Professional Profile


Specialist Areas of Work

→ Information security of vehicular onboard systems
→ Information security of vehicular communications
→ Overall embedded systems information security
→ Operating systems security & Trusted Computing
→ Cryptography, cryptographic schemes & protocols


Specialist Key Competences

→ Systematic identification of critical security assets and meaningful security goals
→ Threat, vulnerability and risk analysis (TVRA) based on realistic attacker models
→ Security requirements engineering, requirements specification and prioritization
→ Systematic design and specification of security solutions in hardware and software
→ Evaluation and Validation of security solutions, for instance, acc. to Common Criteria


Management Key Competences

→ Company-wide project and resource management
→ Personnel management and personnel development
→ Branch management & branch development
→ International, interdisciplinary consulting and networking
→ No fear to take responsibilities or to make critical decisions



Publications


Specialized Books ↑

M.Wolf: "Security Engineering for Vehicular IT Systems — Improving Trustworthiness and Dependability of Automotive IT Applications", Dissertation, Vieweg+Teubner-Verlag, 2009.

K.Lemke, C.Paar, M.Wolf (Eds.): "Embedded Security in Cars — Securing Current and Future Automotive IT Applications", Springer-Verlag, 2006.


Book Chapters ↑

A.Bogdanov, T.Eisenbarth, C.Paar, M.Wolf: "Trusted Computing for Automotive Systems", Chapter in Trusted Computing, N.Pohlmann, H.Reimer (Eds.), Vieweg-Verlag, 2007.

A.Weimerskirch, C.Paar, M.Wolf: "Secure In-Vehicle Communication", Chapter in Embedded Security in Cars, K.Lemke, C.Paar, M.Wolf (Eds.), Springer-Verlag, 2006.

A.Weimerskirch, C.Paar, M.Wolf: "Automotive Digital Rights Management Systems", Chapter in Embedded Security in Cars, K.Lemke, C.Paar, M.Wolf (Eds.), Springer-Verlag, 2006.


Peer-Reviewed Scientific Journals ↑

K.Schramm, M.Wolf: "Secure Feature Activation", In Society of Automotive Engineers (SAE) International Journal of Passenger Cars — Electronic and Electrical Systems, 2009.

A.Osterhues, C.Stüble, M.Wolf: "Secure Offline Superdistribution for Mobile Platforms", In International Journal of Applied Cryptography (IJACT), 2009.

A.Weimerskirch, M.Wolf, T.Wollinger: "State of the Art: Embedding Security in Vehicles", In EURASIP Journal on Embedded Systems (EURASIP JES), Special Issue: Embedded Systems for Intelligent Vehicles, 2007.


Peer-Reviewed International Conference & Workshop Papers ↑

T.Gendrullis, M.Wolf: "Design, Implementation, and Evaluation of a Vehicular Hardware Security Module", In 14th International Conference on Information Security and Cryptology (ICISC 2011), Seoul, Korea, November 30 – December 2, 2011.

H.Cankaya, C.Grepet, A.Groll, J.Holle, M.Wolf: "Towards A Shared Digital Communication Platform for Vehicles", In 18th ITS World Congress (ITS Orlando 2011), Orlando, Florida, USA, October 16 – 20, 2011.

H.Cankaya, A.Groll, J.Holle, C.Ruland, M.Wolf: "Open Platforms On the Way To Automotive Practice", In 8th ITS European Congress (ITS Lyon 2011), Lyon, France, June 6 – 9, 2011.

O.Henniger, M.S.Idrees, Y.Roudier, D.Scheuermann, H.Schweppe, M.Wolf: "Secure Automotive On-Board Protocols: A Case of Over-the-Air Firmware Updates", In 3rd International Workshop on Communication Technologies for Vehicles (Nets4Cars 2011), German Aerospace Center (DLR), Oberpfaffenhofen, Germany, March 23 – 24, 2011.

A.Groll, J.Holle, M.Wolf, T.Wollinger: "Next Generation of Automotive Security: Secure Hardware and Secure Open Platforms", In 17th ITS World Congress (ITS Busan 2010), Busan, Korea, October 25 – 29, 2010.

