Fraunhofer Institute for Open Communication Systems
Fraunhofer Institute for Open Communication Systems
Platine in Form eines Vorhängeschlosses für türkisem Hintergrund mit graphischen Elementen wie Wellenlinen aus Punkten und hellblauen Kreisen
© Fraunhofer FOKUS

© Fraunhofer FOKUS

IT security as a strategic success factor

❯❯❯

Vulnerabilities arise not only from technology but also from unclear processes and a lack of awareness. Companies in every industry must effectively protect their systems, data, and employees to remain operational. Security strategies must therefore be conceived holistically: Fraunhofer FOKUS develops technical and organizational solutions for the entire lifecycle of IT systems.

The following technologies and areas of expertise constitute key building blocks used across our application domains throughout the design, development, integration, and operation phases.

Get in contact

Technologies and Expertise for Research-Based Consulting and Development

Defending Against Cyber Threats

Modern security methods detect vulnerabilities and attack patterns at an early stage. Data-driven analysis enables the creation of robust protection mechanisms for IT systems and critical infrastructure.

  • Security Architecture & Vulnerability Analysis
  • Attack Detection Through Data Analysis & Machine Learning
  • Security-Oriented Fuzzing for Exploit Prevention
  • Security-Related Patches
  • “Security by Design” 

Data Protection & Digital Identities

Secure data processing follows clear rules and protects sensitive information. Robust architectures and cryptographic methods ensure data protection and trustworthy identity solutions.

  • Implementation of GDPR & NIS2 Requirements
  • Development of Robust IT Architectures
  • Implementation of ISMS in accordance with ISO 27001 and BSI Basic Protection
  • Cryptographic methods and multi-party computation for pseudonymized data exchange

Standards & IT Certification

Certification processes make technical quality measurable and verifiable. They enhance safety and compliance.

  • Contributing to standards such as TTCN-3 and the UML Test Profile
  • Security assessment and quality assurance of AI systems
  • Preparation for regulations such as the European AI Act
  • Testing processes according to Common Criteria (ISO/IEC 15408)

Network Security

Secure communication networks protect digital infrastructures from attacks. Encrypted connections and robust defense mechanisms enhance the stability and resilience of network & platform architectures.

  • 3GPP Authentication & Authorization
  • End-to-End Security (IPsec, TLS)
  • DoS/DDoS Detection
  • Securing Management Planes
  • Resilient, self-sufficient network infrastructures
  • Security of Distributed Communication Systems

Security for AI-Based Systems / AI Security Engineering

AI systems require robust models and continuous testing to function securely. Specialized tests and robustness analyses increase the trustworthiness and reliability of AI-powered applications.

  • AI-powered attack detection & SOC support
  • Testing & Security Validation for AI Systems
  • Continuous Auditing & Certification of AI Systems (ETSI)
  • Data Quality Assessment, Robustness Analyses
  • Securing LLM-Based Systems

Security Testing & Attack Simulation

Systematic tests identify vulnerabilities and evaluate protective measures under realistic conditions. Automated, risk-based approaches strengthen system resilience.

  • Risk-Based Security Testing & Attack Simulation
  • Behavioral Fuzzing & Automated Vulnerability Analysis
  • Security Validation & Patch Validation
  • Red Team / Blue Team-Style Testing Methods

Security Operations & Monitoring

Continuous monitoring detects attacks and anomalies early on. Automated processes ensure rapid responses and stability.

  • Intrusion Detection & Monitoring (IDS/IPS)
  • Security Analytics & Anomaly Detection
  • SOC-oriented analysis and support procedures
  • Event Correlation and Attack Analysis

Identity & Access Technologien

Secure identity and access mechanisms form the foundation for controlled interactions in distributed systems. Standardized protocols enable interoperable and scalable authentication.

  • Identity & Access Management (OIDC, OAuth2, SAML)
  • Federated Identity and Access Mechanisms
  • Secure Authentication and Authorization Procedures
  • Integration into distributed and cross-platform systems

Privacy Engineering & Secure Data Processing

Technical methods for safeguarding data protection and confidentiality enable the secure processing of sensitive data in distributed and collaborative systems.

  • Pseudonymization & privacy-preserving technologies
  • Secure data processing in distributed environments
  • Privacy by Design at the System and Architecture Levels
  • Secure Data Exchange Methods

Advanced Cryptography & Post-Quantum Security

Modern cryptographic methods secure data even under future threat scenarios and enable new trust models for distributed systems.

  • Post-Quantum Cryptography
  • Homomorphic Encryption & Secure Computation
  • Cryptographic Protocols for Distributed Systems
  • Development of Robust Encryption Methods

Our Experts

Sebastian Breu

Contact Press / Media

Sebastian Breu

Team Lead

Expert in Cybersecurity, Information Security and Data Protection

Phone +49 30 3463-7618

Nadja Menz

Contact Press / Media

Dipl.-Inf. Nadja Menz

Head of Specialised Processes & Secure IT Infrastructures

Expert in Certification, Awareness Training for IT Security

Phone +49 30 3463-7320

Steffen Lüdtke

Contact Press / Media

Steffen Lüdtke

Scientist

Expert in IT Baseline Protection, Penetration Testing, and BSI Certification

Martin Schneider

Contact Press / Media

Dipl.-Inform. Martin Schneider

Head of Security Testing & Lecturer at the Fraunhofer Academy

Expert in IT Security Tests (Fuzzing), Regulatory Compliance and Certification, AI Risk Management

Phone +49 30 3463-7383

Background Knowledge

Expand all Close all