On the resilience of P2P-based botnet graphs. - Steffen Haas; Shankar Karuppayah; Selvakumar Manickam; Max Mühlhäuser; Mathias Fischer 001 (CNS, 2016)

BoobyTrap: On autonomously detecting and characterizing crawlers in P2P botnets. - Shankar Karuppayah; Emmanouil Vasilomanolakis; Steffen Haas; Max Mühlhäuser; Mathias Fischer 001 (ICC, 2016)

On the Robustness of Random Walk Algorithms for the Detection of Unstructured P2P Botnets. - Dominik Muhs; Steffen Haas; Thorsten Strufe; Mathias Fischer 001 (IMF, 2018)

GAC: graph-based alert correlation for the detection of distributed multi-step attacks. - Steffen Haas; Mathias Fischer 001 (SAC, 2018)

Towards Efficient Reconstruction of Attacker Lateral Movement. - Florian Wilkens; Steffen Haas; Dominik Kaaser; Peter Kling; Mathias Fischer 001 (ARES, 2019)

Efficient Attack Correlation and Identification of Attack Scenarios based on Network-Motifs. - Steffen Haas; Florian Wilkens; Mathias Fischer 001 (IPCCC, 2019)

Scan Correlation - Revealing distributed scan campaigns. - Steffen Haas; Florian Wilkens; Mathias Fischer 001 (NOMS, 2020)

Zeek-Osquery: Host-Network Correlation for Advanced Monitoring and Intrusion Detection. - Steffen Haas; Robin Sommer; Mathias Fischer 001 (SEC, 2020)

Security Monitoring and Alert Correlation for Network Intrusion Detection. - Steffen Haas (2020)

Multi-Stage Attack Detection via Kill Chain State Machines. - Florian Wilkens; Felix Ortmann; Steffen Haas; Matthias Vallentin; Mathias Fischer 001 (CYSARM@CCS, 2021)

Passive, Transparent, and Selective TLS Decryption for Network Security Monitoring. - Florian Wilkens; Steffen Haas; Johanna Amann; Mathias Fischer 001 (SEC, 2022)