C.Eherer, H.J.Putzer, F.Strasser, M.Wolf: "Synergetic Safety and Security — Improving Efficiency and Dependability", In 8th Embedded Security in Cars Workshop (escar 2010), Bremen, Germany, November 16 – 17, 2010.

L.Apvrille, O.Henniger, Y.Roudier, B.Weyl, M.Wolf: "Secure Automotive On-Board Electronics Network Architecture", (Poster summary), In 33rd FISITA 2010 World Automotive Congress, Budapest, Hungary, May 30 – June 4, 2010.

C.Paar, A.Rupp, K.Schramm, A.Weimerskirch, M.Wolf: "Implementing Data Security and Privacy in Next-Generation Electric Vehicle Systems", In Society of Automotive Engineers (SAE) World Congress 2010, Detroit, Michigan, USA, April 12 – 15, 2010.

M.Scheibel, M.Wolf: "Security Risk Analysis for Vehicular IT Systems — A Business Model for IT Security Measures", In 7th Embedded Security in Cars Workshop (escar 2009), Düsseldorf, Germany, November 24 – 25, 2009.

A.Groll, J.Holle, C.Ruland, M.Wolf, T.Wollinger, F.Zweers: "OVERSEE — A Secure and Open Communication and Runtime Platform for Innovative Automotive Applications", In 7th Embedded Security in Cars Workshop (escar 2009), Düsseldorf, Germany, November 24 – 25, 2009.

K.Schramm, M.Wolf: "Secure Feature Activation", In Society of Automotive Engineers (SAE) World Congress 2009, Detroit, Michigan, USA, April 20 – 23, 2009.

A.Weimerskirch, M.Wolf, T.Wollinger: "Introduction to Vehicular Embedded Security", In Society of Automotive Engineers (SAE) World Congress 2009, Detroit, Michigan, USA, April 20 – 23, 2009.

N.Asokan, A.Osterhues, A.-R.Sadeghi, C.Stüble, M.Wolf: "Securing Peer-to-peer Distributions for Mobile Devices", In 4th Information Security Practice and Experience Conference (ISPEC 2008), Sydney, Australia, April 21 – 23, 2008.

M. Scheibel, C. Stüble, M. Wolf: "An Interoperable Security Architecture for Vehicular Software Protection", In International Workshop on Interoperable Vehicles (IOV 2008), ETH Zurich, Switzerland, March 26, 2008.

T.Eisenbarth, T.Güneysu, C.Paar, A.-R.Sadeghi, D. Schellekens, M.Wolf: "Reconfigurable Trusted Computing in Hardware", In 2nd ACM Workshop on Scalable Trusted Computing (STC 2007), Alexandria, Virginia, USA, November 2, 2007.

N.Asokan, J.-E.Ekberg, A.-R.Sadeghi, C.Stüble, M.Wolf: "Enabling Fairer Digital Rights Management with Trusted Computing", In 10th Information Security Conference (ISC 2007), Valparaiso, Chile, October 9 – 12, 2007.

T.Eisenbarth, T.Güneysu, C.Paar, A.-R.Sadeghi, R.Tessier, M.Wolf: "Trusted Computing in Reconfigurable Hardware", In USE-IT Security Research Workshop, Toulouse, France, July 3 – 4, 2007.

T.Eisenbarth, T.Güneysu, C.Paar, A.-R.Sadeghi, R.Tessier, M.Wolf: "Establishing Chain of Trust in Reconfigurable Hardware" (Poster summary), In 15th Annual IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM 2007), Napa, California, USA, April 23 – 25, 2007.

A.-R.Sadeghi, M.Scheibel, C.Stüble, M.Wolf: "Play it once again, Sam — Enforcing Stateful Licenses on Open Platforms", In 2nd Workshop on Advances in Trusted Computing (WATC 2006 Fall), IBM Tokyo Research Labs, Tokyo, Japan, November 30 – December 1, 2006.

