Publikationen

Forschung zu IT-Sicherheit, Malware-Analyse, digitaler Forensik und Serious Games.

Eine Auswahl an Artikeln und Vorträgen. Die vollständige, aktuelle Liste findet sich auf ResearchGate.

2025

  • Gamifying information security: Adversarial risk exploration for IT/OT infrastructuresRobert Luh, Sebastian Eresheim, Paul Tavolato et al.Zeitschriftenartikel, Computers & SecurityResearchGate
  • PenQuestEnv: A Reinforcement Learning Environment for Cyber SecuritySebastian Eresheim, Simon Gmeiner, Alexander Piglmann et al.KonferenzbeitragResearchGate

2024

  • Quantifying the Odds in Real World Attack ScenariosPaul Tavolato, Robert Luh, Sebastian Eresheim et al.KonferenzbeitragResearchGate
  • Timestamp-based Application Fingerprinting in NTFSMichael Galhuber, Robert LuhKonferenzbeitragResearchGate
  • Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection ProcessPaul Tavolato, Robert Luh, Sebastian Eresheim et al.KonferenzbeitragResearchGate

2023

  • Experiences From a Multi-National Course in Cybersecurity Awareness RaisingHans Ameel, Tom Decavele, Claudia Eeckhout, …, Robert LuhZeitschriftenartikel, International Journal of Information Security and CybercrimeResearchGate
  • A Game Theoretic Analysis of Cyber ThreatsPaul Tavolato, Robert Luh, Sebastian EresheimKonferenzbeitragResearchGate

2022

  • WSL2 Forensics: Detection, Analysis & RevirtualizationPhilipp Boigner, Robert LuhKonferenzbeitragResearchGate
  • PenQuest Reloaded: A Digital Cyber Defense Game for Technical EducationRobert Luh, Florian Mayr, Sebastian Eresheim et al.KonferenzbeitragResearchGate
  • Formalizing Real-world Threat ScenariosPaul Tavolato, Robert Luh, Sebastian EresheimKonferenzbeitragResearchGate

2021

  • Time for Truth: Forensic Analysis of NTFS TimestampsMichael Galhuber, Robert LuhKonferenzbeitragResearchGate

2020

  • PenQuest: a gamified attacker/defender meta model for cyber security assessment and educationRobert Luh, Marlies Temper, Simon Tjoa et al.Zeitschriftenartikel, Journal of Computer Virology and Hacking TechniquesResearchGate

2019

  • Advanced threat intelligence: detection and classification of anomalous behavior in system processesRobert Luh, Sebastian SchrittwieserZeitschriftenartikel, e & i Elektrotechnik und InformationstechnikResearchGate
  • AIDIS: Detecting and Classifying Anomalous Behavior in Ubiquitous Kernel ProcessesRobert Luh, Helge Janicke, Sebastian SchrittwieserZeitschriftenartikel, Computers & SecurityResearchGate

2018

  • SEQUIN: a grammar inference framework for analyzing malicious system behaviorRobert Luh, Gregor Schramm, Markus Wagner et al.Zeitschriftenartikel, Journal of Computer Virology and Hacking TechniquesResearchGate
  • The Other Side of the Coin: A Framework for Detecting and Analyzing Web-based Cryptocurrency Mining CampaignsJulian Rauchberger, Sebastian Schrittwieser, Tobias Dam et al.KonferenzbeitragResearchGate
  • APT RPG: Design of a Gamified Attacker/Defender Meta ModelRobert Luh, Marlies Temper, Simon Tjoa, Sebastian SchrittwieserKonferenzbeitragResearchGate

2017

  • Semantics-aware detection of targeted attacks: a surveyRobert Luh, Stefan Marschalek, Manfred Kaiser, Helge Janicke, Sebastian SchrittwieserZeitschriftenartikel, Journal of Computer Virology and Hacking TechniquesResearchGate
  • Visual Analytics: Foundations and Experiences in Malware AnalysisMarkus Wagner, Dominik Sacha, Alexander Rind et al.BuchkapitelResearchGate
  • A Bigram Supported Generic Knowledge-Assisted Malware Analysis System: BiG2-KAMASNiklas Thür, Markus Wagner, Johannes Schick et al.KonferenzbeitragResearchGate
  • The Evolution of Process Hiding Techniques in Malware – Current Threats and Possible CountermeasuresSebastian Eresheim, Robert Luh, Sebastian SchrittwieserZeitschriftenartikel, Journal of Information ProcessingResearchGate
  • Endpoint Data Classification Using Markov ChainsStefan Marschalek, Robert Luh, Sebastian SchrittwieserKonferenzbeitragResearchGate
  • On the Impact of Kernel Code Vulnerabilities in IoT DevicesSebastian Eresheim, Robert Luh, Sebastian SchrittwieserKonferenzbeitragResearchGate
  • LLR-Based Sentiment Analysis for Kernel Event SequencesRobert Luh, Sebastian Schrittwieser, Stefan MarschalekKonferenzbeitragResearchGate
  • Design of an Anomaly-based Threat Detection & Explication SystemRobert Luh, Sebastian Schrittwieser, Stefan Marschalek, Helge JanickeKonferenzbeitragResearchGate
  • Longkit – A Universal Framework for BIOS/UEFI Rootkits in System Management ModeJulian Rauchberger, Robert Luh, Sebastian SchrittwieserKonferenzbeitragResearchGate
  • Sequitur-based Inference and Analysis Framework for Malicious System BehaviorRobert Luh, Gregor Schramm, Markus Wagner, Sebastian SchrittwieserKonferenzbeitragResearchGate

2016

  • TAON: An ontology-based approach to mitigating targeted attacksRobert Luh, Sebastian Schrittwieser, Stefan MarschalekKonferenzbeitragResearchGate
  • Empirical Malware Research through Observation of System BehaviourStefan Marschalek, Manfred Kaiser, Robert Luh, Sebastian SchrittwieserKonferenzbeitragResearchGate

2015

  • Classifying malicious system behavior using event propagation treesStefan Marschalek, Robert Luh, Manfred Kaiser, Sebastian SchrittwieserKonferenzbeitragResearchGate
  • A Survey of Visualization Systems for Malware AnalysisMarkus Wagner, Fabian Fischer, Robert Luh et al.KonferenzbeitragResearchGate

2014

  • Problem characterization and abstraction for visual analytics in behavior-based malware pattern analysisMarkus Wagner, Wolfgang Aigner, Alexander Rind et al.KonferenzbeitragResearchGate
  • Defining Malicious BehaviorHermann Dornhackl, Konstantin Kadletz, Robert Luh, Paul TavolatoKonferenzbeitragResearchGate
  • Malicious Behavior PatternsHermann Dornhackl, Konstantin Kadletz, Robert Luh, Paul TavolatoKonferenzbeitragResearchGate

2013

  • Six Ways to Kill by HackingRobert LuhVortrag, ITSecX conference, St. Pölten University of Applied SciencesCollision Domain

2012

  • Behavior-Based Malware RecognitionRobert Luh, Paul TavolatoKonferenzbeitragResearchGate