Robert Luh

Publications

Research on IT security, malware analysis, digital forensics and serious games.

A selection of papers and talks. The complete and current list is on ResearchGate.

2025

  • Gamifying information security: Adversarial risk exploration for IT/OT infrastructuresRobert Luh, Sebastian Eresheim, Paul Tavolato et al.Journal article, Computers & SecurityResearchGate
  • PenQuestEnv: A Reinforcement Learning Environment for Cyber SecuritySebastian Eresheim, Simon Gmeiner, Alexander Piglmann et al.Conference paperResearchGate

2024

  • Quantifying the Odds in Real World Attack ScenariosPaul Tavolato, Robert Luh, Sebastian Eresheim et al.Conference paperResearchGate
  • Timestamp-based Application Fingerprinting in NTFSMichael Galhuber, Robert LuhConference paperResearchGate
  • Comparing the Effectivity of Planned Cyber Defense Controls in Order to Support the Selection ProcessPaul Tavolato, Robert Luh, Sebastian Eresheim et al.Conference paperResearchGate

2023

  • Experiences From a Multi-National Course in Cybersecurity Awareness RaisingHans Ameel, Tom Decavele, Claudia Eeckhout, …, Robert LuhJournal article, International Journal of Information Security and CybercrimeResearchGate
  • A Game Theoretic Analysis of Cyber ThreatsPaul Tavolato, Robert Luh, Sebastian EresheimConference paperResearchGate

2022

  • WSL2 Forensics: Detection, Analysis & RevirtualizationPhilipp Boigner, Robert LuhConference paperResearchGate
  • PenQuest Reloaded: A Digital Cyber Defense Game for Technical EducationRobert Luh, Florian Mayr, Sebastian Eresheim et al.Conference paperResearchGate
  • Formalizing Real-world Threat ScenariosPaul Tavolato, Robert Luh, Sebastian EresheimConference paperResearchGate

2021

  • Time for Truth: Forensic Analysis of NTFS TimestampsMichael Galhuber, Robert LuhConference paperResearchGate

2020

  • PenQuest: a gamified attacker/defender meta model for cyber security assessment and educationRobert Luh, Marlies Temper, Simon Tjoa et al.Journal article, Journal of Computer Virology and Hacking TechniquesResearchGate

2019

  • Advanced threat intelligence: detection and classification of anomalous behavior in system processesRobert Luh, Sebastian SchrittwieserJournal article, e & i Elektrotechnik und InformationstechnikResearchGate
  • AIDIS: Detecting and Classifying Anomalous Behavior in Ubiquitous Kernel ProcessesRobert Luh, Helge Janicke, Sebastian SchrittwieserJournal article, Computers & SecurityResearchGate

2018

  • SEQUIN: a grammar inference framework for analyzing malicious system behaviorRobert Luh, Gregor Schramm, Markus Wagner et al.Journal article, Journal of Computer Virology and Hacking TechniquesResearchGate
  • The Other Side of the Coin: A Framework for Detecting and Analyzing Web-based Cryptocurrency Mining CampaignsJulian Rauchberger, Sebastian Schrittwieser, Tobias Dam et al.Conference paperResearchGate
  • APT RPG: Design of a Gamified Attacker/Defender Meta ModelRobert Luh, Marlies Temper, Simon Tjoa, Sebastian SchrittwieserConference paperResearchGate

2017

  • Semantics-aware detection of targeted attacks: a surveyRobert Luh, Stefan Marschalek, Manfred Kaiser, Helge Janicke, Sebastian SchrittwieserJournal article, Journal of Computer Virology and Hacking TechniquesResearchGate
  • Visual Analytics: Foundations and Experiences in Malware AnalysisMarkus Wagner, Dominik Sacha, Alexander Rind et al.Book chapterResearchGate
  • A Bigram Supported Generic Knowledge-Assisted Malware Analysis System: BiG2-KAMASNiklas Thür, Markus Wagner, Johannes Schick et al.Conference paperResearchGate
  • The Evolution of Process Hiding Techniques in Malware – Current Threats and Possible CountermeasuresSebastian Eresheim, Robert Luh, Sebastian SchrittwieserJournal article, Journal of Information ProcessingResearchGate
  • Endpoint Data Classification Using Markov ChainsStefan Marschalek, Robert Luh, Sebastian SchrittwieserConference paperResearchGate
  • On the Impact of Kernel Code Vulnerabilities in IoT DevicesSebastian Eresheim, Robert Luh, Sebastian SchrittwieserConference paperResearchGate
  • LLR-Based Sentiment Analysis for Kernel Event SequencesRobert Luh, Sebastian Schrittwieser, Stefan MarschalekConference paperResearchGate
  • Design of an Anomaly-based Threat Detection & Explication SystemRobert Luh, Sebastian Schrittwieser, Stefan Marschalek, Helge JanickeConference paperResearchGate
  • Longkit – A Universal Framework for BIOS/UEFI Rootkits in System Management ModeJulian Rauchberger, Robert Luh, Sebastian SchrittwieserConference paperResearchGate
  • Sequitur-based Inference and Analysis Framework for Malicious System BehaviorRobert Luh, Gregor Schramm, Markus Wagner, Sebastian SchrittwieserConference paperResearchGate

2016

  • TAON: An ontology-based approach to mitigating targeted attacksRobert Luh, Sebastian Schrittwieser, Stefan MarschalekConference paperResearchGate
  • Empirical Malware Research through Observation of System BehaviourStefan Marschalek, Manfred Kaiser, Robert Luh, Sebastian SchrittwieserConference paperResearchGate

2015

  • Classifying malicious system behavior using event propagation treesStefan Marschalek, Robert Luh, Manfred Kaiser, Sebastian SchrittwieserConference paperResearchGate
  • A Survey of Visualization Systems for Malware AnalysisMarkus Wagner, Fabian Fischer, Robert Luh et al.Conference paperResearchGate

2014

  • Problem characterization and abstraction for visual analytics in behavior-based malware pattern analysisMarkus Wagner, Wolfgang Aigner, Alexander Rind et al.Conference paperResearchGate
  • Defining Malicious BehaviorHermann Dornhackl, Konstantin Kadletz, Robert Luh, Paul TavolatoConference paperResearchGate
  • Malicious Behavior PatternsHermann Dornhackl, Konstantin Kadletz, Robert Luh, Paul TavolatoConference paperResearchGate

2013

  • Six Ways to Kill by HackingRobert LuhTalk, ITSecX conference, St. Pölten University of Applied SciencesCollision Domain

2012

  • Behavior-Based Malware RecognitionRobert Luh, Paul TavolatoConference paperResearchGate