Introducing Dead Drops to Network Steganography using ARP-Caches and SNMP-Walks. - Tobias Schmidbauer; Steffen Wendzel; Aleksandra Mileva; Wojciech Mazurczyk (ARES, 2019)

Covert storage caches using the NTP protocol. - Tobias Schmidbauer; Steffen Wendzel (ARES, 2020)

Hunting Shadows: Towards Packet Runtime-based Detection Of Computational Intensive Reversible Covert Channels. - Tobias Schmidbauer; Steffen Wendzel (ARES, 2021)

Challenging Channels: Encrypted Covert Channels within Challenge-Response Authentication. - Tobias Schmidbauer; Jörg Keller 001; Steffen Wendzel (ARES, 2022)

SoK: A Survey Of Indirect Network-level Covert Channels. - Tobias Schmidbauer; Steffen Wendzel (AsiaCCS, 2022)

Did You See That? A Covert Channel Exploiting Recent Legitimate Traffic. - Steffen Wendzel; Tobias Schmidbauer; Sebastian Zillien; Jörg Keller 001 (CoRR, 2022)

Detection Of Computational Intensive Reversible Covert Channels Based On Packet Runtime. - Tobias Schmidbauer; Steffen Wendzel (J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl., 2022)

Novel Sophisticated Network-Level Covert Channels. - Tobias Schmidbauer (2023)

A Case Study on the Detection of Hash-Chain-based Covert Channels Using Heuristics and Machine Learning. - Jeff Schymiczek; Tobias Schmidbauer; Steffen Wendzel (ARES, 2024)

A Comprehensive Pattern-based Overview of Stegomalware. - Fabian Strachanski; Denis Petrov; Tobias Schmidbauer; Steffen Wendzel (ARES, 2024)

Look What's There! Utilizing the Internet's Existing Data for Censorship Circumvention with OPPRESSION. - Sebastian Zillien; Tobias Schmidbauer; Mario Kubek; Jörg Keller 001; Steffen Wendzel (AsiaCCS, 2024)

Combining Different Existing Methods for Describing Steganography Hiding Methods. - Steffen Wendzel; Christian Krätzer; Jana Dittmann; Luca Caviglione; Aleksandra Mileva; Tobias Schmidbauer; Claus Vielhauer; Sebastian Zander (ARES (Workshops 3), 2025)

DYST (Did You See That?): An Amplified Covert Channel That Points To Previously Seen Data. - Steffen Wendzel; Tobias Schmidbauer; Sebastian Zillien; Jörg Keller 001 (IEEE Trans. Dependable Secur. Comput., 2025)