Christian Rossow

Publication Activity (10 Years)

Years Active: 2008-2024
Publications (10 Years): 66

Top Topics

Dynamic Analysis

Privacy Guarantees

Distributed Denial Of Service

Top Venues

USENIX Security Symposium

Publications

Lorenz Hetterich, Markus Bauer, Michael Schwarz, Christian Rossow
Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8. AsiaCCS (2024)
Fabian Schwarz, Christian Rossow
00SEVen - Re-enabling Virtual Machine Forensics: Introspecting Confidential VMs Using Privileged in-VM Agents. USENIX Security Symposium (2024)
Yepeng Pan, Anna Ascheman, Christian Rossow
Loopy Hell(ow): Infinite Traffic Loops at the Application Layer. USENIX Security Symposium (2024)
Jonas Bushart, Christian Rossow
Anomaly-based Filtering of Application-Layer DDoS Against DNS Authoritatives. EuroS&P (2023)
Jonas Bushart, Christian Rossow
ResolFuzz: Differential Fuzzing of DNS Resolvers. ESORICS (2) (2023)
Till Schlüter, Amit Choudhari, Lorenz Hetterich, Leon Trampert, Hamed Nemati, Ahmad Ibrahim, Michael Schwarz, Christian Rossow, Nils Ole Tippenhauer
FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers. CCS (2023)
Johannes Krupp, Ilya Grishchenko, Christian Rossow
AmpFuzz: Fuzzing for Amplification DDoS Vulnerabilities. USENIX Security Symposium (2022)
Ahmad Ibrahim, Hamed Nemati, Till Schlüter, Nils Ole Tippenhauer, Christian Rossow
Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels. CCS (2022)
Ahmad Ibrahim, Hamed Nemati, Till Schlüter, Nils Ole Tippenhauer, Christian Rossow
Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels. CoRR (2022)
Markus Bauer, Ilya Grishchenko, Christian Rossow
TyPro: Forward CFI for C-Style Indirect Function Calls Using Type Propagation. ACSAC (2022)
Leon Trampert, Christian Rossow, Michael Schwarz
Browser-Based CPU Fingerprinting. ESORICS (3) (2022)
Fabian Schwarz, Khue Do, Gunnar Heide, Lucjan Hanzlik, Christian Rossow
FeIDo: Recoverable FIDO2 Tokens Using Electronic IDs. CCS (2022)
Olivier van der Toorn, Johannes Krupp, Mattijs Jonker, Roland van Rijswijk-Deij, Christian Rossow, Anna Sperotto
ANYway: Measuring the Amplification DDoS Potential of Domains. CNSM (2021)
Michael Brengel, Christian Rossow
YARIX: Scalable YARA-based Malware Intelligence. USENIX Security Symposium (2021)
Markus Bauer, Christian Rossow
Cali: Compiler-Assisted Library Isolation. AsiaCCS (2021)
Johannes Krupp, Christian Rossow
BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks. CoRR (2021)
Johannes Krupp, Christian Rossow
BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks. EuroS&P (2021)
Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
Osiris: Automated Discovery of Microarchitectural Side Channels. USENIX Security Symposium (2021)
Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
Osiris: Automated Discovery of Microarchitectural Side Channels. CoRR (2021)
Markus Bauer, Christian Rossow
NoVT: Eliminating C++ Virtual Calls to Mitigate Vtable Hijacking. EuroS&P (2021)
Jonas Bushart, Christian Rossow
Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS. FOCI @ USENIX Security Symposium (2020)
Gerry Wan, Liz Izhikevich, David Adrian, Katsunari Yoshioka, Ralph Holz, Christian Rossow, Zakir Durumeric
On the Origin of Scanning: The Impact of Location on Internet-Wide Scans. Internet Measurement Conference (2020)
Fabian Schwarz, Christian Rossow
SENG, the SGX-Enforcing Network Gateway: Authorizing Communication from Shielded Clients. USENIX Security Symposium (2020)
Gaganjeet Singh Reen, Christian Rossow
DPIFuzz: A Differential Fuzzing Framework to Detect DPI Elusion Strategies for QUIC. ACSAC (2020)
Benedikt Birtel, Christian Rossow
Slitheen++: Stealth TLS-based Decoy Routing. FOCI @ USENIX Security Symposium (2020)
Jonas Bushart, Christian Rossow
Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS. CoRR (2019)
Marius Steffens, Christian Rossow, Martin Johns, Ben Stock
Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. NDSS (2019)
Walla Sebastian, Christian Rossow
MALPITY: Automatic Identification and Exploitation of Tarpit Vulnerabilities in Malware. EuroS&P (2019)
Rui Tanabe, Wataru Ueno, Kou Ishii, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Daisuke Inoue, Christian Rossow
