Our research focuses on the development and analysis of IT security technologies in conjunction with the functional safety of the systems to be protected. In terms of application areas, we focus specifically on the Internet of Things and safety-critical systems. In the field of the Internet of Things in particular, the complex issue of data security and ‘privacy-enhancing technologies’ also comes into play.
Selected publications
A selection of publications is listed below (sorted by year of publication). A complete list, including BibTeX format, can be found on the Publications page.
J. van Nielen, A. Peter, and A. Continella, "SteamFuzz: Boosting Firmware Fuzzing via Automatic Message Window Inference" in Proc. of the 33rd ACM SIGSAC Conference on Computer and Communications Security (CCS 2026), 2026.
@InProceedings{vanNielen2026SteamFuzz,
author = {van Nielen, Jorik and Peter, Andreas and Continella, Andrea},
booktitle = {of the 33rd ACM SIGSAC Conference on Computer and Communications Security (CCS 2026)},
title = {SteamFuzz: Boosting Firmware Fuzzing via Automatic Message Window Inference},
year = {2026},
organization = {ACM}
A. El Khairi, A. Bassit, A. Peter, and A. Continella, "ImmuCheck: Selective Immutability for Container Escape Detection in Containerized Microservices" in Proc. of the 21st ACM Asia Conference on Computer and Communications Security (ASIA CCS 2026), 2026.
@inproceedings{ElKhairi2026ImmuCheck,
author = {El Khairi, Asbat and Bassit, Amina and Peter, Andreas and Continella, Andrea},
title = {ImmuCheck: Selective Immutability for Container Escape Detection in Containerized Microservices},
year = {2026},
organization = {ACM},
url = {https://doi.org/10.1145/3779208.3807484},
booktitle = {of the 21st ACM Asia Conference on Computer and Communications Security (ASIA CCS 2026)}
}
J. van Nielen, A. Oliveri, J. Starink, A. Peter, M. Huisman, S. Aonzo, D. Balzarotti, and A. Continella, "SoK: Systematization, Detection, and Hunting of Windows Malware Persistence Techniques" in Proc. of the 21st ACM Asia Conference on Computer and Communications Security (ASIA CCS 2026), 2026.
@inproceedings{vanNielen2026SoK,
author = {van Nielen, Jorik and Oliveri, Andrea and Starink, Jerre and Peter, Andreas and Huisman, Marieke and Aonzo, Simone and Balzarotti, Davide and Continella, Andrea},
title = {SoK: Systematization, Detection, and Hunting of Windows Malware Persistence Techniques},
year = {2026},
organization = {ACM},
url = {https://doi.org/10.1145/3779208.3805971},
booktitle = {of the 21st ACM Asia Conference on Computer and Communications Security (ASIA CCS 2026)}
}
M. Buechel, T. Paladini, S. Longari, M. Carminati, S. Zanero, H. Binyamini, G. Engelberg, D. Klein, G. Guizzardi, M. Caselli, A. Continella, M. van Steen, A. Peter, and T. van Ede, "SoK: Automated TTP Extraction from CTI Reports – Are We There Yet?" in Proc. of the 34th USENIX Security Symposium (USENIX Security 2025), 2025.
@InProceedings{Buechel2025Automated,
author = {Buechel, Marvin and Paladini, Tommaso and Longari, Stefano and Carminati, Michele and Zanero, Stefano and Binyamini, Hodaya and Engelberg, Gal and Klein, Dan and Guizzardi, Giancarlo and Caselli, Marco and Continella, Andrea and van Steen, Maarten and Peter, Andreas and van Ede, Thijs},
booktitle = {of the 34th USENIX Security Symposium (USENIX Security 2025)},
title = {SoK: Automated TTP Extraction from CTI Reports – Are We There Yet?},
year = {2025},
organization = {USENIX},
url = {https://www.usenix.org/system/files/usenixsecurity25-buechel.pdf}
}
C. Gupta, A. Peter, and A. Continella, "R+R: IoT Device Identification Under Realistic Conditions" in Proc. of the 41st Annual Computer Security Applications Conference (ACSAC 2025), 2025.
