Peer-reviewed Paper
2025
 |
Samantha Klier and Harald Baier. Metrics Matter - Source Camera Forensics for Large-Scale Investigations. In: Digital Threats Just Accepted, August 2025. | |
 |
Karolin Lohre, Harald Baier, Lukas Hardi and Andreas Attenberger. Towards reliable data in the scope of unmanned aircraft systemsIn: Forensic Science International: Digital Investigation, Volume 53, June 2025, 301914. | |
 |
Lisa Rzepka and Harald Baier. Quality of Inconsistencies in (Windows) Memory Dumps. In: Proceedings of the 15th SPRING graduate workshop of the special interest group Security – Intrusion Detection and Response (SIDAR) of the German Informatics Society (GI), Nuremberg (Germany), April 2025. | |
 |
Lisa Rzepka, Jenny Ottmann, Radina Stoykova, Felix Freiling and Harald Baier. A Scenario-based Quality Assessment of Memory Acquisition Tools and its Investigative Implications. In: Proceedings of the 12th Annual Digital Forensics Research Conference (DFRWS EU), Brno (Czech Republic), March 2025. | |
 |
Thomas Göbel, Frank Breitinger and Harald Baier. Optimising data set creation in the cybersecurity landscape with a special focus on digital forensics: Principles, characteristics, and use cases.In: Forensic Science International: Digital Investigation, Volume 52, March 2025, 301882, ISSN 2666-2817. | |
|
Samantha Klier and Harald Baier.Source Camera Identification - Do we have a gold standard? In: Forensic Science International: Digital Investigation, Volume 52, March 2025, 301858, ISSN 2666-2817. |
2024
 |
Samantha Klier and Harald Baier. Beware of the Rabbit Hole– A Digital Forensic Case Study of DIY Drones.NordSec 2024 - 29th Nordic Conference on Secure IT Systems, Karlstad (Sweden), November 2024. |
|
 |
Thomas Göbel, Harald Baier and Dennis Wolf. Scenario-based Data Set Generation for Use in Digital Forensics: A Case Study.In: Proceedings of the 4th International Workshop on Digital Forensics (IWODF) - as part of the INFORMATIK 2024, Wiesbaden (Germany), September 2024. | |
 |
Lisa Rzepka, Jenny Ottmann, Felix Freiling and Harald Baier. Causal Inconsistencies are Normal in Windows Memory Dumps (too).In: Proceedings of the 13th International Conference on IT Security Incident Management & IT Forensics (IMF), Saarbrücken (Germany), September 2024. | |
 |
Markus Demmel, Thomas Göbel, Patrik Gonçalves and Harald Baier. Data Synthesis is Going Mobile -- On Community-Driven Dataset Generation for Android Devices.In: Proceedings of the 13th International Conference on IT Security Incident Management & IT Forensics (IMF), Saarbrücken (Germany), September 2024. | |
 |
Michael Mundt, Harald Baier and Antje Raab-Düsterhöft. Towards Reducing Business-Risk of Data Theft Implementing Automated Simulation Procedures of Evil Data Exfiltration. In: Proceedings of the International Conference on Availability, Reliability and Security (ARES) 2024, Vienna, 30.Juli - 02. August 2024 -- presented and published on ACM Digital Library. |
|
 |
Michael Mundt. Die Synergie von GIS und KI.Accepted for presentation at Polizeiinformatik 2024, Mittweida, March 2024, post-event published. |
|
 |
Dennis Wolf, Thomas Göbel and Harald Baier. Hypervisor-based data synthesis: On its potential to tackle the curse of client-side agent remnants in forensic image generation. In: Proceedings of the 11th Annual Digital Forensics Research Conference (DFRWS EU), Zaragoza (Spain), March 2024. | |
 |
Matthias Deutschmann and Harald Baier. Ubi est indicium? On Forensic Analysis of the UBI File System. In: Proceedings of the 11th Annual Digital Forensics Research Conference (DFRWS EU), Zaragoza (Spain), March 2024. | |
 |
Harald Baier and Matthias Deutschmann. Flash-Dateisysteme im Kontext der digitalen Forensik.In: Proceedings of thePolizeiinformatik 2024, Mittweida (Germany), March 2024. | |
 |
Michael Mundt and Harald Baier. Gib dem Dino Futter -- adaptive Detektion von Bedrohungen in KRITIS-Netzwerken mittels Open-Source-Forensik. In: Proceedings of the 31. DFN-Konferenz „Sicherheit in vernetzten Systemen“, Hamburg, January 2024 -- presented and post-event published. | |
 |
Michael Mundt and Harald Baier. Adaptive Detektion von Bedrohungen in KRITIS-Netzwerken mittels Open-Source-Forensik.In: Linux-Magazin 02/2024. |
