About this Seminar

In our seminar, you should learn to present research results in a concise manner, both in writing (Seminar Thesis) and speaking (Seminar Presentation). Additionally, you should learn to give proper feedback, for both the presentation and the thesis of other students in this seminar.

To achieve these goals, we have the following main parts in our seminar (in chronological order):

1. Submission of a preliminary version of the seminar paper.
   This submission is intended to provide a very early feedback on your paper.
2. Submission of a pre-final version of the seminar paper.
   This is a finished version of your seminar paper that is then reviewed by other students in the seminar.
3. Submission of the reviews.
   Each student is assigned and has to submit two reviews of their peers papers. The reviews you receive should help you to improve your own paper.
4. Presentation of your paper.
   This presentation is held in front of the whole seminar, and you grade each other, the presentation that receives the highest grade from their peers receives the “Best Presentation” award. (This grade is independent of the grade you receive from us for the presentation.)
5. Submission of the final version of the seminar paper.
   This version includes the feedback from the reviews and is the one graded by us.

Additionally, we have presentations on the topics of research, writing, review, and presentation skills. If you want to register to our PANDA course to get access to these presentations (without participating in the seminar), you can use the password SysSec23.

Dates

• The topics are distributed in the first week of the semester.
• The presentations of the seminar papers will be held as a block seminar at the end of the semester.
  • The date is 1.2. and 2.2., betwen 9:00 and 13:30

Deadlines

• 20.11.: Preliminary Version of Seminar Paper
• 8.1.: Final Version of Seminar Paper
• 22.1.: Reviews
• 31.1.: Presentation Slides (you can still change your slides a bit before the talk)
• 5.2.: Camera-Ready Version of Seminar Paper

The seminar will be organized over Panda. Deadlines are till the end of the day (23:59 local time/as according to Panda).

Presentations

We will have five meetings in FU.511, with different topics which will (hopefully) be helpful for you to pass the seminar:

• 13.10. 9:15 Introduction
• 20.10. 9:15 Research Skills
• 27.10. 9:15 Writing Skills
• 15.12. 9:15 Review Skills
• 19.1. 9:15 Presentation Skills

Topics

The central topic of this seminar are security papers presented at top conferences.

• 12 Angry Developers – A Qualitative Study on Developers’ Struggles with CSP
• Abusing Hidden Properties to Attack the Node.js Ecosystem
• Assessing Browser-level Defense against IDN-based Phishing
• Bloom Filter Encryption and Applications to Efficient Forward-Secret 0-RTT Key Exchange
• Breaking the Specification: PDF Certification
• Can I Take Your Subdomain? Exploring Same-Site Attacks in the Modern Web
• Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation
• How Great is the Great Firewall? Measuring China’s DNS Censorship
• Injection Attacks Reloaded: Tunnelling Malicious Payloads over DNS
• mID: Tracing Screen Photos via Moiré Patterns
• Reconstructing with Less: Leakage Abuse Attacks in Two-Dimensions
• Reining in the Web’s Inconsistencies with Site Policy
• Pretty Good Phone Privacy
• Private Blocklist Lookups with Checklist
• Processing Dangerous Paths – On Security and Privacy of the Portable Document Format
• Scan, Test, Execute: Adversarial Tactics in Amplification DDoS Attacks
• Shadow Attacks: Hiding and Replacing Content in Signed PDFs
• SoK: Security and Privacy in the Age of Commercial Drones
• T-Reqs: HTTP Request Smuggling with Differential Fuzzing
• Weaponizing Middleboxes for TCP Reflected Amplification
• What’s in a Name? Exploring CA Certificate Control
• Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications

Grading, Demands, and Expectations

The final grade consists of your presentation (30%), your paper (60%), and your reviews (10%). Additionally, you must meet all deadlines. Getting 0% (i.e. not submitting/not presenting) means failing the seminar.

Seminar Paper

Preliminary Version

• at least 5 pages of text (excluding title page, table of contents, references, figures, …)
• describes the main paper problem
• briefly describe 2 related papers citing your paper

Final Version

• Essay written according to the standards of a scientific paper.
  Unless otherwise discussed with us:
  • Your paper should summarize the original paper.
  • You should introduce concepts so that any other student in the seminar can understand your paper. (This does not include basic cryptographic/computer science terms.)
  • Like the preliminary, the final paper version has to describe two papers that cite the original. This should give a broader context for your paper.
• It MUST be written using our LaTeX template (unchanged).
• We expect around 15 pages of content, the hard lower limit is 9 pages of text (excluding title page, table of contents, references, figures, …). In most cases, the paper should not be longer than 20 pages of content.

Presentation

• 20 minutes presentation. 5 minutes discussion and questions.

The best presentation will be awarded! More information will be given in the first meeting.

Reviews

We will follow a peer review procedure similar to scientific publications:

• You submit your paper on PANDA
• Some (2) peers (other students) review your submission:
  • Read and understand the submitted paper
  • Criticize your paper
  • Make recommendations on how to improve
  • Be honest, polite, and helpful when writing your reviews
• The reviews you receive will not influence your final grade (but you should address/apply them in your final version)
• Each student has to write 2 reviews (each 1–2 pages)