Immanuel Lautner

Immanuel Lautner, M.A., M.Sc.

Department of Computer Science
Chair of Computer Science 1 (IT Security Infrastructures)

Email: immanuel.lautner@fau.de
Website: https://www.cs1.tf.fau.de/

I studied Computer Science and Ethics of Textual Cultures at FAU Erlangen-Nürnberg. Currently, I am a PhD candidate in the Information Security Group and simultaneously working in the CISO Info-Sec Team of the FAU. Additionally I am currently interested in Ethical Programming in AI-Applications.

Open Theses (Bachelor / Master) and Projects

(Please note that this work is supervised by my colleague Matti Schulze )Konzeption einer USB-Teststation für Universitäten: USB flash drives are often seen as harmless by the vast majority of people.
In 2016, a study was conducted at the University of Illinois, where nearly 300 flash drives were dropped in different locations on the campus [1]. Within six minutes, the first drive was connected to a device, and 45-98% ofthe devices were eventually connected to a device.
This is a worrying result, as USB flash drives can be malicious – either by containing seemingly harmless files containing maleware or by being malicious themselves [2,3,4].
This thesis aims to design a USB drive testing station in a university setting, where people can check USB devices that they found or were handed to them for their maliciousness.
For this, the thesis will consist of two parts. First, an overview of the different kinds of USB attacks will be created, looking at each attack’s role in the real world and how to detect them.
After this, a proof of concept of a testing station will be designed and developed. This proof of concept should aim to detect as many relevant attacks as possible using state of the art techniques [5].
[1] Tischer, Matthew, et al. “Users really do plug in USB drives they find.” 2016 IEEE Symposium on Security and Privacy (SP). IEEE, 2016.
[2] Nissim, Nir, Ran Yahalom, and Yuval Elovici. “USB-based attacks.” Computers & Security 70 (2017): 675-688.
[3] E. Karystinos, A. Andreatos and C. Douligeris, “Spyduino: Arduino as a HID Exploiting the BadUSB Vulnerability,” 2019 15th International Conference on Distributed Computing in Sensor Systems (DCOSS), Santorini, Greece 2019, 279-283, doi: 10.1109/DCOSS.2019.00066.
[4] https://usbkill.com/
[5] Kharraz, Amin, et al. “USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks.” RAID. 201

Professional Activities

Webinarreihe IT-Sicherheit IHK: “Capture-the-flag-Wettbewerbe: Mit Praxiserfahrungen sicherer werden”: Speaker.
ab morgen digital! – Zum Diskurs der Digitalisierung: Conference, Speaker and Organizer alongside with Carima Jekel.
Erasmus-Week 2023: Live-Hacking, Speaker alongside with Jonas Röckl and Davide Bove.
Nürnberg Digital Festival 2019: “Finding Software Vulnerabilities”, Speaker alongside with Marcel Busch.

CTF

I participate in so called Capture-The-Flag competitions with the FAU Security Team (FAUST). I am responsible for FAUST. If you want to know more, you should join our mailinglist.

Publications

2021

Schneider J., Lautner I., Moussa D., Wolf J., Scheler N., Freiling F., Haasnoot J., Henseler H., Malik S., Morgenstern H., Westman M.:
In Search of Lost Data: A Study of Flash Sanitization Practices
DFRWS EU 2021 (Cyberspace, 29. March 2021 - 1. April 2021)
In: Proceedings of the Digital Forensics Research Conference Europe (DFRWS EU) 2021 2021
Open Access: https://dfrws.org/presentation/in-search-of-lost-data-a-study-of-flash-sanitization-practices/
URL: https://dfrws.org/presentation/in-search-of-lost-data-a-study-of-flash-sanitization-practices/

Teaching

WS 2022/23: Vorlesung Informationssicherheit, Lecturer alongside with Michael Tielemann
WS 2017-2019: Algorithms and Datastructures, Tutor
SS 2017-2019: Parallel and functional Programming, Tutor

Email Signature, S/MIME

You can use the following S/MIME certificate to verify that an email was actually sent by me. More information on S/MIME can be found here.

Serial Number	27:11:A5:86:BE:AA:96:F2:F9:13:92:7C
SHA1 Fingerprint	08:9A:B7:61:A3:E8:21:3D:98:46:06:67:55:B1:39:1B:18:5F:2B:B1
SHA256 Fingerprint	B5:BC:B6:1B:52:5C:CE:F7:3D:3C:8A:2C:5B:EC:58:3F:4C:15:B8:A8:C3:27:33:11:A0:A3:D4:D5:09:A7:F4:82
Issuer	DFN-Verein Global Issuing CA > DFN-Verein Certification Authority 2 > T-TeleSec GlobalRoot Class 2

Immanuel Lautner