André N. Klingsheim

I think my worklife is pretty well documented on the rest of this page. Check out my hobby projects: MobileDevs.com and UAProf.com.

I can be contacted at klingsen (at) gmail (dot) com

View André N. Klingsheim's profile on LinkedIn Follow klingsen on Twitter

I also have a blog on various Microsoft stuff:

The .Net noob

↑ Grab this Headline Animator

Quick links: [Talks] [Short Bio] [Research]


Talks

 2. May. 2011:Online banking Trojans - recent developments and countermeasuresNorwegian Computer Society, ISACA, ISF member meeting
29. Apr. 2008:Architectural Risk AnalysisRoots '08
31. Jan. 2008:Identity Theft: Much too Easy? A study of Online Systems in NorwayFC '08
19. Nov. 2007:Your Privacy on the InternetNorsk kryptoseminar
16. Oct. 2007:Kampen mot IT-skurkeneInformation Week, UiB
12. Oct. 2007:Identity Theft: Much too Easy? A study of Online Systems in NorwayNordSec '07
19. Nov. 2007:NBNs, the Internet, and your PrivacyICT Research School, UiB
18. May 2006:J2ME, JABWT, and SATSAJavaBin
20. Apr. 2006:Vulnerabilities in E-Governments2nd International Conference on Global E-Security (ICGeS-06)

Short Bio

2009 –  ∞     :IT Security Specialist, Skandiabanken Norway
2008 – 2009:Senior Security Analyst, General Manager, NoWires Group AS
2005 – 2008:PhD student, working with applied information security, NoWires Research Group
2004 – 2005:System Creator, VizRT
2002 – 2004:Master of Science, University of Bergen
2001 – 2002:Customer support, NextGenTel
1999 – 2002:Bachelor degree, Bergen University College

Research

The technical report on identity theft got a lot of attention in the press, see “ID theft” here.

PhD thesis

My PhD thesis is available for download (it includes all papers below).

Published papers

K. J. Hole, A. N. Klingsheim, L.-H. Netland, Y. Espelid, T. Tjøstheim, and V. Moen, “Risk Assessment of a National Security Infrastructure,” IEEE Security & Privacy, January/February 2009. (See Copyright notice below.)

Y. Espelid, L.-H. Netland, A. N. Klingsheim, and K. J. Hole, “Robbing Banks with Their Own Software—an Exploit against Norwegian Online Banks,” in Proc. IFIP International Information Security Conference (SEC 2008), September, 2008.

K. J. Hole, L.-H. Netland, Y. Espelid, A. N. Klingsheim, H. Helleseth, and J. B. Henriksen, “Open Wireless Networks on University Campuses,” IEEE Security & Privacy, July/August 2008. (See Copyright notice below.)

K. J. Hole, T. Tjøstheim, V. Moen, L.-H. Netland, Y. Espelid, and A. N. Klingsheim, “Next Generation Internet Banking in Norway,” Technical Report 371, Department of Informatics, University of Bergen, February 2008.

A. N. Klingsheim and K. J. Hole, “Personal Information Leakage: A study of Online Systems in Norway,” Technical Report 370, Department of Informatics, University of Bergen, February 2008.

Y. Espelid, L.-H. Netland, A. N. Klingsheim, and K. J. Hole, “A Proof of Concept Attack against Norwegian Internet Banking Systems,” in Proc. Financial Cryptography and Data Security, January, 2008. © IFCA

A. N. Klingsheim and K. J. Hole, “Identity Theft: Much too Easy? A study of Online Systems in Norway,” in Proc. Financial Cryptography and Data Security, January, 2008. © IFCA

K. J. Hole, V. Moen, A. N. Klingsheim, and K. M. Tande, “Lessons from the Norwegian ATM System,” IEEE Security & Privacy, November/December 2007. (See Copyright notice below.)

A. N. Klingsheim, V. Moen, and K. J. Hole, “Challenges in Securing Networked J2ME Applications,” IEEE Computer, February 2007. (See Copyright notice below.)

V. Moen, A. N. Klingsheim, K. I. F. Simonsen, and K. J. Hole, “Vulnerabilities in E-Governments,” in Proc. 2nd International Conference on Global E-Security (ICGeS-06), London, England, April 20-22, 2006. The paper is also printed in International Journal of Electronic Security and Digital Forensics, Vol. 1, No. 1, 2007.

My Master's thesis was titled “J2ME Bluetooth programming,” more information at: http://www.klings.org/JavaBluetooth/

Copyright notice

© 2007, 2008, 2009 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.


Valid XHTML 1.0 Strict