Dominik R. George

TU/e, MF 6.060

De Groene Loper 5

5612 AZ Eindhoven

My research focuses on integrating Privacy Enhancing Technologies into the IoT Ecosystem. Depending on the scenario and problem we use privacy enhancing techniques to design schemes/protocols. For my current research we mostly utilize the UAV Domain (see publications page). As a byproduct of my research we can identify the trade-off between privacy and energy consumption. In addition, we use ProVerif to symbolically verify the correctness of our designed protocols against the Dolev-Yao attacker model.

My work is currently supervised by Dr. Savio Sciancalepore at the Security Group of the Department of Mathematics and Computer Science at TU/e.

selected publications

2025

IEEE IoTJ

ePPTM - Enhanced Privacy-Preserving Trajectory Matching on Autonomous Vehicles

Dominik Roy George, and Savio Sciancalepore

IEEE Internet Things J., 2025

PDF

2023

ACSAC
Remote Attestation with Constrained Disclosure

Michael Eckel, Dominik Roy George, Björn Grohmann, and 1 more author

In Annual Computer Security Applications Conference, ACSAC 2023, Austin, TX, USA, December 4-8, 2023, 2023

Abs Bib PDF Code

Trusted Platform Modules (TPMs) are used for remote attestation to ensure the authenticity and integrity of software running on a computer system. However, measuring software executed as containers or virtual machines can be challenging as it is measured concurrently, resulting in a jumbled measurement log that is difficult to disentangle. Moreover, disclosing the entire measurement log in traditional binary remote attestation raises privacy and intellectual property concerns. To address these issues, we propose a remote attestation method with constrained disclosure, allowing for selective disclosure of entries in the measurement log using a non-interactive zero-knowledge (NIZK) proof with Schnorr signatures. Our approach is evaluated for security and privacy and proven to be correct, sound, and satisfies the properties of a NIZK proof. Formal verification of our solution with ProVerif also supports our claims. Furthermore, the performance evaluation of our proof-of-concept implementation shows that our contribution is feasible, and the overhead introduced is negligible.
@inproceedings{DBLP:conf/acsac/EckelGGK23, author = {Eckel, Michael and George, Dominik Roy and Grohmann, Bj{\"{o}}rn and Krau{\ss}, Christoph}, title = {Remote Attestation with Constrained Disclosure}, booktitle = {Annual Computer Security Applications Conference, {ACSAC} 2023, Austin, TX, USA, December 4-8, 2023}, pages = {718--731}, publisher = {{ACM}}, year = {2023}, url = {https://doi.org/10.1145/3627106.3627118}, doi = {10.1145/3627106.3627118}, timestamp = {Mon, 04 Dec 2023 17:30:52 +0100}, biburl = {https://dblp.org/rec/conf/acsac/EckelGGK23.bib}, bibsource = {dblp computer science bibliography, https://dblp.org}, }
SACMAT
Privacy-Preserving Multi-Party Access Control for Third-Party UAV Services

Dominik Roy George, Savio Sciancalepore, and Nicola Zannone

In Proceedings of the 28th ACM Symposium on Access Control Models and Technologies, SACMAT 2023, Trento, Italy, June 7-9, 2023, 2023

Abs Bib PDF Code

Third-Party Unmanned Aerial Vehicle (UAV) Services, a.k.a. Drone-as-a-Service (DaaS), are an increasingly adopted business model, which enables possibly unskilled users, with no background knowledge, to operate drones and run automated drone-based tasks. Although these services provide significant advantages, the resources provided by drones are typically owned by multiple parties. Thus, Third-Party UAV services require adopting multi-party access control solutions. In this context, the leakage of the access control policies specified by the data owners might disclose confidential information and, thus, they should be protected as well. In this work, we propose a privacy-preserving multi-party access control solution tailored to the application scenarios of Third-Party UAV Services. Our solution advances an existing privacy-preserving multi-party access control framework based on Secure Function Evaluation to fit the distributed and heterogeneous nature of drone deployments. Through an extensive experimental evaluation, we demonstrate our solution can perform private policy evaluation on constrained devices in a reasonable time while requiring limited communication, memory, and energy overhead.
@inproceedings{DBLP:conf/sacmat/GeorgeSZ23, author = {George, Dominik Roy and Sciancalepore, Savio and Zannone, Nicola}, editor = {Ranise, Silvio and Carbone, Roberto and Takabi, Daniel}, title = {Privacy-Preserving Multi-Party Access Control for Third-Party {UAV} Services}, booktitle = {Proceedings of the 28th {ACM} Symposium on Access Control Models and Technologies, {SACMAT} 2023, Trento, Italy, June 7-9, 2023}, pages = {19--30}, publisher = {{ACM}}, year = {2023}, url = {https://doi.org/10.1145/3589608.3593837}, doi = {10.1145/3589608.3593837}, timestamp = {Fri, 02 Jun 2023 01:00:00 +0200}, biburl = {https://dblp.org/rec/conf/sacmat/GeorgeSZ23.bib}, bibsource = {dblp computer science bibliography, https://dblp.org}, }

2022

IEEE CNS
PRM - Private Interference Discovery for IEEE 802.15 4 Networks

Dominik Roy George, and Savio Sciancalepore

In 10th IEEE Conference on Communications and Network Security, CNS 2022, Austin, TX, USA, October 3-5, 2022, 2022

Abs Bib PDF Code

Due to the mobile and pervasive nature of IoT networks, even more frequently, multiple IoT networks managed by different network administrators share the same spectrum and operate in the same area, leading to packet losses and degradation of the Quality of Service (QoS). Assuming the use of the widespread IEEE 802.15.4 communication technology, the most straightforward solution would be to allow the networks to share the local Radio Scheduling Table (RST) to optimize channel access. However, exchanging the RST can leak several key information, such as the topology of the network, the number of devices, and the channel access patterns. To address such problems, we present PRM, the first scheme for discovering in advance potential interferences among IEEE 802.15.4 networks, without exposing the whole RST to untrusted parties. Our solution adapts a protocol for Private Set Intersection, while combining it with an innovative iterative set division algorithm, making the whole solution feasible on constrained devices of the IoT domain. Our experimental performance assessment, carried out on heterogeneous devices, shows that PRM can discover colliding channel assignments in less than 1 sec. on more capable embedded devices (e.g., the Raspberry PI), while also being feasible for more constrained platforms (e.g., the ESPCopter), depending on the amount of used radio resources.
@inproceedings{DBLP:conf/cns/GeorgeS22, author = {George, Dominik Roy and Sciancalepore, Savio}, title = {{PRM} - Private Interference Discovery for {IEEE} 802.15 4 Networks}, booktitle = {10th {IEEE} Conference on Communications and Network Security, {CNS} 2022, Austin, TX, USA, October 3-5, 2022}, pages = {136--144}, publisher = {{IEEE}}, year = {2022}, url = {https://doi.org/10.1109/CNS56114.2022.9947236}, doi = {10.1109/CNS56114.2022.9947236}, timestamp = {Fri, 25 Nov 2022 09:04:32 +0100}, biburl = {https://dblp.org/rec/conf/cns/GeorgeS22.bib}, bibsource = {dblp computer science bibliography, https://dblp.org}, }