Floragasse 7 – 5th floor, 1040 Vienna

Sebastian Neuner

Sebastian Neuner

was security analyst and researcher at SBA Research.

  • 997F 6AD1 885C 7001 AFCC 0980 BE52 7B5D 5E82 F701
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v1
    
    mQINBFTR/1IBEADAqq8IyO6hEPmm0hQ56GZK+jrdFQ+51iBtgXEkKKOXznZRZnTC
    2f6ist3C3PgtXw5Jj0XHm+qVDKtdCeATLO37wrvPAVaVxWwzy5iZ0PdXrCWDJ3wP
    gRTfu5ysgJNvAlz+dhr6GJdGHHZZ5xZ7yREbHIJIBD9GlJNZGM4Zk9SWPCt0noXk
    66E9rVY1aQHcWXMM1FYUVS6JOshLKgQNXU6gevrSlFuXLu/bCdjRVE9lF8ALkLoy
    gvjnQWRYMe66wJcJwbfqsNA9rWe9DQl6il5MB6Ot51K4gBbaXc4dzKZ36zntRafR
    MS4IggwFDD6hSlq97qGUDHVMuje715E9YGZ4JsGEYtJwTuJ8qk/QlQkgS2uz4Kfv
    6DExjPlhAqMiKUqQ5Q/zttWK0yAybbk208zZbIxQxp2ZD4OnTyv/fvtZtkifcW8J
    kdtVGY777o2eo9InasW+DF9dzi823grlCsZfExMNiPo7uhP3s5AFhi80SptNMpSG
    Ba4uwCPLkE1LVb/ZQeaVbUqJNQP92r50F6A9DTcC3Cyg7no3/wfcUK4yiyEnCzCy
    JI6XW2FnfGNnwDrXrRBTiOKjHNaykt+72pmceDalLec+Mwn4LmtCHp3UVK7RbDSE
    I9UqcvF0xu6nVOKVL3GPYnNncSn1CBMk24ruiemJ97TrhPJCPxlvJx/3iwARAQAB
    tCtTZWJhc3RpYW4gTmV1bmVyIDxzbmV1bmVyQHNiYS1yZXNlYXJjaC5vcmc+iQI+
    BBMBAgAoBQJU0f9SAhsDBQkJZgGABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAK
    CRC+UntdXoL3AePkEACONc0UFuL6S9Wjix1buPPUZ+NFH6shZ1SZbMjJBoJhVX0M
    GJHOarhU32PGGBbW37rCHc6uCut0J92LzJofdROUeg0UTb8FhiA/0QpTnf0OMfXk
    pWC6OjWBdXl11MZ/Tv9E33rF19+X23Vva+h79Nz+EOLzuzXe+HKFsvd4Qym13rrH
    rZPUuEpkHj1r9WnEbOxEEhK1177a4PG8gzcUXuIdmV/C7M/9QM4t2TiyRpzC1KP0
    2WvHMpMOz3bLaTpL1mUJYteNhKvKwC2twguEEN14j9gC6L7p02t9bg2Gtm2bzI5D
    Bqp4VE/wYsoDj+15zGXsUfDUxlIMCFRitCHMPsJJZz6aX5vQ6zz2PZ5O4InizKc5
    WXDptsyEBZE32eU+XldP6wHCoAhXPSRokNqbWbBgt3P+E0/A1d/3aKBLybKcj55D
    25FIEYvmV575mO9k/IOcyOtc8n/wc6Kphbtiz4kS8ew1ph15czic1xr1kLQNRC+g
    LSyRO8r55WOIX52QPxhu84935ORWqTI2iZd5wjZqm2T/vcysIF//KfonPJ4jgPsr