@inproceedings{Gupta2025IoT,
author = {Gupta, Chakshu and Peter, Andreas and Continella, Andrea},
booktitle = {of the 41st Annual Computer Security Applications Conference (ACSAC 2025)},
title = {R+R: IoT Device Identification Under Realistic Conditions},
year = {2025},
organization = {IEEE},
url = {https://doi.org/10.1109/ACSAC67867.2025.00071}
}
F. Mazzone, M. Everts, F. Hahn, and A. Peter, "Efficient Ranking, Order Statistics, and Sorting under CKKS" in Proc. of the 34th USENIX Security Symposium (USENIX Security 2025), 2025.
@InProceedings{Mazzone2025Efficient,
author = {Mazzone, Federico and Everts, Maarten and Hahn, Florian and Peter, Andreas},
booktitle = {of the 34th USENIX Security Symposium (USENIX Security 2025)},
title = {Efficient Ranking, Order Statistics, and Sorting under CKKS},
year = {2025},
organization = {USENIX},
url = {https://www.usenix.org/system/files/usenixsecurity25-mazzone.pdf}
}
J. Starink, M. Huisman, A. Peter, and A. Continella, "Behavior Nets: Context-Aware Behavior Modeling for Code Injection-Based Windows Malware" ACM Transactions on Privacy and Security (TOPS), vol. 28, iss. 3.
2025.
@Article{starink2025behavior,
author = {Starink, Jerre and Huisman, Marieke and Peter, Andreas and Continella, Andrea},
journal = {ACM Transactions on Privacy and Security (TOPS)},
title = {Behavior Nets: Context-Aware Behavior Modeling for Code Injection-Based Windows Malware},
year = {2025},
number = {3},
volume = {28},
publisher = {ACM},
url = {https://doi.org/10.1145/3729228}
}
A. El Khairi, M. Caselli, A. Peter, and A. Continella, "ReplicaWatcher: Training-less Anomaly Detection in Containerized Microservices" in Proc. of the 31th Annual Network and Distributed System Security Symposium (NDSS 2024), 2024.
@inproceedings{ElKhairi2024Replica, title={ReplicaWatcher: Training-less Anomaly Detection in Containerized Microservices},
author={El Khairi, Asbat and Caselli, Marco and Peter, Andreas and Continella, Andrea},
booktitle={of the 31th Annual Network and Distributed System Security Symposium (NDSS 2024)},
year={2024},
organization={The Internet Society},
url={https://www.ndss-symposium.org/ndss-paper/replicawatcher-training-less-anomaly-detection-in-containerized-microservices/}
}
C. Sabater, F. Hahn, A. Peter, and J. Ramon, "Private Sampling with Identifiable Cheaters" Proceedings on Privacy Enhancing Technologies (PoPETs).
2023.
@article{Sabater2023Private, title={Private Sampling with Identifiable Cheaters},
author={Sabater, Cesar and Hahn, Florian and Peter, Andreas and Ramon, Jan},
journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
year={2023},
url={https://doi.org/10.56553/popets-2023-0058}
}
T. van Ede, H. Aghakhani, N. Spahn, R. Bortolameotti, M. Cova, A. Continella, M. van Steen, A. Peter, C. Kruegel, and G. Vigna, "DEEPCASE: Semi-Supervised Contextual Analysis of Security Events" in Proc. of the IEEE Symposium on Security and Privacy (S&P 2022). IEEE, 2022.
@inproceedings{van2022deepcase, title={DEEPCASE: Semi-Supervised Contextual Analysis of Security Events},
author={van Ede, Thijs and Aghakhani, Hojjat and Spahn, Noah and Bortolameotti, Riccardo and Cova, Marco and Continella, Andrea and van Steen, Maarten and Peter, Andreas and Kruegel, Christopher and Vigna, Giovanni},
booktitle={of the IEEE Symposium on Security and Privacy (S&P 2022). IEEE},
url={https://vm-thijs.ewi.utwente.nl/static/homepage/papers/deepcase.pdf},
year={2022}
}
M. Damie, F. Hahn, and A. Peter, "A Highly Accurate Query-Recovery Attack against Searchable Encryption using Non-Indexed Documents" in Proc. of the 30th USENIX Security Symposium (USENIX Security 2021), 2021.
