Empirical research on IP blacklisting. - Christian J. Dietrich; Christian Rossow (CEAS, 2008)

Empirical research of IP blacklists. - Christian Dietrich 005; Christian Rossow (ISSE, 2008)

Empirische Untersuchung von IP-Blacklists. - Christian J. Dietrich; Christian Rossow (Sicherheit, 2008)

Sandnet: network traffic analysis of malicious software. - Christian Rossow; Christian J. Dietrich; Herbert Bos; Lorenzo Cavallaro; Maarten van Steen; Felix C. Freiling; Norbert Pohlmann (BADGERS@EuroSys, 2011)

On Botnets That Use DNS for Command and Control. - Christian J. Dietrich; Christian Rossow; Felix C. Freiling; Herbert Bos; Maarten van Steen; Norbert Pohlmann (EC2ND, 2011)

Manufacturing compromise: the emergence of exploit-as-a-service. - Chris Grier; Lucas Ballard; Juan Caballero; Neha Chachra; Christian J. Dietrich; Kirill Levchenko; Panayiotis Mavrommatis; Damon McCoy; Antonio Nappa; Andreas Pitsillidis; Niels Provos; M. Zubair Rafique; et al. (CCS, 2012)

Large-Scale Analysis of Malware Downloaders. - Christian Rossow; Christian J. Dietrich; Herbert Bos (DIMVA, 2012)

Prudent Practices for Designing Malware Experiments: Status Quo and Outlook. - Christian Rossow; Christian J. Dietrich; Chris Grier; Christian Kreibich; Vern Paxson; Norbert Pohlmann; Herbert Bos; Maarten van Steen (IEEE Symposium on Security and Privacy, 2012)

ProVeX: Detecting Botnets with Encrypted Command and Control Channels. - Christian Rossow; Christian J. Dietrich (DIMVA, 2013)

Highly resilient peer-to-peer botnets are here: An analysis of Gameover Zeus. - Dennis Andriesse; Christian Rossow; Brett Stone-Gross; Daniel Plohmann; Herbert Bos (MALWARE, 2013)

Exploiting visual appearance to cluster and detect rogue software. - Christian J. Dietrich; Christian Rossow; Norbert Pohlmann (SAC, 2013)

SoK: P2PWNED - Modeling and Evaluating the Resilience of Peer-to-Peer Botnets. - Christian Rossow; Dennis Andriesse; Tillmann Werner; Brett Stone-Gross; Daniel Plohmann; Christian J. Dietrich; Herbert Bos (IEEE Symposium on Security and Privacy, 2013)

CoCoSpot: Clustering and recognizing botnet command and control channels using traffic analysis. - Christian J. Dietrich; Christian Rossow; Norbert Pohlmann (Comput. Networks, 2013)

Leveraging semantic signatures for bug search in binary programs. - Jannik Pewny; Felix Schuster; Lukas Bernhard; Thorsten Holz; Christian Rossow (ACSAC, 2014)

On measuring the impact of DDoS botnets. - Arne Welzel; Christian Rossow; Herbert Bos (EUROSEC, 2014)

On the (In)Security of Mobile Two-Factor Authentication. - Alexandra Dmitrienko; Christopher Liebchen; Christian Rossow; Ahmad-Reza Sadeghi (Financial Cryptography, 2014)

On advanced monitoring in resilient and unstructured P2P botnets. - Shankar Karuppayah; Mathias Fischer 001; Christian Rossow; Max Mühlhäuser (ICC, 2014)

Amplification Hell: Revisiting Network Protocols for DDoS Abuse. - Christian Rossow (NDSS, 2014)

Paint It Black: Evaluating the Effectiveness of Malware Blacklists. - Marc Kührer; Christian Rossow; Thorsten Holz (RAID, 2014)

Exit from Hell? Reducing the Impact of Amplification DDoS Attacks. - Marc Kührer; Thomas Hupperich; Christian Rossow; Thorsten Holz (USENIX Security Symposium, 2014)

Hell of a Handshake: Abusing TCP for Reflective Amplification DDoS Attacks. - Marc Kührer; Thomas Hupperich; Christian Rossow; Thorsten Holz (WOOT, 2014)