    f1DluInarFecamDcelI4N7En/lrNDqzg4IJZzE/F2LnI7278qhlMT9P9WFu+As6u
    LlENRW4n75nDD7jVC5uZEyGAI+r0eaLqi/nKRdR/m2Yup9jnZwtg50OlCBMB/bkC
    DQRU0f9SARAAsk67JjIXcszL9ZDIYc5HUDdlMPUQgUvL5mk8U8Zo6fRGtd+Ogyvh
    SkRkK6yq78yBZpiMVJRl2mtbZ0C/C581X1iiZB/n66S/IYaA7eSkjrHc7nhXzrsY
    v+YImjbFQQOzx3HhnbeNfsnglu+kueUIgQpOgtsb5Wiba99mBCy8JW/Y4XBoFQvm
    +DME5jeJpilHpGuETAbWNTwVofTS/aZ8Bbcomb4ogWoWVMpQ5YifSbsuJy9RBdxR
    F1xP93QB3SspvVaD41k0pTRDMbcFFCe4MgXnmcHwT189zRBXrp5r/GdAmfIp/3Ti
    KdMeqF/S/41y2S6Nexa2YidK0duHRzZS0eqxBELs9cMi3rLsM+RvBnwa8d1N2WT1
    HAE90X59KiRYxlMKwQqqehA6IlIoaeW7mFcJDsVS+yD8O1IgrHp3LTUMIK8zRNZv
    SJxVQ7rfjowepqGpiOGj6tHIoX7jMK1rFrHDTIthiNkCfkCSpTtRJY9Mh2Dkx7Cn
    fp85aOB+OMqZRXiaRyJIN7KLkQzq1rCbgIpVFPosGPjH/cF9MQOqAAKfnpAmqoc/
    zlD4L27RFX1eoOYZnjvgNJgNKWZ+L5zEQvPNGIGv89z31sBEl9zdtL2QfgPJLbOA
    Wt76sjg1wF9hACwv0f7aVXQVJNUGaM4aVnI0vxk3aJbs9m3sEI5JVFEAEQEAAYkC
    JQQYAQIADwUCVNH/UgIbDAUJCWYBgAAKCRC+UntdXoL3AYCfD/4tKCXMeRaGLKwX
    3N8RtPCPURZE4gAVqW0H7tzo4bXQWqYk1i18n4GJ6bKDfEuIXYuqXg8oI/1CPp+Z
    1a0mY9XIqPTFf+f5v4aMfiaqy4iuiLsOtzPj7MBeQbs6NorV0FLFj6ID0+4f3gKl
    q6hIbQJFziqq5bMv7Mo6Llvtj6OGeeARSZahDBNJaWeOHGGegWGNCxcCorLDNnK/
    42Ixsn5n3F5TT5rFphDCESDKwxUU1ukzSWAF7qH6AEaf8P0pAWrAe62Tbnw3imaX
    Dfu9fdmB3NzuOFt2SMekpptMS9CI/qgmb2zeEAT6LQx591oDGWSUwSGRDM07UL+F
    V3XHcuh4fj0WnzfhwNUUuDhdTU6bIPNo84fk8U/xHBq84HkI8LsrQ2mGH+VGFrhi
    wGgJylWNbsdEslIj7Musd+c4SLbMJpDIMFpEaoz1IboOXDdFyCQigPDo0+JzOVvr
    o+HOWXyaeH5W8yQuZmlxD5bn+WRBNeZeiKoplLSW0r2iiDJO/wBkJgh9veFDeWb/
    PWEfmag1ls93AV3ucJ7d0HLbyrBL0hVy6lyUCgA759xNDV1O/2uzFYfEPBny9aR4
    2UiouxudImS6+aCbvsqKa+rBOynnkgpW7fIRm0EARJPokZjH595vetAJDwFhDqkB
    k4yeVvkllM7fqKNBc05i8JEsgxustQ==
    =mJvv
    -----END PGP PUBLIC KEY BLOCK-----
    

