News

ATHENE researchers discover serious security vulnerabilities in Internet routing protection software

A research team from the National Research Center for Applied Cybersecurity ATHENE led by Prof. Dr. Haya Schulmann has uncovered 18 vulnerabilities in crucial software components of Resource Public Key Infrastructure (RPKI). The affected vendors have been provided with patches for their products.

read more

ATHENE publishes white paper on the CRA

Connected products are to become more secure across the EU - that is the aim of the Cyber Resilience Act (CRA), an EU regulation that is currently being voted on and is expected to come into force this year. In our latest whitepaper, our researchers address the latest version of the CRA draft and explain which companies and products are likely to be subject to which obligations.

read more

Accepted papers at the EACL 2024

ATHENE researcher Prof. Iryna Gurevych presented seven papers at the 8th Conference of the European Chapter of the Associations for Computational Linguistics, EACL for short. Two of them were directly related to her research work in the ATHENE research project "Fake News and Conspiracy Theories" from the research area Secure Digital Transformation in Health Care ( SeDiTraH). EACL is one of the leading European conferences in the field of computational linguistics covering a broad spectrum of research areas that are concerned with computational approaches to natural language.

read more

Prof. Iryna Gurevych becomes a member of the Leopoldina

Prof. Iryna Gurevych from TU Darmstadt has been appointed to the German Academy of Sciences Leopoldina. This gives her one of the highest scientific honors that a German institution can bestow, as the world's oldest permanently existing academy of natural sciences unites only researchers with outstanding scientific achievements under its roof. With around 1.600 members, it provides independent, science-based political advice on future social issues and represents German science abroad. New members undergo a strict, multi-stage selection process.

read more

Vom Sprung ins kalte Wasser – Ein Interview mit unserem Mentor Guenter Kraft

In regelmäßigen Abständen stellen wir einige unserer Mentoren und Mentorinnen vor, die unseren Startups mit Rat und Tat zur Seite stehen.

read more

ATHENE position paper calls for data protection precautions

Cybersecurity researchers are often unable to comply with data protection regulations because they do not know before the start of a research activity whether and what personal data they will be processing. Our data protection experts have therefore formulated a proposed addition to the GDPR. Their concern: The legally binding introduction of data protection precautions that take unplanned data access into account.

read more

ATHENE researchers discover fundamental design flaws in DNSSEC

Led by Prof. Haya Schulmann of Goethe University Frankfurt, a team of ATHENE researchers has uncovered a critical flaw in the design of DNSSEC (DNS Security Extensions), which is a vulnerability in all Domain Name System (DNS) implementations. DNS is one of the fundamental building blocks of the Internet. Without a fix, the design flaw could have devastating consequences for virtually all DNS implementations using DNSSEC and public DNS providers such as Google and Cloudflare.

read more

Accepted papers on the CHI 2024

Three papers written by ATHENE researchers were accepted at the A*-ranked ACM CHI Conference on Human Factors in Computing Systems, CHI for short. The annual conference is the premier international conference of Human-Computer Interaction.

read more

ATHENE CEO appointed as Editor-in-Chief of ACM TOPS

The ACM Transactions on Privacy and Security (TOPS), one of the most established and renowned scientific journals in the field of cybersecurity and privacy technology, has appointed ATHENE Director Prof. Michael Waidner as Editor-in-Chief. His term runs from February 1, 2024 to January 31, 2027.

read more

ATHENE researchers find insecure keys in healthcare email system

Medical practices send important documents such as electronic certificates of incapacity for work or treatment and cost plans to health insurance companies via the telematics infrastructure mail system. The e-health team at Fraunhofer SIT has now discovered that the encryption for the mail system was set up incorrectly at several health insurance companies - a total of eight health insurance companies used the same keys and were therefore theoretically able to decrypt the mails of other health insurance companies. The researchers are presenting their findings at this year's Chaos Communication Congress (37c3) organized by the Chaos Computer Club (CCC).

read more