Robert Luh

Security researcher, teacher, game designer and novelist. Robert heads the IT Security bachelor’s programme at USTP in St. Pölten, teaches digital forensics and malware analysis, models how attackers and defenders act, and writes thrillers and science fiction.

What I do

Education

Digital forensics, malware analysis and computer-science fundamentals at USTP since 2014, and IT forensics for cybercrime investigators of the Landespolizei Schleswig-Holstein since 2021.

Courses and training

Research

From malware behaviour and targeted attacks to game-theoretic models of attack and defence. More than 35 papers, the Josef Ressel Center TARGET and the FWF project INODES.

Topics, projects and papers

Gamification

PenQuest is a two-player digital board game: one side attacks a simulated network, the other defends it. Every card is a real technique from MITRE ATT&CK, D3FEND or NIST.

How the game works

Novels

Searing Star, a science-fiction novel about the fear of the unknown; Collision Domain, a hacking thriller; and Verity, a German-language Krimi.

The books

Currently

  • PenQuest 2.0

    A reworked interface and the Scenario Creator are in development. Alpha testers welcome.

  • Police IT forensics

    The IT forensics module of the RIISC cybercrime programme for the Landespolizei Schleswig-Holstein. About the programme

  • Computers & Security

    “Gamifying information security: Adversarial risk exploration for IT/OT infrastructures”. Read the paper