|
 |
Thomas Göbel, Harald Baier, Jan Türr. Generating Usable and Assessable Datasets Containing Anti-Forensic Traces at the Filesystem Level. In: Proceedings of the 20th Annual IFIP WG 11.9 International Conference on Digital Forensics, New Delhi (India), January 2024. |
2023
 |
Samantha Klier and Harald Baier. To Possess or Not to Possess - WhatsApp on Android Revisited with a Focus on Stickers.NordSec 2023 - 28th Nordic Conference on Secure IT Systems, Oslo (Norway), November 2023. | |
 |
Michael Mundt, Harald Baier. Enhancing Incident Management by an improved Understanding of Data Exfiltration: Definition, Evaluation, Review. International Conference on Digital Forensics and Cyber Crime. In: Proceedings of the EAI ICDF2C 2023 - 14th EAI International Conference on Digital Forensics & Cyber Crime, New York City (USA), November 30-1, 2023 -- accepted for publication. | |
 |
Samantha Klier and Harald Baier. Scalable Image Clustering to screen for self-produced CSAM.AICSEC 2023 - EAI International Conference on Artificial Intelligence for CyberSecurity, Bratislava (Slovakia), October 2023. | |
 |
Michael Mundt and Harald Baier. Enabling Protection against Data Exfiltration by implementing ISO 27001:2022 update. In: International Conference on Security & Applications (SECURA 2023), International Journal on Cybernetics & Informatics (IJCI), virtual, August 2023. | |
 |
Frieder Uhlig, Lukas Struppek, Dominik Hintersdorf, Thomas Göbel, Harald Baier and Kristian Kersting. Combining AI and AM -- Improving approximate matching through transformer networks. In: Proceedings of the 23rd Annual DFRWS USA Conference, hybrid (Baltimore, USA), July 2023. | |
 |
Thomas Göbel, Harald Baier and Frank Breitinger. Data for Digital Forensics: Why a Discussion on "How Realistic is Synthetic Data" is Dispensable. In: Proceedings of the 12th International Conference on IT Security Incident Management & IT Forensics (IMF), Munich (Germany), May 2023. | |
 |
Samantha Klier, Jan Varenkamp and Harald Baier. Back and Forth - On automatic Exposure of Origin and Dissemination of Files on Windows. In:Digital Threats: Research and Practice4.3 (2023): 1-17. | |
 |
Michael Mundt. Digital Twin für die Polizei. In: Polizei-Informatik 2023, Rediroma Verlag, ISBN 978-3-98885-071-3, September 2023. |
|
 |
Patrik Gonçalves and Harald Baier. Applying Activity-Based Models to Integrate Labeled Preset Key Events in Intra-Day Human Mobility Scenarios. In:Proceedings of the 9th International Conference on Vehicle Technology and Intelligent Transport Systems (VEHITS), Prague (Czech Republic), 2023. | |
 |
Michael Mundt and Harald Baier. Short contribution to Springer Encyclopedia about Data Exfiltration. Encyclopedia of Cryptography, Security and Privacy. April 2023 | |
 |
Michael Mundt and Harald Baier. Abbildung und Simulation cyber-physischer Bedrohungen für kritische Infrastrukturen. In: Proceedings of the 30. DFN-Konferenz „Sicherheit in vernetzten Systemen“, Hamburg, February 2023. | |
 |
Leon Twenning, Harald Baier and Thomas Göbel. Using Perceptual Hashing for Targeted Content Scanning. In: Proceedings of the 19th Annual IFIP WG 11.9 International Conference on Digital Forensics, hybrid (Arlington, USA), January 2023. |
2022
 |
Michael Mundt and Harald Baier. Cyber Crime Undermines Data Privacy Efforts–On the Balance Between Data Privacy and Security.In:International Conference on Digital Forensics and Cyber Crime. Cham: Springer Nature Switzerland, 2022. |
|
|
Samantha Klier and Harald Baier. Towards Efficient On-Site CSAM Triage by Clustering Images from a Source Point of View.In:International Conference on Digital Forensics and Cyber Crime. Cham: Springer Nature Switzerland, 2022. |
|
 |
Michael Mundt and Harald Baier. Threat-based Simulation of Data Exfiltration Towards Mitigating Multiple Ransomware Extortions. ACM Digital Library - Forum Digital Threats: Research and Practice, October 2022 | |
 |
Patrik Gonçalves, Klara Dolos, Michelle Stebner, Andreas Attenberger and Harald Baier.Revisiting the dataset Gap Problem - On Availability, Assessment, and Perspective of Mobile Forensic Corpora.
