Christian van Sloun, M.Sc.

Christian van Sloun, M.Sc.

Researcher

Ahornstraße 55, building E3 52074 Aachen Germany
9017
+49 241 80-21414
christian.van.sloun@comsys.rwth-aachen.de

Short CV

Research

As part of the Security and Privacy research group, my research revolves around security-related topics; specifically, I research how Intrusion Detection Systems (IDSs), particularly those that use anomaly detection, can be used to effectively defend modern systems against attacks. This research includes the development of modern (and efficient) defenses against ransomware and the integration of host- and network data to improve detection capabilities.

Background

Since April 2021, I am a researcher and Ph.D. student at the Chair of Communication and Distributed Systems and a part of the Security and Privacy research group. In 2015, I began my studies at RWTH Aachen University, received my B.Sc. degree in 2018, and graduated with an M.Sc. in Computer Science in 2020.

Teaching

  • SS2021: Lecture: “Data Communication and Security”
  • WS2021/22: (A)IT Seminar, Bachelor Lab: “Entwicklung eines Transprotokolls”
  • SS2022: (A)IT Seminar, Lecture: “Operating Systems and System Software”
  • WS2022/23: (A)IT Seminar, Lecture: “Advanced Internet Technology”, Bachelor Lab: “Practical Internet eXperience”
  • SS2023: (A)IT Seminar, Master Lab: “Practical Internet eXperience”
  • WS2023/24: (A)IT Seminar, Bachelor Lab: “Practical Internet eXperience”
  • SS2024: Lecture: “Operating Systems and System Software”

Supervision of Theses
I am supervising Bachelor’s and Master’s Theses in the area of host-based defense mechanisms, particularly host-based IDSs. If you are interested in these topics, look at my publications to identify a specific topic that suits your interests best and email me.

Publications

Detecting Ransomware Despite I/O Overhead: A Practical Multi-Staged Approach. Proceedings of the 22nd Annual Network and Distributed System Security Symposium (NDSS ‘25), Feb 24 - Feb 28, 2025, San Diego, CA, USA. February 2025.
Poster: Vulcan - Repurposing Accessibility Features for Behavior-based Intrusion Detection Dataset Generation. Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS ‘23), Nov 26 - Nov 30, 2023, Copenhagen, Denmark. November 2023.
Can Industrial Intrusion Detection Be SIMPLE?. Proceedings of the 27th European Symposium on Research in Computer Security (ESORICS ‘22), vol. 978-3-031-17143-7, Sep 26 - Sep 30, 2022, Copenhagen, Denmark. September 2022.

Advised Theses

Please note that ongoing theses are only visible from within the RWTH network. If you are not affiliated with RWTH Aachen University and you are interested in our topics, please contact us.

Detection of Ransomware that uses I/O based Evasion Strategies
Bachelor's Thesis, RWTH Aachen University, March 2025
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
Proximity Detection with Bluetooth
Bachelor's Thesis, RWTH Aachen University, March 2025
Examiners: Klaus Wehrle, Simon Völker (i10)
Aggregating I/O-Behavior of Subprocesses to Detect Mimicry Ransomware
Bachelor's Thesis, RWTH Aachen University, August 2024
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
Integrating Zeek Network Data into Host-Based Intrusion Detection Systems
Master's Thesis, RWTH Aachen University, June 2024
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
FOLKS Award for the best Master's thesis in 2024
Conjunction vs. Correlation: A Systematic Approach to Combining Host- and Network Intrusion Detection
Bachelor's Thesis, RWTH Aachen University, May 2024
Examiners: Klaus Wehrle, Wil van der Aalst (PADS)
Detection of Cyberattacks in CNC-Manufacturing Utilizing Side-Channel Sensors, Sliding Window-Based Data Processing and Supervised Learning
Bachelor's Thesis, RWTH Aachen University, November 2023
Advisors: Christian van Sloun, Lars Leyendecker (IPT)
Examiners: Klaus Wehrle, Dennis Grunert (IPT)
Improving Usability, Privacy and Maintainability of Self-Checkout-Terminals
Bachelor's Thesis, RWTH Aachen University, October 2023
Examiners: Klaus Wehrle, Stefan Decker (i5)
Multi-Staged Real-Time Intrusion Detection using eBPF
Bachelor's Thesis, RWTH Aachen University, September 2023
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
Modeling User Behavior for Intrusion Detection Using the Accessibility Layer
Bachelor's Thesis, RWTH Aachen University, September 2023
Examiners: Klaus Wehrle, Jan Borchers (i10)
Analyzing Low-Level Characteristics of Linux Ransomware
Master's Thesis, RWTH Aachen University, March 2023
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
Delaying Ransomware Attacks with Concepts from Cryptographic Puzzles
Bachelor's Thesis, RWTH Aachen University, October 2022
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)
Utilizing the Accessibility Layer to Generate Benign Activity for HIDS
Bachelor's Thesis, RWTH Aachen University, April 2022
Examiners: Klaus Wehrle, Jürgen Giesl (LuFG i2)
TLS Meets TrustZone: Evaluating Hardware-Secured Communication for the Industrial IoT
Master's Thesis, RWTH Aachen University, March 2022
Examiners: Klaus Wehrle, Ulrike Meyer (IT-Sec)