Defining Malicious Behavior. - Hermann Dornhackl; Konstantin Kadletz; Robert Luh; Paul Tavolato (ARES, 2014)

Malicious Behavior Patterns. - Hermann Dornhackl; Konstantin Kadletz; Robert Luh; Paul Tavolato (SOSE, 2014)

Problem characterization and abstraction for visual analytics in behavior-based malware pattern analysis. - Markus Wagner 008; Wolfgang Aigner; Alexander Rind; Hermann Dornhackl; Konstantin Kadletz; Robert Luh; Paul Tavolato (VizSEC, 2014)

Classifying malicious system behavior using event propagation trees. - Stefan Marschalek; Robert Luh; Manfred Kaiser; Sebastian Schrittwieser (iiWAS, 2015)

A Survey of Visualization Systems for Malware Analysis. - Markus Wagner 008; Fabian Fischer 001; Robert Luh; Andrea Haberson; Alexander Rind; Daniel A. Keim; Wolfgang Aigner (EuroVis (STARs), 2015)

TAON: an ontology-based approach to mitigating targeted attacks. - Robert Luh; Sebastian Schrittwieser; Stefan Marschalek (iiWAS, 2016)

Empirical Malware Research through Observation of System Behaviour. - Stefan Marschalek; Manfred Kaiser; Robert Luh; Sebastian Schrittwieser (WWW (Companion Volume), 2016)

LLR-Based Sentiment Analysis for Kernel Event Sequences. - Robert Luh; Sebastian Schrittwieser; Stefan Marschalek (AINA, 2017)

A Bigram Supported Generic Knowledge-Assisted Malware Analysis System: BiG2-KAMAS. - Niklas Thür; Markus Wagner 008; Johannes Schick; Christina Niederer; Jürgen Eckel; Robert Luh; Wolfgang Aigner (Forum Media Technology, 2017)

Sequitur-based Inference and Analysis Framework for Malicious System Behavior. - Robert Luh; Gregor Schramm; Markus Wagner 008; Sebastian Schrittwieser (ICISSP, 2017)

Design of an Anomaly-based Threat Detection & Explication System. - Robert Luh; Sebastian Schrittwieser; Stefan Marschalek; Helge Janicke (ICISSP, 2017)

Longkit - A Universal Framework for BIOS/UEFI Rootkits in System Management Mode. - Julian Rauchberger; Robert Luh; Sebastian Schrittwieser (ICISSP, 2017)

On the Impact of Kernel Code Vulnerabilities in IoT Devices. - Sebastian Eresheim; Robert Luh; Sebastian Schrittwieser (ICSSA, 2017)

Endpoint Data Classification Using Markov Chains. - Stefan Marschalek; Robert Luh; Sebastian Schrittwieser (ICSSA, 2017)

Poster: Design of an Anomaly-based Threat Detection & Explication System. - Robert Luh; Sebastian Schrittwieser; Stefan Marschalek; Helge Janicke; Edgar R. Weippl (SACMAT, 2017)

The Evolution of Process Hiding Techniques in Malware - Current Threats and Possible Countermeasures. - Sebastian Eresheim; Robert Luh; Sebastian Schrittwieser (J. Inf. Process., 2017)

Semantics-aware detection of targeted attacks: a survey. - Robert Luh; Stefan Marschalek; Manfred Kaiser; Helge Janicke; Sebastian Schrittwieser (J. Comput. Virol. Hacking Tech., 2017)

The Other Side of the Coin: A Framework for Detecting and Analyzing Web-based Cryptocurrency Mining Campaigns. - Julian Rauchberger; Sebastian Schrittwieser; Tobias Dam; Robert Luh; Damjan Buhov; Gerhard Pötzelsberger; Hyoungshick Kim (ARES, 2018)

APT RPG: Design of a Gamified Attacker/Defender Meta Model. - Robert Luh; Marlies Temper; Simon Tjoa; Sebastian Schrittwieser (ICISSP, 2018)

SEQUIN: a grammar inference framework for analyzing malicious system behavior. - Robert Luh; Gregor Schramm; Markus Wagner 008; Helge Janicke; Sebastian Schrittwieser (J. Comput. Virol. Hacking Tech., 2018)

AIDIS: Detecting and classifying anomalous behavior in ubiquitous kernel processes. - Robert Luh; Helge Janicke; Sebastian Schrittwieser (Comput. Secur., 2019)

Advanced threat intelligence: interpretation of anomalous behavior in ubiquitous kernel processes. - Robert Luh (2019)

Advanced threat intelligence: detection and classification of anomalous behavior in system processes. - Robert Luh; Sebastian Schrittwieser (Elektrotech. Informationstechnik, 2020)

PenQuest: a gamified attacker/defender meta model for cyber security assessment and education. - Robert Luh; Marlies Temper; Simon Tjoa; Sebastian Schrittwieser; Helge Janicke (J. Comput. Virol. Hacking Tech., 2020)

Time for Truth: Forensic Analysis of NTFS Timestamps. - Michael Galhuber; Robert Luh (ARES, 2021)

WSL2 Forensics: Detection, Analysis & Revirtualization. - Philipp Boigner; Robert Luh (ARES, 2022)

PenQuest Reloaded: A Digital Cyber Defense Game for Technical Education. - Robert Luh; Sebastian Eresheim; Stefanie Größbacher; Thomas Petelin; Florian Mayr; Paul Tavolato; Sebastian Schrittwieser (EDUCON, 2022)

Formalizing Real-world Threat Scenarios. - Paul Tavolato; Robert Luh; Sebastian Eresheim (ICISSP, 2022)

PenQuest: Gamifying Cyberattacks. - Robert Luh; Sebastian Eresheim (ERCIM News, 2022)

Timestamp Patterns in Windows Forensics. - Robert Luh; Michael Galhuber (ERCIM News, 2022)

A Game Theoretic Analysis of Cyber Threats. - Paul Tavolato; Robert Luh; Sebastian Eresheim (ICISSP, 2023)

Timestamp-based Application Fingerprinting in NTFS. - Michael Galhuber; Robert Luh (ARES, 2024)

Quantifying the Odds in Real World Attack Scenarios. - Paul Tavolato; Robert Luh; Sebastian Eresheim; Simon Gmeiner; Sebastian Schrittwieser (CSR, 2024)

Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection Process. - Paul Tavolato; Robert Luh; Sebastian Eresheim; Simon Gmeiner; Sebastian Schrittwieser (ICISSP, 2024)

PenQuestEnv: A Reinforcement Learning Environment for Cyber Security. - Sebastian Eresheim; Simon Gmeiner; Alexander Piglmann; Thomas Petelin; Robert Luh; Paul Tavolato; Sebastian Schrittwieser (ICISSP (1), 2025)

Gamifying information security: Adversarial risk exploration for IT/OT infrastructures. - Robert Luh; Sebastian Eresheim; Paul Tavolato; Thomas Petelin; Simon Gmeiner; Andreas Holzinger; Sebastian Schrittwieser (Comput. Secur., 2025)