In: Proceedings of the 2nd Annual DFRWS APAC Conference, hybrid (Adelaide, Australia), September 2022. |
|
 |
Michael Mundt and Harald Baier. Mapping cyber-physical Threats for Critical Infrastructures. In: Proceedings of the 17th International Conference on Critical Information Infrastructures Security, Munich, September 2022 | |
| |
Thomas Göbel, Frieder Uhlig, Harald Baier and Frank Breitinger. FRASHER - A framework for automated evaluation of similarity hashing. In: Proceedings of the 22nd Annual DFRWS USA Conference, Fully Virtual, July 2022. | |
 |
Thomas Göbel, Stephan Maltan, Jan Türr, Harald Baier and Florian Mann. ForTrace - A holistic forensic data set synthesis framework. In: Proceedings of the 9th Annual DFRWS Europe Conference, Oxford (UK), March 2022. | |
 |
Martin Lukner, Thomas Göbel and Harald Baier. Realistic and Configurable Synthesis of Malware Traces in Windows Systems. In: Proceedings of the 18th Annual IFIP WG 11.9 International Conference on Digital Forensics, Fully Virtual, January 2022. | |
 |
Patrik Gonçalves, Andreas Attenberger and Harald Baier. Smartphone Data Distributions and Requirements for Realistic Mobile Forensic Corpora. In: Proceedings of the 18th Annual IFIP WG 11.9 International Conference on Digital Forensics, Fully Virtual, January 2022. | |
 |
Michael Mundt. Analyse aktueller Gefahren mittels des MITRE ATT&CK Frameworks. In: Polizei-Informatik 2022. Tagungsband, Rediroma Verlag, ISBN 978-3-98527-670-7, September 2022. |
2021
 |
Thomas Göbel, Frieder Uhlig and Harald Baier. Find my IoT Device -- An Efficient and Effective Approximate Matching Algorithm to Identify IoT Traffic Flows. In: Proceedings of the 12th EAI International Conference on Digital Forensics & Cyber Crime (ICDF2C), Singapore (Singapore), December 2021. | |
|
Michael Mundt, Harald Baier. Towards Mitigation of Data Exfiltration Techniques using the MITRE ATT&CK Framework. In: Proceedings of the 12th EAI International Conference on Digital Forensics & Cyber Crime (ICDF2C), Singapore (Singapore), December 2021. | |
 |
Thomas Göbel, Frieder Uhlig and Harald Baier.Evaluation of Network Traffic Analysis Using Approximate Matching Algorithms. In: Proceedings of the 17th Annual IFIP WG 11.9 International Conference on Digital Forensics, Fully Virtual, February 2021. |
2020
 |
Thomas Göbel, Thomas Schäfer, Julien Hachenberger, Jan Türr and Harald Baier. A Novel Approach for Generating Synthetic Datasets for Digital Forensics. In: Proceedings of the 16th Annual IFIP WG 11.9 International Conference on Digital Forensics, New Delhi (India), January 2020. |
2019
 |
Thomas Göbel, Jan Türr and Harald Baier. Revisiting Data Hiding Techniques for Apple File System. In: Proceedings of the 12th International Workshop on Digital Forensics (WSDF), in conjunction with ARES 2019, Canterbury (UK), August 2019. |
2018
 |
Thomas Göbel and Harald Baier. fishy - A Framework for Implementing Filesystem-Based Data Hiding Techniques. In: Proceedings of the 10th EAI International Conference on Digital Forensics & Cyber Crime (ICDF2C), New Orleans (United States), September 2018. | |
 |
Adrian V. Kailus, Christian Hecht, Thomas Göbel and Lorenz Liebler.fishy -- Ein Framework zur Umsetzung von Verstecktechniken in Dateisystemen. In: Proceedings of the D-A-CH Security, Gelsenkirchen (Germany), September 2018. | |
 |
Thomas Göbel and Harald Baier.Anti-forensics in ext4: On secrecy and usability of timestamp-based data hiding. In: Proceedings of the 5th Digital Forensic Research Workshop EU (DFRWS EU 2018), Florence (Italy), March 2018. | |
 |
Thomas Göbel and Harald Baier.Anti-Forensic Capacity and Detection Rating of Hidden Data in the Ext4 Filesystem. In: Proceedings of the 14th Annual IFIP WG 11.9 International Conference on Digital Forensics, New Delhi (India), January 2018. |