposium on Security and Privacy Christian Rossow, Dennis Andriesse, Tillmann Werner, Brett Stone-Gross, Daniel Plohmann, Christian J. Dietrich, Herbert Bos
2012	B	`conf`	Large-Scale Analysis of Malware Downloaders. DIMVA Christian Rossow, Christian J. Dietrich, Herbert Bos
2012	A*	`conf`	Manufacturing compromise: the emergence of exploit-as-a-service. CCS Chris Grier, Lucas Ballard, Juan Caballero, Neha Chachra, Christian J. Dietrich, Kirill Levchenko, Panayiotis Mavrommatis, Damon McCoy, Antonio Nappa, Andreas Pitsillidis, Niels Provos, M. Zubair Rafique, Moheeb Abu Rajab, Christian Rossow, Kurt Thomas, Vern Paxson, Stefan Savage, Geoffrey M. Voelker
2012	A*	`conf`	Prudent Practices for Designing Malware Experiments: Status Quo and Outlook. IEEE Symposium on Security and Privacy Christian Rossow, Christian J. Dietrich, Chris Grier, Christian Kreibich, Vern Paxson, Norbert Pohlmann, Herbert Bos, Maarten van Steen
2011	—	`conf`	On Botnets That Use DNS for Command and Control. EC2ND Christian J. Dietrich, Christian Rossow, Felix C. Freiling, Herbert Bos, Maarten van Steen, Norbert Pohlmann
2011	—	`conf`	Sandnet: network traffic analysis of malicious software. BADGERS@EuroSys Christian Rossow, Christian J. Dietrich, Herbert Bos, Lorenzo Cavallaro, Maarten van Steen, Felix C. Freiling, Norbert Pohlmann
2008	—	`conf`	Empirical research of IP blacklists. ISSE Christian Dietrich, Christian Rossow
2008	—	`conf`	Empirical research on IP blacklisting. CEAS Christian J. Dietrich, Christian Rossow
2008	—	`conf`	Empirische Untersuchung von IP-Blacklists. Sicherheit Christian J. Dietrich, Christian Rossow