@inproceedings{damie2021highly, title={A Highly Accurate Query-Recovery Attack against Searchable Encryption using Non-Indexed Documents},
author={Damie, Marc and Hahn, Florian and Peter, Andreas},
booktitle={of the 30th USENIX Security Symposium (USENIX Security 2021)},
pages={143--160},
url={https://www.usenix.org/system/files/sec21-damie.pdf},
year={2021}
}
Z. Shang, S. Oya, A. Peter, and F. Kerschbaum, "Obfuscated Access and Search Patterns in Searchable Encryption" in Proc. of the 28th Annual Network and Distributed System Security Symposium (NDSS 2021), 2021.
@inproceedings{Shang2021Obfuscated, title={Obfuscated Access and Search Patterns in Searchable Encryption},
author={Shang, Zhiwei and Oya, Simon and Peter, Andreas and Kerschbaum, Florian},
booktitle={of the 28th Annual Network and Distributed System Security Symposium (NDSS 2021)},
volume={28},
organization={The Internet Society},
url={https://arxiv.org/pdf/2102.09651},
year={2021}
}
A. Bassit, F. Hahn, J. Peeters, T. Kevenaar, R. Veldhuis, and A. Peter, "Fast and Accurate Likelihood Ratio-Based Biometric Verification Secure Against Malicious Adversaries" IEEE Transactions on Information Forensics and Security (TIFS), vol. 16.
2021.
@article{bassit2021fast, title={Fast and Accurate Likelihood Ratio-Based Biometric Verification Secure Against Malicious Adversaries},
author={Bassit, Amina and Hahn, Florian and Peeters, Joep and Kevenaar, Tom and Veldhuis, Raymond and Peter, Andreas},
journal={IEEE Transactions on Information Forensics and Security (TIFS)},
volume={16},
pages={5045--5060},
year={2021},
url={https://ieeexplore.ieee.org/iel7/10206/9151439/09585508.pdf},
publisher={IEEE}
}
F. Engelmann, L. Müller, A. Peter, F. Kargl, and C. Bösch, "SwapCT: Swap confidential transactions for privacy-preserving multi-token exchanges" Proceedings on Privacy Enhancing Technologies (PoPETs), vol. 2021, iss. 4.
2021.
@article{engelmann2021swapct, title={SwapCT: Swap confidential transactions for privacy-preserving multi-token exchanges},
author={Engelmann, Felix and M{\"u}ller, Lukas and Peter, Andreas and Kargl, Frank and B{\"o}sch, Christoph},
journal={Proceedings on Privacy Enhancing Technologies (PoPETs)},
volume={2021},
number={4},
pages={270--290},
publisher={Sciendo (De Gruyter)},
url={https://sciendo.com/pdf/10.2478/popets-2021-0070},
year={2021}
}
T. van Ede, R. Bortolameotti, A. Continella, J. Ren, D. J. Dubois, M. Lindorfer, D. Choffnes, M. van Steen, and A. Peter, "FlowPrint: Semi-supervised mobile-app fingerprinting on encrypted network traffic" in Proc. of the 27th Annual Network and Distributed System Security Symposium (NDSS 2020), 2020.
@inproceedings{van2020flowprint, title={FlowPrint: Semi-supervised mobile-app fingerprinting on encrypted network traffic},
author={van Ede, Thijs and Bortolameotti, Riccardo and Continella, Andrea and Ren, Jingjing and Dubois, Daniel J and Lindorfer, Martina and Choffnes, David and van Steen, Maarten and Peter, Andreas},
booktitle={of the 27th Annual Network and Distributed System Security Symposium (NDSS 2020)},
volume={27},
organization={The Internet Society},
url={https://par.nsf.gov/servlets/purl/10192513},
year={2020}
}
R. Bortolameotti, T. van Ede, M. Caselli, M. H. Everts, P. Hartel, R. Hofstede, W. Jonker, and A. Peter, "DECANTER: Detection of anomalous outbound http traffic by passive application fingerprinting" in Proc. of the 33rd Annual Computer Security Applications Conference (ACSAC 2017), 2017.
