Dr. Raphael Spreitzer

Security evaluations * Lead Evaluator for Common Criteria, BSI (Germany) * Lead Evaluator for SESIP, TrustCB * Evaluator for Common Criteria, NSCIB (Netherlands) Group management * Team leadership * Development of personnel (training and qualification) ISO 17025 lab activities * Quality Manager

Security evaluations * Common Criteria (ISO 15408), BSI * Security assessment campaigns for medical devices (FDA, MDR/MDCG) Security trainings * Secure development lifecycle (SDLC) * Cybersecurity requirements for medical devices (MDR / MDCG, FDA) * Threat modelling (MS STRIDE) * Risk assessment (AAMI TIR 57) Supported ramp-up activities for setting up a Common Criteria (ISO 15408) evaluation lab (ISO 17025) * Quality manager for ISO 17025

Research on software-based side-channel attacks and privacy-preserving technologies: * Microarchitectural attacks (cache-timing attacks) * Software-based side-channel attacks exploiting public resources on Android * Group signatures and revocation mechanisms Results: * More than 20 scientific papers (3 x USENIX Security, 3 x ACM WiSec, 2 x AsiaCCS) * More than 10 conference talks Teaching: * 2015 - 2018: Embedded security * 2013 - 2018: Student projects Research grant proposal writing

SmartCard Development, Elliptic Curve Cryptography, J2ME Midlets

Side-channel attacks, mobile security, cache attacks, privacy-enhancing technologies

IT-Security