Fast Learning Neural Network Intrusion Detection System. - Robert Koch 002; Gabi Dreo (AIMS, 2009)

Changing Network Behavior. - Robert Koch 002 (NSS, 2009)

User identification in encrypted network communications. - Robert Koch 002; Gabi Dreo Rodosek (CNSM, 2010)

Command Evaluation in Encrypted Remote Sessions. - Robert Koch 002; Gabi Dreo Rodosek (NSS, 2010)

Security System for Encrypted Environments (S2E2). - Robert Koch 002; Gabi Dreo Rodosek (RAID, 2010)

Towards next-generation Intrusion Detection. - Robert Koch 002 (CyCon, 2011)

Data control in social networks. - Robert Koch 002; Dominik Holzapfel; Gabi Dreo Rodosek (NSS, 2011)

Systemarchitektur zur Ein- und Ausbruchserkennung in verschlüsselten Umgebungen. - Robert Koch 002 (2011)

The role of COTS products for high security systems. - Robert Koch 002; Gabi Dreo Rodosek (CyCon, 2012)

Attack trends in present computer networks. - Robert Koch 002; Björn Stelte; Mario Golling (CyCon, 2012)

An architecture for supervising COTS products. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (CNS, 2013)

Attracting sophisticated attacks to secure systems: A new honeypot architecture. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (CNS, 2013)

Geolocation and Verification of IP-Addresses with Specific Focus on IPv6. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (CSS, 2013)

Architecture for evaluating and correlating NIDS in real - World networks. - Robert Koch 002; Mario Golling (CyCon, 2013)

Ganzheitliche Architektur zur Entwicklung und Analyse sicherheitskritischer Systeme und Anwendungen. - Mario Golling; Robert Koch 002; Peter Hillmann; Gabi Dreo Rodosek (DFN-Forum Kommunikationstechnologien, 2013)

YANG2UML: Bijective transformation and simplification of YANG to UML. - Mario Golling; Robert Koch 002; Peter Hillmann; Rick Hofstede; Frank Tietze (CNSM, 2014)

Towards multi-layered intrusion detection in high-speed networks. - Mario Golling; Rick Hofstede; Robert Koch 002 (CyCon, 2014)

Smart defence: an architecture for new challenges to cyber security. - Mario Golling; Robert Koch 002; Peter Hillmann; Gabi Dreo Rodosek (DFN-Forum Kommunikationstechnologien, 2014)

Architektur zur mehrstufigen Angriffserkennung in Hochgeschwindigkeits-Backbone-Netzen. - Mario Golling; Robert Koch 002; Lars Stiemert (DFN-Forum Kommunikationstechnologien, 2014)

Experimental multi-FPGA GNSS receiver platform. - Fabio Garzia; Alexander Rügamer; Robert Koch 002; Philipp Neumaier; Ekaterina Serezhkina; Matthias Overbeck; Günter Rohmer (FPL, 2014)

A Revised Attack Taxonomy for a New Generation of Smart Attacks. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (Comput. Inf. Sci., 2014)

Behavior-based intrusion detection in encrypted environments. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (IEEE Commun. Mag., 2014)

Blackout and now? Network Centric Warfare in an anti-access area-denial theatre. - Robert Koch 002; Mario Golling (CyCon, 2015)

An agent-based framework for decentralized reconstruction of attack paths. - Mario Golling; Robert Koch 002; Frank Tietze; Sandy-Dorotea Hein; Michael Kretzschmar; Gabi Dreo Rodosek (DFN-Forum Kommunikationstechnologien, 2015)

A Decentralized Framework for Geolocation-Based Pre-Incident Network Forensics. - Robert Koch 002; Mario Golling; Lars Stiemert; Volker Eiseler; Frank Tietze; Gabi Dreo Rodosek (HPCC/CSS/ICESS, 2015)

On the evaluation of military simulations: towards a taxonomy of assessment criteria. - Mario Golling; Robert Koch 002; Peter Hillmann; Volker Eiseler; Lars Stiemert; Andres Rekker (MilCIS, 2015)

Disequilibrium: Tor's Exit Node Selection under the Stereoscope. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (TrustCom/BigDataSE/ISPA (1), 2015)

Weapons systems and cyber security - a challenging union. - Robert Koch 002; Mario Golling (CyCon, 2016)

Privacy-aware intrusion detection in high-speed backbone networks - design and prototypical implementation of a multi-layered NIDS. - Mario Golling; Robert Koch 002; Gabi Dreo Rodosek (DFN-Forum Kommunikationstechnologien, 2016)

Dr. WATTson: Lightweight current-based Intrusion Detection (CBID). - Robert Koch 002; Teo Kuhn; Marcel Odenwald; Gabi Dreo Rodosek (PST, 2016)

How Anonymous Is the Tor Network? A Long-Term Black-Box Investigation. - Robert Koch 002; Mario Golling; Gabi Dreo Rodosek (Computer, 2016)

Using Geolocation for the Strategic Preincident Preparation of an IT Forensics Analysis. - Robert Koch 002; Mario Golling; Lars Stiemert; Gabi Dreo Rodosek (IEEE Syst. J., 2016)

Defending the grid: Backfitting non-expandable control systems. - Robert Koch 002; Teo Kuhn (CyCon, 2017)

On the Perception of Risk Assessment in Intrusion Detection Systems. - Mario Golling; Robert Koch 002; Gabi Dreo Rodosek (DFN-Forum Kommunikationstechnologien, 2017)

The cyber decade: Cyber defence at a X-ing point. - Robert Koch 002; Mario Golling (CyCon, 2018)

Report on the 10th International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2016) - Management and Security in the Age of Hyperconnectivity. - Remi Badonnel; Robert Koch 002; Martin Drasar; Aiko Pras; Volker Eiseler; Lars Stiemert; Sebastian Seeber; Daphné Tuncer; Marinos Charalambides; Gabi Dreo Rodosek (J. Netw. Syst. Manag., 2018)

Silent Battles: Towards Unmasking Hidden Cyber Attack. - Robert Koch 002; Mario Golling (CyCon, 2019)

Epidemic? The Attack Surface of German Hospitals during the COVID-19 Pandemic. - Johannes Klick; Robert Koch 002; Thomas Brandstetter (CyCon, 2021)

Business@War: The IT Companies Helping to Defend Ukraine. - Bilyana Lilly; Kenneth Geers; Greg Rattray; Robert Koch 002 (CyCon, 2023)