Distributed Denial-of-Service attacks aim at injecting bursts of load to resources in networks. A consequence could be that the resource is overloaded and rendered useless. Anomaly detection tries to detect such kinds of unusual behaviour (attack) without knowing the exact attack pattern.

We are particularily studying statistical methods and data mining methods for their application in network anomaly and attack detection.

The decentrality of Peer-to-Peer networks is a fundamental problem for their security. We are interested in way to secure Peer-to-Peer networks that add as little as possible centralized or external resources. In this context we are also studying trust metrics that can be used to evaluate nodes.

We are working on research on the design and components on anonymous systems. Systems that focus on providing anonymous communication for special applications are of particular interested for us.

This research deals with the shortcomings of current firewall technology and aims at providing new and flexible means for access control. Access control at network perimeter can filter malicious access and help to protect services in the network from unauthorized access and intrusions.

The method to establish a mutual agreement between two parties in an autonomic fashion is termed Automated Trust Negotiation. Disclosure policies control the startegy of the negotiation and the exchange of credentials. These policies prevent the unintentional disclosure of private information.

Adaptive security is a new way to autonomously negotiate end to end security configurations based on performance and security requirements. This technology allows to deprecate vulnerable protocol configurations and to introduce new protocols without changing the applications. The Extensible Security Adapatation Framework supports currently the auto-configuration and exchangeability of IPSec, TLS and SSL.

We are investing 3G architectures / IMS / SAE Networks for weaknesses that could be used for DoS attacks. We also work on DDoS detection and -defense in Beyond 3G networks.