Evasive Malware via Identifier Implanting. DIMVA (2018)
Jonas Bushart, Christian Rossow
DNS Unchained: Amplified Application-Layer DoS Attacks Against DNS Authoritatives. RAID (2018)
Giorgi Maisuradze, Christian Rossow
Speculose: Analyzing the Security Implications of Speculative Execution in CPUs. CoRR (2018)
Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy (2018)
Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow
Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. NDSS (2018)
Michael Brengel, Christian Rossow
MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps. DIMVA (2018)
Johannes Krupp, Christian Rossow
teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts. USENIX Security Symposium (2018)
Giorgi Maisuradze, Christian Rossow
ret2spec: Speculative Execution Using Return Stack Buffers. CCS (2018)
Giorgi Maisuradze, Christian Rossow
ret2spec: Speculative Execution Using Return Stack Buffers. CoRR (2018)
Michael Brengel, Christian Rossow
Identifying Key Leakage of Bitcoin Users. RAID (2018)
Milivoj Simeonovski, Giancarlo Pellegrino, Christian Rossow, Michael Backes
Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals. WWW (2017)
Giorgi Maisuradze, Michael Backes, Christian Rossow
Dachshund: Digging for and Securing (Non-)Blinded Constants in JIT Code. NDSS (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS (2017)
Mattijs Jonker, Alistair King, Johannes Krupp, Christian Rossow, Anna Sperotto, Alberto Dainotti
Millions of targets under attack: a macroscopic characterization of the DoS ecosystem. Internet Measurement Conference (2017)
Johannes Krupp, Mohammad Karami, Christian Rossow, Damon McCoy, Michael Backes
Linking Amplification DDoS Attacks to Booter Services. RAID (2017)
Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
Cross-architecture bug search in binary executables. it Inf. Technol. 59 (2) (2017)
Sebastian Gerling, Christian Rossow
Angreiferjagd im "Internet der Dinge". Datenschutz und Datensicherheit 40 (8) (2016)
Michael Backes, Thorsten Holz, Christian Rossow, Teemu Rytilahti, Milivoj Simeonovski, Ben Stock
On the Feasibility of TTL-Based Filtering for DRDoS Mitigation. RAID (2016)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS (2016)
Stefan Nürnberger, Christian Rossow
- vatiCAN - Vetted, Authenticated CAN Bus. CHES (2016)
Giancarlo Pellegrino, Onur Catakoglu, Davide Balzarotti, Christian Rossow
Uses and Abuses of Server-Side Requests. RAID (2016)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium (2016)
Johannes Krupp, Michael Backes, Christian Rossow
Identifying the Scan and Attack Infrastructures Behind Amplification DDoS Attacks. CCS (2016)
Akira Yokoyama, Kou Ishii, Rui Tanabe, Yinmin Papa, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Daisuke Inoue, Michael Brengel, Michael Backes, Christian Rossow
SandPrint: Fingerprinting Malware Sandboxes to Provide Intelligence for Sandbox Evasion. RAID (2016)
Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Christian Rossow
IoTPOT: A Novel Honeypot for Revealing Current IoT Threats. J. Inf. Process. 24 (3) (2016)
Michael Brengel, Michael Backes, Christian Rossow
Detecting Hardware-Assisted Virtualization. DIMVA (2016)
Giorgi Maisuradze, Michael Backes, Christian Rossow
What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses. USENIX Security Symposium (2016)
Dennis Andriesse, Christian Rossow, Herbert Bos
Reliable Recon in Adversarial Peer-to-Peer Botnets. Internet Measurement Conference (2015)
Marc Kührer, Thomas Hupperich, Jonas Bushart, Christian Rossow, Thorsten Holz
Going Wild: Large-Scale Classification of Open DNS Resolvers. Internet Measurement Conference (2015)
Lukas Krämer, Johannes Krupp, Daisuke Makita, Tomomi Nishizoe, Takashi Koide, Katsunari Yoshioka, Christian Rossow
AmpPot: Monitoring and Defending Against Amplification DDoS Attacks. RAID (2015)
Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, Tsutomu Matsumoto, Takahiro Kasama, Christian Rossow
IoTPOT: Analysing the Rise of IoT Compromises. WOOT (2015)
Shankar Karuppayah, Stefanie Roos, Christian Rossow, Max Mühlhäuser, Mathias Fischer
Zeus Milker: Circumventing the P2P Zeus Neighbor List Restriction Mechanism. ICDCS (2015)