M.Scheibel, C.Stüble, M.Wolf: "Design and Implementation of an Architecture for Vehicular Software Protection", In 4th Embedded Security in Cars Workshop (escar 2006), Berlin, Germany, November 14 – 15, 2006.

K.Höper, C.Paar, A.Weimerskirch, M.Wolf: "Cryptographic Component Identification: Enabler for Secure Vehicles", In IEEE 62nd Semiannual Vehicular Technology Conference (VTC Fall 2005), Dallas, Texas, USA, September 25 – 28, 2005.

K.Höper, C.Paar, A.Weimerskirch, M.Wolf: "Component Identification: Enabler for Secure Networks of Complex Systems", In 3rd International Conference on Applied Cryptography and Network Security (ACNS 2005), New York City, NY, USA, June 7 – 10, 2005.

C.Paar, A.Weimerskirch, M.Wolf: "Security in Automotive Bus Systems", In 2nd Embedded Security in Cars Workshop (escar 2004), Bochum, Germany, November 10 – 11, 2004.


Peer-Reviewed National Conference & Workshop Papers ↑

T.Enderle, M.Wolf: "Cyberwar meets Industrial Automation — or — What We Can Learn from Stuxnet", In SPS/IPC/DRIVES 2011, Nuremberg, Germany, November 22 – 24, 2011.

A.Paus, D.Vandersee, M.Wolf: "Integrated Vehicular Security Engineering — Towards A Holistic Security-Integrated Development Process for Vehicular IT Systems", In 27. VDI/VW-Gemeinschaftstagung: Automotive Security, Berlin, Germany, October 11 – 12, 2011.

T.Gendrullis, M.-S.Idrees, Y.Roudier, H.Schweppe, B.Weyl, M.Wolf: "Securing Car2X Applications with Effective Hardware-Software Co-Design for Vehicular On-Board Networks", In 27. VDI/VW-Gemeinschaftstagung: Automotive Security, Berlin, Germany, October 11 – 12, 2011.

M.Wolf: "A Secure and Privacy-Preserving Electronic License Plate", In Automotive 2010 — Sicherheit und Zuverlässigkeit für automobile Informationstechnik, Stuttgart, Germany, June 21 – 23, 2010.

M.Wolf, F.Zweers: "AppStore für Autos: Über neue Anwendungsfelder und die zuverlässige Absicherung zukünftiger automobiler IT-Plattformen" In 2. Elektronik automotive congress, Ludwigsburg, Germany, May 11, 2010.

C.Meves, F.Stumpf, B.Weyl, M.Wolf: "A Security Architecture for Multipurpose ECUs in Vehicles", In 25. VDI/VW-Gemeinschaftstagung: Automotive Security, Ingolstadt, Germany, October 19 – 20, 2009.

O.Henniger, A.Ruddle, H.Seudié, B.Weyl, M.Wolf, T.Wollinger: "Securing Vehicular On-board IT-Systems — The EVITA Project", In 25. VDI/VW-Gemeinschaftstagung: Automotive Security, Ingolstadt, Germany, October 19 – 20, 2009.

J.Pelzl, M.Wolf, T.Wollinger: "Virtualization Technologies for Cars — Solutions to increase safety and security of vehicular ECUs", In Automotive 2008 — Sicherheit und Zuverlässigkeit für automobile Informationstechnik, Stuttgart, Germany, November 19 – 20, 2008.

C.Paar, M.Wolf: "Security Requirements Engineering in the Automotive Domain: On Specification Procedures and Implementational Aspects", In SICHERHEIT 2008: Sicherheit – Schutz und Zuverlässigkeit, 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V., Saarbrücken, Germany, April 2 – 4, 2008.

A.Bogdanov, T.Eisenbarth, C.Paar, M.Wolf: "Trusted Computing for Automotive Systems — New Approaches to Enforce Security and Privacy for Electronic Systems in Vehicles", In 23. VDI/VW-Gemeinschaftstagung: Automotive Security, Wolfsburg, Germany, November 27 – 28, 2007.