POSTER: In the Net of the Spider: Measuring the Anonymity-Impact of Network-level Adversaries Against Tor. - Michael Backes 001; Simon Koch 001; Sebastian Meiser 001; Esfandiar Mohammadi; Christian Rossow (CCS, 2015)

Zeus Milker: Circumventing the P2P Zeus Neighbor List Restriction Mechanism. - Shankar Karuppayah; Stefanie Roos; Christian Rossow; Max Mühlhäuser; Mathias Fischer 001 (ICDCS, 2015)

Reliable Recon in Adversarial Peer-to-Peer Botnets. - Dennis Andriesse; Christian Rossow; Herbert Bos (Internet Measurement Conference, 2015)

Going Wild: Large-Scale Classification of Open DNS Resolvers. - Marc Kührer; Thomas Hupperich; Jonas Bushart; Christian Rossow; Thorsten Holz (Internet Measurement Conference, 2015)

AmpPot: Monitoring and Defending Against Amplification DDoS Attacks. - Lukas Krämer; Johannes Krupp; Daisuke Makita; Tomomi Nishizoe; Takashi Koide; Katsunari Yoshioka; Christian Rossow (RAID, 2015)

jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. - Giancarlo Pellegrino; Constantin Tschürtz; Eric Bodden; Christian Rossow (RAID, 2015)

IoTPOT: Analysing the Rise of IoT Compromises. - Yin Minn Pa Pa; Shogo Suzuki; Katsunari Yoshioka; Tsutomu Matsumoto; Takahiro Kasama; Christian Rossow (WOOT, 2015)

Cashing Out the Great Cannon? On Browser-Based DDoS Attacks and Economics. - Giancarlo Pellegrino; Christian Rossow; Fabrice J. Ryba; Thomas C. Schmidt; Matthias Wählisch (WOOT, 2015)

Amplification and DRDoS Attack Defense - A Survey and New Perspectives. - Fabrice J. Ryba; Matthew Orlinski; Matthias Wählisch; Christian Rossow; Thomas C. Schmidt (CoRR, 2015)

Identifying the Scan and Attack Infrastructures Behind Amplification DDoS Attacks. - Johannes Krupp; Michael Backes 001; Christian Rossow (CCS, 2016)

POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. - Ben Stock; Giancarlo Pellegrino; Christian Rossow; Martin Johns; Michael Backes 001 (CCS, 2016)

- vatiCAN - Vetted, Authenticated CAN Bus. - Stefan Nürnberger; Christian Rossow (CHES, 2016)

Detecting Hardware-Assisted Virtualization. - Michael Brengel; Michael Backes 001; Christian Rossow (DIMVA, 2016)

On the Feasibility of TTL-Based Filtering for DRDoS Mitigation. - Michael Backes 001; Thorsten Holz; Christian Rossow; Teemu Rytilahti; Milivoj Simeonovski; Ben Stock (RAID, 2016)

Uses and Abuses of Server-Side Requests. - Giancarlo Pellegrino; Onur Catakoglu; Davide Balzarotti; Christian Rossow (RAID, 2016)

SandPrint: Fingerprinting Malware Sandboxes to Provide Intelligence for Sandbox Evasion. - Akira Yokoyama; Kou Ishii; Rui Tanabe; Yinmin Papa; Katsunari Yoshioka; Tsutomu Matsumoto; Takahiro Kasama; Daisuke Inoue; Michael Brengel; Michael Backes 001; Christian Rossow (RAID, 2016)

What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses. - Giorgi Maisuradze; Michael Backes 001; Christian Rossow (USENIX Security Symposium, 2016)

Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. - Ben Stock; Giancarlo Pellegrino; Christian Rossow; Martin Johns; Michael Backes 001 (USENIX Security Symposium, 2016)

Angreiferjagd im "Internet der Dinge". - Sebastian Gerling; Christian Rossow (Datenschutz und Datensicherheit, 2016)

IoTPOT: A Novel Honeypot for Revealing Current IoT Threats. - Yin Minn Pa Pa; Shogo Suzuki; Katsunari Yoshioka; Tsutomu Matsumoto; Takahiro Kasama; Christian Rossow (J. Inf. Process., 2016)

Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. - Giancarlo Pellegrino; Martin Johns; Simon Koch 001; Michael Backes 001; Christian Rossow (CCS, 2017)

Millions of targets under attack: a macroscopic characterization of the DoS ecosystem. - Mattijs Jonker; Alistair King; Johannes Krupp; Christian Rossow; Anna Sperotto; Alberto Dainotti (Internet Measurement Conference, 2017)

Dachshund: Digging for and Securing (Non-)Blinded Constants in JIT Code. - Giorgi Maisuradze; Michael Backes 001; Christian Rossow (NDSS, 2017)

Linking Amplification DDoS Attacks to Booter Services. - Johannes Krupp; Mohammad Karami; Christian Rossow; Damon McCoy; Michael Backes 001 (RAID, 2017)

Who Controls the Internet?: Analyzing Global Threats using Property Graph Traversals. - Milivoj Simeonovski; Giancarlo Pellegrino; Christian Rossow; Michael Backes 001 (WWW, 2017)

Cross-architecture bug search in binary executables. - Jannik Pewny; Behrad Garmany; Robert Gawlik; Christian Rossow; Thorsten Holz (it Inf. Technol., 2017)

ret2spec: Speculative Execution Using Return Stack Buffers. - Giorgi Maisuradze; Christian Rossow (CCS, 2018)

MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps. - Michael Brengel; Christian Rossow (DIMVA, 2018)

Evasive Malware via Identifier Implanting. - Rui Tanabe; Wataru Ueno; Kou Ishii; Katsunari Yoshioka; Tsutomu Matsumoto; Takahiro Kasama; Daisuke Inoue; Christian Rossow (DIMVA, 2018)

Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. - Ben Stock; Giancarlo Pellegrino; Frank Li 001; Michael Backes 001; Christian Rossow (NDSS, 2018)

Identifying Key Leakage of Bitcoin Users. - Michael Brengel; Christian Rossow (RAID, 2018)

DNS Unchained: Amplified Application-Layer DoS Attacks Against DNS Authoritatives. - Jonas Bushart; Christian Rossow (RAID, 2018)

The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. - Marten Oltrogge; Erik Derr; Christian Stransky; Yasemin Acar; Sascha Fahl; Christian Rossow; Giancarlo Pellegrino; Sven Bugiel; Michael Backes 001 (IEEE Symposium on Security and Privacy, 2018)

teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts. - Johannes Krupp; Christian Rossow (USENIX Security Symposium, 2018)

Speculose: Analyzing the Security Implications of Speculative Execution in CPUs. - Giorgi Maisuradze; Christian Rossow (CoRR, 2018)

MALPITY: Automatic Identification and Exploitation of Tarpit Vulnerabilities in Malware. - Walla Sebastian; Christian Rossow (EuroS&P, 2019)

Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. - Marius Steffens; Christian Rossow; Martin Johns; Ben Stock (NDSS, 2019)

DPIFuzz: A Differential Fuzzing Framework to Detect DPI Elusion Strategies for QUIC. - Gaganjeet Singh Reen; Christian Rossow (ACSAC, 2020)

On the Origin of Scanning: The Impact of Location on Internet-Wide Scans. - Gerry Wan; Liz Izhikevich; David Adrian; Katsunari Yoshioka; Ralph Holz; Christian Rossow; Zakir Durumeric (Internet Measurement Conference, 2020)

Slitheen++: Stealth TLS-based Decoy Routing. - Benedikt Birtel; Christian Rossow (FOCI @ USENIX Security Symposium, 2020)

Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS. - Jonas Bushart; Christian Rossow (FOCI @ USENIX Security Symposium, 2020)

SENG, the SGX-Enforcing Network Gateway: Authorizing Communication from Shielded Clients. - Fabian Schwarz; Christian Rossow (USENIX Security Symposium, 2020)

Cali: Compiler-Assisted Library Isolation. - Markus Bauer 004; Christian Rossow (AsiaCCS, 2021)

ANYway: Measuring the Amplification DDoS Potential of Domains. - Olivier van der Toorn; Johannes Krupp; Mattijs Jonker; Roland van Rijswijk-Deij; Christian Rossow; Anna Sperotto (CNSM, 2021)

