Promotion von Leonard Renners abgeschlossen

Leonard Renners konnte nach einer Corona-bedingten Verschiebung am 9. Juli erfolgreich seine Dissertation an der Universität der Bundeswehr in München verteidigen. Die Arbeit beschäftigt sich mit der Priorisierung von IT-Sicherheitsvorfällen. Die Priorisierung hilft dabei, frühzeitig kritische Vorfälle zu identifizieren und ist die Grundlage für den zielgerichteten Einsatz der knappen Zeit von Sicherheits-Analysten, die in einem Security Operations Center den Vorfällen nachgehen.

Herr Renners war an der Hochschule als wissenschaftlicher Mitarbeiter in einem Forschungsprojekt sowie aus Hochschulmitteln finanziert in der Arbeitsgruppe Trust@HsH der Fakultät IV (Abteilung Informatik) angestellt. Nach dem Auslaufen dieser Stelle wurde er aus Mitteln des Forschungsclusters “Smart Data Analytics” weiterbeschäftigt. Die Promotion erfolgte in Kooperation mit Prof. Dr. Gabi Dreo Rodosek von der Universität der Bundeswehr in München; auf Seiten der HsH wurde Herr Renners von Prof. Dr. Carsten Kleiner und Prof. Dr. Felix Heine betreut.

Trust@HsH presents paper at IDAACS 2019

On September 18th-21st the 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications took place in Metz, France.

The Trust@HsH research group, in person of Bastian Hellmann, presented a paper on A User Study of the Visualization-Assisted Evaluation and Management of Network Security Detection Events and Policies. The paper summarizes the design and results of a user study that was conducted in early 2019 in order to evaluate the quality and usefulness of the main features of the VisITMeta software and the overall IF-MAP based framework for visual analysis.

Similar to the previous IDAACS conferences of the years 2015 and 2017, where the Trust@HsH research group also presented their works, talks on other topics within the security domain as well as data acquisition and information processing were given.

Additionally, the organization team prepared a very interesting city tour of Metz together with a quite impressive tour of the Cathedral of Saint Stephen of Metz.

Trust@HsH presents papers at CyberIncident 2019

On AprJune 3rd-4th the C-MRiC Cyber Incident Conference took place in Oxford, UK. Cyber Incident is part of the Cyber Science 2019 Conference. The conference aims at research contributions with topics related cyber incidents, e.g. incident response or incident management.

The Trust@HsH research group presented their paper on Adaptive and Intelligible Prioritization for Network Security Incidents. With our paper, we propose an adaptive incident prioritization, which allows to automate certain tasks for the prioritization model management in order to continuously assess and improve a prioritization model.

We are particularly proud to announce that our contribution has been awareded Cyber Science 2019 – Best Papers!

New colleagues

As mentioned, new colleagues take over the work at the Trust@HsH research group as part of the GLACIER Project.

We welcome our new colleagues Nils Wellermann and Philip Klostermeyer, who started working at June 1st. Nils and Philip are currently pursuing their masters degrees in Computer Science at the University of Applied Sciences and Arts Hannover and are working part-time in the research project. The team will be completed on July 1st with Tim Laue joining the group as a full-time research associate.

We wish you a good start!

Leonard Renners and Bastian Hellmann leave the Trust@HsH Team

An era is coming to an end! Bastian Hellmann, the longest standing member and only remaining employee of the initial Trust@FHH research group is leaving the team. Bastian has been part of most research projects since 2008 and was a defining factor in the activities of our group.

Furthermore, Leonard Renners, who joined the group in 2014 is also finishing his research activivies and leaves the University of Applied Sciences and Arts Hanover. Leo has likewise been a long standing member and was involved in most of the recent activities.

This will be our final news, but we are glad to know that the GLACIER project just started and that with June 1st new members can continue the research activities at the HsH. We are happy to pass the baton on to the new generation of employees.

Finally, we would like to thank all former members as well as the former and current group lead for the wunderful time in this research group - we wish you all the best!

See you around

New research project GLACIER has started

We can proudly announce the start of our new research project “Angriffserkennung durch multidimensionale Analyse sicherheitsrelevanter Datenströme (GLACIER)”. GLACIER started on April 1st and will be completed in September 2021. The Kick-Off Meeting took place on April 4th at the DECOIT premises.

The goal of the GLACIER project is the development of a processing platform for the automated aggregation and analysis of network security data. A multi-dimensional evaluation should enable more sophisticated detection capabilities, including time-series analysis and anomaly detection, and will enable an easier misuse pattern description.

GLACIER will benefit from the experiences that we and our partner DECOIT GmbH gathered during the SIMU and CLEARER research projects. We are also happy that the relationship to the rt-solutions.de GmbH could be developed further leading to this joint project.

The GLACIER research project is funded by the German Federal Ministry of Education and Research (BMBF, FKZ: 16KIS0950).

Trust@HsH presents papers at ICDIS 2018

On April 08th-10th the 1st IEEE International Conference on Data Intelligence and Security took place in South Padre Island, Texas, USA. The conference covered multiple topics, specifically within the security and data intelligence domain.

The Trust@HsH research group presented their paper on A Feedback-based Evaluation Approach for the Continuous Adjustment of Incident Prioritization. With our paper, we discussed an approach to assist in a continuous tuning of incident prioritization and develops a process that involves feedback from an analyst in order to evaluate potential improvements.

Trust@HsH presents papers at IDAACS 2017

On September 20th-23rd the 9th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications took place in Bucharest, Romania. The Trust@HsH research group and their partners presented three papers on several topics in the area of network security.

Kai-Oliver Detken from the DECOIT GmbH in Bremen presented the paper Combining Network Access Control (NAC) and SIEM functionality based on Open Source containing the latest results within the CLEARER joint research project.

Leonard Renners held a presentation on Modeling and Learning Incident Prioritization in which an abstract model for the calculation of priorities for security incidents is proposed and results regarding the induction of a prioritization model using a model tree learner are discussed.

Bastian Hellmann also presented his paper on Integrating Visual Analysis of Network Security and Management of Detection System Configurations in which he discusses the advantages of a combination of the tasks to monitor and analyze the network situation together with the management of the security components and the assessment of changes in the configuration of the individual tools.

The conference covered more topics, both within the security domain and also in other tracks related to data acquisition and information processing.