U.Huber, A.-R.Sadeghi, M.Wolf: "Security Architectures for Software Updates and Content Protection", In Automotive — Safety & Security 2006, Stuttgart, Germany, October 11 – 13, 2006.

C.Paar, A.Weimerskirch, M.Wolf: "Digital Rights Management Systeme (DRMS) als Enabling Technology im Automobil", In SICHERHEIT 2005: Sicherheit – Schutz und Zuverlässigkeit, 2. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V., Regensburg, Germany, April 5 – 9, 2005.

C.Paar, A.Weimerskirch, M.Wolf: "Sicherheit in automobilen Bussystemen", In Automotive — Safety & Security 2004, Stuttgart, Germany, October 6 – 7, 2004.

C.Paar, A.Weimerskirch, M.Wolf: "Komponentenidentifikation: Voraussetzung für IT-Sicherheit im Automobil", In Automotive — Safety & Security 2004, Stuttgart, Germany, October 6 – 7, 2004.


Magazine Articles ↑

A.Groll, J.Holle, M.Wolf, T.Wollinger: "Plataforma de TI para veículos", Our ITS World 2010 publication "Next Generation of Automotive Security: Secure Hardware and Secure Open Platforms" translated into Portuguese, In aranda RTI Magazine — Redes, Telecom e Instalações (Networks, Telecom and Communication Infrastructures), São Paulo, Brazil, September 2011.

J.Pelzl, M.Wolf, T.Wollinger: "Sicherheitsaspekte bei Embedded IT", In IM — Fachzeitschrift für Information Management und Consulting, IMC Medienverlag, 04/2009.

C.Wegener, A.Weimerskirch, M.Wolf: "Rechte für Kleine – Digital Rights Management in mobilen und eingebetteten Geräten", In iX – Magazin für professionelle Informationstechnik, January 2006.

C.Paar, A.Weimerskirch, M.Wolf: "Automotive Digital Rights Management Systems", In Elektronik Automotive, June 2005.



Miscellaneous


Teaching at the Ruhr-University of Bochum ↑

TA for the lecture "Implementation of cryptographic schemes I"
TA for the lecture "Implementation of cryptographic schemes II"
Accreditation of the Master's study course "Master in IT-Security"
Guidance of BS and MS theses
TA for seminars and graduate classes


Scientific Reviews ↑

IEEE Journal on Selected Areas in Communications 2010, Embedded Security in Cars (escar) 2009, IEEE Transactions on Dependable and Secure Computing 2009, Embedded Security in Cars (escar) 2008, IET Journal on Intelligent Transport System 2008, Scalable Trusted Computing (STC) 2007, Embedded Systems Security (WESS) 2007, Vehicular Ad-Hoc Networks (VANET) 2007, Embedded Security in Cars (escar) 2006, D-A-CH Security 2006, Embedded Security in Cars (escar) 2005, Information Security and Cryptology (CISC) 2005, Secure Mobile Ad-hoc Networks and Sensors (MADNES) 2005, Embedded Security in Cars (escar) 2004


Invited Talks ↑

Volkswagen AutoUni: "Vehicular Security Engineering — Towards a Systematic Approach for Integrating IT Security into the Development Process of Vehicular IT Systems", Wolfsburg, Germany, November 30th, 2011.

Embedded Security in Cars (escar) 2010: "Smart, Clean, and Secure — IT Security Challenges for Next-Generation Electric Vehicle Systems", Bremen, Germany, November 16th, 2010.

ITS World Congress (Busan 2010): "Cellular Communication for Vehicle Safety - From eCall to Wireless Hazard Warnings", Busan, Korea, October 27th, 2010.

CAST Workshop — Mobile Security for Intelligent Cars: "The EVITA Hardware Security Module – Interface Specification and Basic Hardware Security Functionality", Darmstadt, Germany, July 1st 2010.

EUROFORUM-Jahrestagung — Software im Automobil: "Mehr IT-Sicherheit auf unseren Straßen – Über IT-Sicherheit für Automobile", Stuttgart, May 5th, 2010.

CAST Workshop — Mobile Security for Intelligent Cars: "Designing Secure Automotive Hardware for Enhancing Traffic Safety", Darmstadt, Germany, August 27th, 2009.