@inproceedings{bortolameotti2017decanter, title={DECANTER: Detection of anomalous outbound http traffic by passive application fingerprinting},
author={Bortolameotti, Riccardo and van Ede, Thijs and Caselli, Marco and Everts, Maarten H and Hartel, Pieter and Hofstede, Rick and Jonker, Willem and Peter, Andreas},
booktitle={of the 33rd Annual Computer Security Applications Conference (ACSAC 2017)},
pages={373--386},
organization={ACM},
url={https://dl.acm.org/doi/pdf/10.1145/3134600.3134605},
year={2017}
}
R. Bortolameotti, A. Peter, M. H. Everts, W. Jonker, and P. Hartel, "Reliably determining data leakage in the presence of strong attackers" in Proc. of the 32nd Annual Conference on Computer Security Applications (ACSAC 2016), 2016.
@inproceedings{bortolameotti2016reliably, title={Reliably determining data leakage in the presence of strong attackers},
author={Bortolameotti, Riccardo and Peter, Andreas and Everts, Maarten H and Jonker, Willem and Hartel, Pieter},
booktitle={of the 32nd Annual Conference on Computer Security Applications (ACSAC 2016)},
pages={484--495},
organization={ACM},
url={https://dl.acm.org/doi/pdf/10.1145/2991079.2991095},
year={2016}
}
C. Bösch, P. Hartel, W. Jonker, and A. Peter, "A survey of provably secure searchable encryption" ACM Computing Surveys (CSUR), vol. 47, iss. 2.
2014.
@article{bosch2014survey, title={A survey of provably secure searchable encryption},
author={B{\"o}sch, Christoph and Hartel, Pieter and Jonker, Willem and Peter, Andreas},
journal={ACM Computing Surveys (CSUR)},
volume={47},
number={2},
pages={1--51},
year={2014},
url={https://research.utwente.nl/files/6420885/a18-bosch.pdf},
publisher={ACM New York, NY, USA}
}
A. Jeckmans, A. Peter, and P. Hartel, "Efficient privacy-enhanced familiarity-based recommender system" in Proc. of the 18th European Symposium on Research in Computer Security (ESORICS 2013), 2013.
@inproceedings{jeckmans2013efficient, title={Efficient privacy-enhanced familiarity-based recommender system},
author={Jeckmans, Arjan and Peter, Andreas and Hartel, Pieter},
booktitle={of the 18th European Symposium on Research in Computer Security (ESORICS 2013)},
pages={400--417},
year={2013},
url={https://link.springer.com/content/pdf/10.1007/978-3-642-40203-6_23.pdf},
organization={Springer, Berlin, Heidelberg}
}
A. Peter, E. Tews, and S. Katzenbeisser, "Efficiently outsourcing multiparty computation under multiple keys" IEEE Transactions on Information Forensics and Security (TIFS), vol. 8, iss. 12.
2013.
@article{peter2013efficiently, title={Efficiently outsourcing multiparty computation under multiple keys},
author={Peter, Andreas and Tews, Erik and Katzenbeisser, Stefan},
journal={IEEE Transactions on Information Forensics and Security (TIFS)},
volume={8},
number={12},
pages={2046--2058},
year={2013},
url={https://ieeexplore.ieee.org/abstract/document/6651830/},
publisher={IEEE}
}
M. Franz, P. Williams, B. Carbunar, S. Katzenbeisser, A. Peter, R. Sion, and M. Sotakova, "Oblivious outsourced storage with delegation" in Proc. of the 15th International Conference on Financial Cryptography and Data Security (FC 2011), 2011.
@inproceedings{franz2011oblivious, title={Oblivious outsourced storage with delegation},
author={Franz, Martin and Williams, Peter and Carbunar, Bogdan and Katzenbeisser, Stefan and Peter, Andreas and Sion, Radu and Sotakova, Miroslava},
booktitle={of the 15th International Conference on Financial Cryptography and Data Security (FC 2011)},
pages={127--140},
year={2011},
url={https://link.springer.com/chapter/10.1007/978-3-642-27576-0_11},
organization={Springer, Berlin, Heidelberg}
}
