Blog_Mit Sicherheit innovativ_Fraunhofer AISEC_2

Innovating with security: Fraunhofer AISEC launches its cybersecurity blog

The cybersecurity blog goes live: Fraunhofer AISEC’s new blog is presenting exciting topics from the IT security research world in a new format: Expect fascinating content from the areas of trusted AI, trusted electronics, quantum computing and much more.

The mega-trend of digitalization is becoming increasingly important to both the economy and society. Networked infrastructures and sensitive data need to be protected, while attacks by cybercriminals must be detected and prevented. More than 100 experts at the Fraunhofer Institute for Applied and Integrated Security AISEC are developing cybersecurity concepts and solutions that are necessary to achieve this. This blog will provide you with a personal insight into their scientific work and projects. You can discover exciting stories, new scientific findings or solutions to specific problems. Learn more about the everyday work of applied cybersecurity research. We can guarantee one thing: Each and every contribution will be innovative. We hope you enjoy reading.

Your blog editors

Most Popular

Never Miss a Post:

 
Bitte füllen Sie das Pflichtfeld aus.
Bitte füllen Sie das Pflichtfeld aus.
Bitte füllen Sie das Pflichtfeld aus.

* Mandatory

* Mandatory

By filling out the form you accept our privacy policy.
Linkedin Youtube Instagram

Leave a Reply

Your email address will not be published. Required fields are marked *

Other Articles

quantum computer with neural network visualization

Quantum Neural Network Security: Kill-Chain Attacks on QNNs

Pascal Debus 29. September 2026

Quantum machine learning is moving from theory to real quantum hardware. This creates new security risks. In a recent study, researchers from Fraunhofer AISEC and partners demonstrated a multi-stage attack on a quantum neural network running on trapped-ion hardware. The attack combines side-channel analysis, adversarial examples and crosstalk. For providers, product teams and decision-makers, the message is clear: quantum AI needs security by design before it becomes a critical infrastructure.

Read More »

Fault Attacks on ECC Signature Verification

Kevin Schneider 20. August 2026

Digital signatures used in embedded systems are often based on elliptic curve cryptography (ECC) thanks to its performance and low memory profile. In secure boot processes they provide the cryptographic foundation for guaranteeing the authenticity of a firmware image. At the same time, these resource-constraints and the physical exposure of such devices makes them prime targets for fault attacks. Prior work studied faults on signature generation in depth, yet nobody had systematically asked how vulnerable signature verification is to fault attacks combined with carefully crafted signature inputs. That is exactly the gap we set out to close.

Read More »
Visual of the Blog Post: How Secure Is Europe's Rail System? A Systematic Cybersecurity Risk Analysis of the ERTMS

How Secure Is Europe’s Rail System? A Systematic Cybersecurity Risk Analysis of the European Rail Traffic Management System (ERTMS)

Sebastian N. Peters 7. August 2026

The European Rail Traffic Management System (ERTMS) is designed to make Europe’s railways interoperable and safe. The system, which has been mandatory since 2002, combines standardized signaling, radio communication, and train control – but how well is it protected against cyberattacks? Using MoRA, our modular risk assessment approach, we systematically model the ERTMS and evaluate cybersecurity risks. We compare current and future configurations to identify the assets with the largest attack surface. Our overview of the entire system – from GSM-R, balises, FRMCS, ETCS levels, and ATO to key management – provides a concise preview of risk profiles and attack tree scenarios, and highlights practical countermeasures that significantly improve cybersecurity.

Read More »
Viisual for blog post: Codyze: Automated Analysis of Cybersecurity Requirements in Software

Codyze: Automated Analysis of Cybersecurity Requirements in Software

Alexander Küchler 1. July 2026

Manually verifying compliance with requirements such as the Cyber Resilience Act is not scalable. Our code analysis tool, Codyze, translates product-centric regulatory requirements into verifiable rules and automatically assesses whether the product’s source code fulfills them – across languages and microservices. Codyze makes all analysis results transparent to developers, security teams, and auditors.

Read More »
WordPress Cookie Plugin by Real Cookie Banner