Embedded Security in Cars (escar) 2008: "Vehicular Security Hardware", Hamburg, Germany, November 18th, 2008.

Design & Elektronik-Entwicklerforum Kfz-Elektronik 2007: "In-Vehicle Communication Security", Ludwigsburg, Germany, May 15th, 2007.

TeleTrust Trusted Computing Workshop: "Trusted Computing for Automotive Systems", Gelsenkirchen, Germany, May 3rd, 2007.

MicroCar 2005: "Automotive IT-Security", Leipzig, Germany, June 22nd, 2005.


Named References in Press & Media (Selection) ↑

Stuart McClure et al.: "Caution: Malware Ahead — An Analysis of Emerging Risks in Automotive System Security, In McAfee Report on Automotive Systems, September 7th, 2011.

Thomas Fischermann, Götz Hamann: "Der Kontrollverlust", In Digital, DIE ZEIT, Issue No.32, August 4th, 2011.

Chris Löwer, Gordon Bolduan: "Smartphone auf Rädern", In heise Technology Review, Heise Zeitschriften Verlag, February 23rd, 2011.

Axel Müller: "Wenn das Navi plötzlich die Orientierung verliert", In RZ-Thema, Rhein-Zeitung (RZ), August 23rd, 2010.

Martin Franz: "WLAN-Dialog von Auto zu Auto: Eine Frage der Sicherheit", In heise Autos, Heise Zeitschriften Verlag, July 2nd, 2010.

Achim Killer: "Sicherheit auf Rädern", In Forschung Aktuell, Deutschlandradio, June 28th, 2010.

Aeneas Rooch: "Unsichtbarer Angriff", In Mobiles Leben, Süddeutsche Zeitung (SZ), August 24th, 2009.

Aeneas Rooch: "Fahrende Computer", In Wissen, Westdeutsche Allgemeine Zeitung (WAZ), August 15th, 2009.

Jens Mahrhold, Aeneas Rooch: "Manipulationen am Auto", In NDR2 am Vormittag, Norddeutscher Rundfunk (NDR), August 8th 2009.

Aeneas Rooch: "Hacker-Angriff im Auto - Wie sicher sind mobile Computer-Systeme?", In WDR5 Leonardo - Wissenschaft und mehr, Westdeutscher Rundfunk (WDR), August 11th, 2009.

Sebastian Ballhausen: "Autos gegen Hacker und Viren sichern", In AutomotiveIT, automotiveIT Media & Verlag, July 23rd, 2009.

Matthias Becker: "Hacken von Autos", In heise Telepolis, Heise Zeitschriften Verlag, July 15th, 2009.

Achim Killer: "Hackerangriff auf den Motor", In Computer und Kommunikation, Deutschlandradio, July 4th, 2009.

Achim Killer: "Autohacker: Schadsoftware und Sicherheitslücken im Auto", In B5 aktuell, Bayerischer Rundfunk, Juni 13th, 2009.

Bernd Otterbach: "IT-Sicherheit im Auto", In AUTOMOBIL-Industrie, Vogel Business Media, June 12th, 2009.

Gordon Bolduan: "Das Auto als Angriffsziel für Viren und Hacker", In heise online, Heise Zeitschriften Verlag, June 4th, 2009.

Stephan Bähnisch : "Immer mehr Elektronik: Hackergefahr im Auto", In AutoBILD.de, Axel Springer Auto Verlag, Juni 2nd, 2009.

Jens Wylkop: "Fahrzeuge gegen Hacker und Viren sichern", In Pressemitteilung Nr.165/2009, Pressestelle der Ruhr-Universität Bochum, June 2nd, 2009.

Egon Morawietz: "Software-Viren bedrohen die Autowelt", In FOCUS Online, FOCUS Magazin Verlag, May 15th, 2009.

N.Meyersohn, T.Zeller: "Can a Virus Hitch a Ride in Your Car", In The New York Times, The New York Times Company, March 13th, 2005.



As of January 2nd, 2012