TY  - CHAP
A1  - Saatjohann, Christoph
A1  - Ising, Fabian
A1  - Gierlings, Matthias
A1  - Noss, Dominik
A1  - Schimmler, Sascha
A1  - Klemm, Alexander
A1  - Grundmann, Leif
A1  - Frosch, Tilman
A1  - Schinzel, Sebastian
T1  - Sicherheit medizintechnischer Protokolle im Krankenhaus
T2  - SICHERHEIT 2022. Hrsg. Christian Wressnegger, Delphine Reinhardt, Thomas Barber, Bernhard C. Witt, Daniel Arp, Zoltan Mann
N2  - Medizinische Einrichtungen waren in den letzten Jahren immer wieder von Cyber-Angriffen betroffen. Auch wenn sich diese Angriffe derzeit auf die Office-IT-Infrastruktur der Einrichtungen konzentrieren, existiert mit medizinischen Systemen und Kommunikationsprotokollen eine weitere wenig beachtete Angriffsoberfläche.

In diesem Beitrag analysieren wir die weit verbreiteten medizintechnischen Kommunikations-Protokolle DICOM und HL7 sowie Protokoll-Implementierungen auf ihre IT-Sicherheit. Dafür präsentieren wir die Ergebnisse der Sicherheitsanalyse der DICOM- und HL7-Standards, einen Fuzzer “MedFUZZ” für diese Protokolle sowie einen Schwachstellenscanner “MedVAS”, der Schwachstellen in medizintechnischen Produktivumgebungen auffinden kann.
Y1  - 2022
U6  - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:836-opus-150072
SN  - 978-3-88579-717-3
SN  - 1617-5468
PB  - Gesellschaft für Informatik e.V.
CY  - Bonn
ER  - 
TY  - CHAP
A1  - Mayer, Peter
A1  - Poddebniak, Damian
A1  - Fischer, Konstantin
A1  - Brinkmann, Marcus
A1  - Somorovsky, Juraj
A1  - Schinzel, Sebastian
A1  - Volkamer, Melanie
T1  - "I don’t know why I check this...'' - Investigating Expert Users' Strategies to Detect Email Signature Spoofing Attacks
T2  - Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022)
N2  - OpenPGP is one of the two major standards for end-to-end email security. Several studies showed that serious usability issues exist with tools implementing this standard. However, a widespread assumption is that expert users can handle these tools and detect signature spoofing attacks. We present a user study investigating expert users' strategies to detect signature spoofing attacks in Thunderbird. We observed 25 expert users while they classified eight emails as either having a legitimate signature or not. Studying expert users explicitly gives us an upper bound of attack detection rates of all users dealing with PGP signatures. 52% of participants fell for at least one out of four signature spoofing attacks. Overall, participants did not have an established strategy for evaluating email signature legitimacy. We observed our participants apply 23 different types of checks when inspecting signed emails, but only 8 of these checks tended to be useful in identifying the spoofed or invalid signatures. In performing their checks, participants were frequently startled, confused, or annoyed with the user interface, which they found supported them little. All these results paint a clear picture: Even expert users struggle to verify email signatures, usability issues in email security are not limited to novice users, and developers may need proper guidance on implementing email signature GUIs correctly.
Y1  - 2022
UR  - https://www.usenix.org/conference/soups2022/presentation/mayer
SN  - 978-1-939133-30-4
SP  - 77
EP  - 96
PB  - USENIX Association
CY  - Boston, MA
ER  -