NoVT: Eliminating C++ Virtual Calls to Mitigate Vtable Hijacking. - Markus Bauer 004; Christian Rossow (EuroS&P, 2021)

BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks. - Johannes Krupp; Christian Rossow (EuroS&P, 2021)

YARIX: Scalable YARA-based Malware Intelligence. - Michael Brengel; Christian Rossow (USENIX Security Symposium, 2021)

Osiris: Automated Discovery of Microarchitectural Side Channels. - Daniel Weber 007; Ahmad Ibrahim 002; Hamed Nemati; Michael Schwarz 001; Christian Rossow (USENIX Security Symposium, 2021)

TyPro: Forward CFI for C-Style Indirect Function Calls Using Type Propagation. - Markus Bauer 004; Ilya Grishchenko; Christian Rossow (ACSAC, 2022)

Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels. - Ahmad Ibrahim 002; Hamed Nemati; Till Schlüter; Nils Ole Tippenhauer; Christian Rossow (CCS, 2022)

FeIDo: Recoverable FIDO2 Tokens Using Electronic IDs. - Fabian Schwarz; Khue Do; Gunnar Heide; Lucjan Hanzlik; Christian Rossow (CCS, 2022)

Browser-Based CPU Fingerprinting. - Leon Trampert; Christian Rossow; Michael Schwarz 001 (ESORICS (3), 2022)

AmpFuzz: Fuzzing for Amplification DDoS Vulnerabilities. - Johannes Krupp; Ilya Grishchenko; Christian Rossow (USENIX Security Symposium, 2022)

FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers. - Till Schlüter; Amit Choudhari; Lorenz Hetterich; Leon Trampert; Hamed Nemati; Ahmad Ibrahim 002; Michael Schwarz 001; Christian Rossow; Nils Ole Tippenhauer (CCS, 2023)

ResolFuzz: Differential Fuzzing of DNS Resolvers. - Jonas Bushart; Christian Rossow (ESORICS (2), 2023)

Anomaly-based Filtering of Application-Layer DDoS Against DNS Authoritatives. - Jonas Bushart; Christian Rossow (EuroS&P, 2023)

Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8. - Lorenz Hetterich; Markus Bauer 004; Michael Schwarz 001; Christian Rossow (AsiaCCS, 2024)

The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments. - Raphael Hiesgen; Marcin Nawrocki; Marinho P. Barcellos; Daniel Kopp; Oliver Hohlfeld; Echo Chan; Roland Dobbins; Christian Doerr; Christian Rossow; Daniel R. Thomas; Mattijs Jonker; Ricky K. P. Mok; et al. (IMC, 2024)

Down to earth! Guidelines for DGA-based Malware Detection. - Bogdan-Constantin Cebere; Jonathan Lasse Bennet Flueren; Silvia Sebastián; Daniel Plohmann; Christian Rossow (RAID, 2024)

Understanding Web Fingerprinting with a Protocol-Centric Approach. - Bogdan Cebere; Christian Rossow (RAID, 2024)

TCP Spoofing: Reliable Payload Transmission Past the Spoofed TCP Handshake. - Yepeng Pan; Christian Rossow (SP, 2024)

Loopy Hell(ow): Infinite Traffic Loops at the Application Layer. - Yepeng Pan; Anna Ascheman; Christian Rossow (USENIX Security Symposium, 2024)

00SEVen - Re-enabling Virtual Machine Forensics: Introspecting Confidential VMs Using Privileged in-VM Agents. - Fabian Schwarz; Christian Rossow (USENIX Security Symposium, 2024)

Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting. - Leon Trampert; Daniel Weber 007; Lukas Gerlach 001; Christian Rossow; Michael Schwarz 001 (NDSS, 2025)

Peripheral Instinct: How External Devices Breach Browser Sandboxes. - Leon Trampert; Lorenz Hetterich; Lukas Gerlach 001; Mona Schappert; Christian Rossow; Michael Schwarz 001 (WWW, 2025)

KeyVisor - A Lightweight ISA Extension for Protected Key Handles with CPU-enforced Usage Policies. - Fabian Schwarz; Jan Philipp Thoma; Christian Rossow; Tim Güneysu (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2025)