Fabrice J. Ryba, Matthew Orlinski, Matthias Wählisch, Christian Rossow, Thomas C. Schmidt
Amplification and DRDoS Attack Defense - A Survey and New Perspectives. CoRR (2015)
Michael Backes, Simon Koch, Sebastian Meiser, Esfandiar Mohammadi, Christian Rossow
POSTER: In the Net of the Spider: Measuring the Anonymity-Impact of Network-level Adversaries Against Tor. CCS (2015)
Giancarlo Pellegrino, Christian Rossow, Fabrice J. Ryba, Thomas C. Schmidt, Matthias Wählisch
Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics. WOOT (2015)
Giancarlo Pellegrino, Constantin Tschürtz, Eric Bodden, Christian Rossow
jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. RAID (2015)
Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
Cross-Architecture Bug Search in Binary Executables. IEEE Symposium on Security and Privacy (2015)
Shankar Karuppayah, Mathias Fischer, Christian Rossow, Max Mühlhäuser
On advanced monitoring in resilient and unstructured P2P botnets. ICC (2014)
Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
Hell of a Handshake: Abusing TCP for Reflective Amplification DDoS Attacks. WOOT (2014)
Marc Kührer, Christian Rossow, Thorsten Holz
Paint It Black: Evaluating the Effectiveness of Malware Blacklists. RAID (2014)
Arne Welzel, Christian Rossow, Herbert Bos
On measuring the impact of DDoS botnets. EUROSEC (2014)
Christian Rossow
Amplification Hell: Revisiting Network Protocols for DDoS Abuse. NDSS (2014)
Jannik Pewny, Felix Schuster, Lukas Bernhard, Thorsten Holz, Christian Rossow
Leveraging semantic signatures for bug search in binary programs. ACSAC (2014)
Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
Exit from Hell? Reducing the Impact of Amplification DDoS Attacks. USENIX Security Symposium (2014)
Alexandra Dmitrienko, Christopher Liebchen, Christian Rossow, Ahmad-Reza Sadeghi
On the (In)Security of Mobile Two-Factor Authentication. Financial Cryptography (2014)
Christian Rossow, Dennis Andriesse, Tillmann Werner, Brett Stone-Gross, Daniel Plohmann, Christian J. Dietrich, Herbert Bos
SoK: P2PWNED - Modeling and Evaluating the Resilience of Peer-to-Peer Botnets. IEEE Symposium on Security and Privacy (2013)
Dennis Andriesse, Christian Rossow, Brett Stone-Gross, Daniel Plohmann, Herbert Bos
Highly resilient peer-to-peer botnets are here: An analysis of Gameover Zeus. MALWARE (2013)
Christian J. Dietrich, Christian Rossow, Norbert Pohlmann
Exploiting visual appearance to cluster and detect rogue software. SAC (2013)
Christian J. Dietrich, Christian Rossow, Norbert Pohlmann
CoCoSpot: Clustering and recognizing botnet command and control channels using traffic analysis. Comput. Networks 57 (2) (2013)
Christian Rossow, Christian J. Dietrich
ProVeX: Detecting Botnets with Encrypted Command and Control Channels. DIMVA (2013)
Chris Grier, Lucas Ballard, Juan Caballero, Neha Chachra, Christian J. Dietrich, Kirill Levchenko, Panayiotis Mavrommatis, Damon McCoy, Antonio Nappa, Andreas Pitsillidis, Niels Provos, M. Zubair Rafique, Moheeb Abu Rajab, Christian Rossow, Kurt Thomas, Vern Paxson, Stefan Savage, Geoffrey M. Voelker
Manufacturing compromise: the emergence of exploit-as-a-service. CCS (2012)
Christian Rossow, Christian J. Dietrich, Herbert Bos
Large-Scale Analysis of Malware Downloaders. DIMVA (2012)
Christian Rossow, Christian J. Dietrich, Chris Grier, Christian Kreibich, Vern Paxson, Norbert Pohlmann, Herbert Bos, Maarten van Steen
Prudent Practices for Designing Malware Experiments: Status Quo and Outlook. IEEE Symposium on Security and Privacy (2012)
Christian J. Dietrich, Christian Rossow, Felix C. Freiling, Herbert Bos, Maarten van Steen, Norbert Pohlmann
On Botnets That Use DNS for Command and Control. EC2ND (2011)
Christian Rossow, Christian J. Dietrich, Herbert Bos, Lorenzo Cavallaro, Maarten van Steen, Felix C. Freiling, Norbert Pohlmann
Sandnet: network traffic analysis of malicious software. BADGERS@EuroSys (2011)
Christian J. Dietrich, Christian Rossow
Empirical research on IP blacklisting. CEAS (2008)
Christian J. Dietrich, Christian Rossow
Empirical research of IP blacklists. ISSE (2008)
Christian J. Dietrich, Christian Rossow
Empirische Untersuchung von IP-Blacklists. Sicherheit (2008)