Research Interests

The main research fields of Sebastian are USB security, fuzzing and digital forensics.


Bio

Sebastian received a bachelor’s degree in Secure Information Systems at the University of Applied Sciences in Hagenberg. His bachelor’s thesis was about Coordinative Improvements of Capture the Flag Teams. He is currently working towards his master’s degree for Software Engineering and Internet Computing at TU Wien.
While working on his master’s thesis on USB security, he was invited by Prof. Engin Kirda in 2014, to work with him and his systems security group at Northeastern University in Boston.

Datasets

  • Our dataset of the paper “Time is on my side: Steganography in filesystem metadata” (DFRWS USA 2016) can be found here.
  • Our dataset of the paper “PeekaTorrent: Leveraging P2P Hash Values for Digital Forensics” (DFRWS USA 2016) can be found here.

Professional Activities

  • Publicity and Web Chair at the International Conference on Digital Forensics & Cyber Crime, 2017
  • PC member at the International Conference on Availability, Reliability and Security (ARES), 2016, 2017
  • PC member at the International Workshop on Cyber Crime (IWCC), 2016

 


Publications

Top Publications:

  • Windows Installer Security (2014)
    • INPROCEEDINGS--
    • Christian Kadluba and Martin Schmiedecker and Lorenz Zechner and Sebastian Neuner and Edgar R. Weippl
    • Sixth ASE International Conference on Privacy, Security, Risk and Trust (PASSAT 2014)
    @INPROCEEDINGS{Kadluba2014Windows,
       author = {Christian Kadluba and Martin Schmiedecker and Lorenz Zechner and Sebastian Neuner and {Edgar R.} Weippl},
       title = {Windows Installer Security},
       booktitle = {Sixth ASE International Conference on Privacy,
       Security,
       Risk and Trust (PASSAT 2014)},
       year = {2014},
       month = {12},
       pdf = {Sebastian Neuner msiInstaller.pdf},
    }
  • Real-time Forensics through Endpoint Visibility (2017)
    • INPROCEEDINGS--
    • Peter Kieseberg and Sebastian Neuner and Sebastian Schrittwieser and Martin Schmiedecker and Edgar R. Weippl
    • International Conference on Digital Forensics & Cyber Crime (ICDF2C)
    @INPROCEEDINGS{Kieseberg2017Realtime,
       author = {Peter Kieseberg and Sebastian Neuner and Sebastian Schrittwieser and Martin Schmiedecker and {Edgar R.} Weippl},
       title = {Real-time Forensics through Endpoint Visibility},
       booktitle = {International Conference on Digital Forensics & Cyber Crime (ICDF2C)},
       year = {2017},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/fleetForensics.pdf},
       link_slides = {https://www.slideshare.net/SBAResearch/realtime-forensics-through-endpoint-visibility-80707652},
    }
  • Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools (2017)
    • INPROCEEDINGStruetrue
    • Georg Merzdovnik and Markus Huber and Damjan Buhov and Nick Nikiforakis and Sebastian Neuner and Martin Schmiedecker and Edgar R. Weippl
    • 2nd IEEE European Symposium on Security and Privacy (Euro S&P)
    @INPROCEEDINGS{Merzdovnik2017,
       author = {Georg Merzdovnik and Markus Huber and Damjan Buhov and Nick Nikiforakis and Sebastian Neuner and Martin Schmiedecker and {Edgar R.} Weippl},
       authorhotlist = {true},
       sbahotlist = {true},
       title = {Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools},
       booktitle = {2nd IEEE European Symposium on Security and Privacy (Euro S&P)},
       year = {2017},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/block_me_if_you_can.pdf},
    }
  • Quantifying Windows File Slack in Size and Stability (2013)
    • INPROCEEDINGS--
    • Martin Schmiedecker and Sebastian Neuner and Peter Kieseberg and Markus Huber and Sebastian Schrittwieser and Edgar R. Weippl
    • Ninth Annual IFIP WG 11.9 International Conference on Digital Forensics
    @INPROCEEDINGS{Mulazzani_Slackspace_Quantifiation_2013,
       author = {Martin Schmiedecker and Sebastian Neuner and Peter Kieseberg and Markus Huber and Sebastian Schrittwieser and {Edgar R.} Weippl},
       title = {Quantifying Windows File Slack in Size and Stability},
       booktitle = {Ninth Annual IFIP WG 11.9 International Conference on Digital Forensics},
       year = {2013},
       month = {1},
       pdf = {ifipSlack_2013_preprint.pdf},
       link_data = {http://128.130.204.91/slackspaceDataset.7z},
       link_slides = {http://www.slideshare.net/SBAResearch/quantifying-windows-file-slack-in-size-and-stability},
    }
  • Enter Sandbox: Android Sandbox Comparison (2014)
    • INPROCEEDINGS-true
    • Sebastian Neuner and Victor Van der Veen and Martina Lindorfer and Markus Huber and Georg Merzdovnik and Martin Schmiedecker and Edgar R. Weippl
    • Proceedings of the IEEE Mobile Security Technologies Workshop (MoST)
    @INPROCEEDINGS{Neuner2014Enter,
       author = {Sebastian Neuner and Victor {Van der Veen} and Martina Lindorfer and Markus Huber and Georg Merzdovnik and Martin Schmiedecker and {Edgar R.} Weippl},
       authorhotlist = {true},
       title = {Enter Sandbox: Android Sandbox Comparison},
       booktitle = {Proceedings of the IEEE Mobile Security Technologies Workshop (MoST)},
       year = {2014},
       month = {5},
       pdf = {mostAndroid.pdf},
       publisher = {IEEE},
       link_slides = {http://www.slideshare.net/SBAResearch/enter-sandbox-android-sandbox-comparison},
    }
  • Gradually Improving the Forensic Process (2015)
    • INPROCEEDINGS--
    • Sebastian Neuner and Martin Schmiedecker and Sebastian Schrittwieser and Edgar R. Weippl
    • International Workshop on Cyber Crime (IWCC)
    @INPROCEEDINGS{Neuner2015Gradually,
       author = {Sebastian Neuner and Martin Schmiedecker and Sebastian Schrittwieser and {Edgar R.} Weippl},
       title = {Gradually Improving the Forensic Process},
       booktitle = {International Workshop on Cyber Crime (IWCC)},
       year = {2015},
       month = {8},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/Neuner_IWCC2015.pdf},
    }
  • Effectiveness of File‐based Deduplication in Digital Forensics (2016)
    • ARTICLE-true
    • Sebastian Neuner and Martin Schmiedecker and Edgar R. Weippl
    • Security and Communication Networks
    @ARTICLE{Neuner2016Effectiveness,
       author = {Sebastian Neuner and Martin Schmiedecker and {Edgar R.} Weippl},
       authorhotlist = {true},
       title = {Effectiveness of File‐based Deduplication in Digital Forensics},
       journal = {Security and Communication Networks},
       year = {2016},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/Neuner2016Effectiveness_preprint.pdf},
       publisher = {Wiley},
    }
  • PeekaTorrent: Leveraging P2P Hash Values for Digital Forensics (2016)
    • INPROCEEDINGS-true
    • Sebastian Neuner and Martin Schmiedecker and Edgar R. Weippl
    • 16th Annual DFRWS Conference
    @INPROCEEDINGS{Neuner2016PeekaTorrent,
       author = {Sebastian Neuner and Martin Schmiedecker and {Edgar R.} Weippl},
       authorhotlist = {true},
       title = {PeekaTorrent: Leveraging P2P Hash Values for Digital Forensics},
       booktitle = {16th Annual DFRWS Conference},
       year = {2016},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/peekatorrent_preprint.pdf},
       link_source = {https://github.com/schmiedecker/peekatorrent},
       link_data = {https://www.peekatorrent.org},
       link_slides = {http://www.slideshare.net/SBAResearch/peekatorrent-leveraging-p2p-hash-values-for-digital-forensics},
    }
  • Time is on my side: Steganography in filesystem metadata (2016)
    • INPROCEEDINGS-true
    • Sebastian Neuner and Artemios G. Voyiatzis and Martin Schmiedecker and Stefan Brunthaler and Stefan Katzenbeisser and Edgar R. Weippl
    • 16th Annual DFRWS Conference
    @INPROCEEDINGS{Neuner2016Time,
       author = {Sebastian Neuner and {Artemios G.} Voyiatzis and Martin Schmiedecker and Stefan Brunthaler and Stefan Katzenbeisser and {Edgar R.} Weippl},
       authorhotlist = {true},
       title = {Time is on my side: Steganography in filesystem metadata},
       booktitle = {16th Annual DFRWS Conference},
       year = {2016},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/timestampStego_preprint.pdf},
       link_data = {https://www.sba-research.org/dfrws2016/},
       link_slides = {http://www.slideshare.net/SBAResearch/time-is-on-my-side-steganography-in-filesystem-metadata},
    }
  • Timestamp hiccups: Detecting manipulated filesystem timestamps on NTFS (2017)
    • ARTICLE-true
    • Sebastian Neuner and Artemios G. Voyiatzis and Martin Schmiedecker and Edgar R. Weippl
    • International Conference on Availability, Reliability and Security (ARES)
    @ARTICLE{Neuner2017,
       author = {Sebastian Neuner and {Artemios G.} Voyiatzis and Martin Schmiedecker and {Edgar R.} Weippl},
       authorhotlist = {true},
       title = {Timestamp hiccups: Detecting manipulated filesystem timestamps on NTFS},
       journal = {International Conference on Availability,
       Reliability and Security (ARES)},
       year = {2017},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/hiccups.pdf},
    }
  • Usblock: Blocking USB - based keypress injections attacks. (2018)
    • INPROCEEDINGS--
    • Sebastian Neuner and Artemios G. Voyiatzis and Spiros Fotopoulos and Collin Mulliner and Edgar R. Weippl
    • 32nd IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec), Springer LNCS
    @INPROCEEDINGS{Neuner2018Usblock,
       author = {Sebastian Neuner and {Artemios G.} Voyiatzis and Spiros Fotopoulos and Collin Mulliner and {Edgar R.} Weippl},
       title = {Usblock: Blocking USB - based keypress injections attacks.},
       booktitle = {32nd IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec),
       Springer LNCS},
       year = {2018},
       month = {6},
       pdf = {201806 - SNeuner - USBlock.pdf},
    }
  • On Reducing Bottlenecks in Digital Forensics (2016)
    • ARTICLE--
    • Martin Schmiedecker and Sebastian Neuner
    • ERCIM News
    @ARTICLE{Schmiedecker2016Reducing,
       author = {Martin Schmiedecker and Sebastian Neuner},
       title = {On Reducing Bottlenecks in Digital Forensics},
       journal = {ERCIM News},
       year = {2016},
       pdf = {https://www.sba-research.org/wp-content/uploads/publications/EN106-peekaTorrent.pdf},
    }

This Website uses Cookies. more information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

Close