---
_id: '48012'
abstract:
- lang: eng
  text: '3D printing is a well-established technology with rapidly increasing usage
    scenarios both in the industry and consumer context. The growing popularity of
    3D printing has also attracted security researchers, who have analyzed possibilities
    for weakening 3D models or stealing intellectual property from 3D models. We extend
    these important aspects and provide the first comprehensive security analysis
    of 3D printing data formats. We performed our systematic study on the example
    of the 3D Manufacturing Format (3MF), which offers a large variety of features
    that could lead to critical attacks. Based on 3MF’s features, we systematized
    three attack goals: Data Exfiltration (dex), Denial of Service, and UI Spoofing
    (uis). We achieve these goals by exploiting the complexity of 3MF, which is based
    on the Open Packaging Conventions (OPC) format and uses XML to define 3D models.
    In total, our analysis led to 352 tests. To create and run these tests automatically,
    we implemented an open-source tool named 3MF Analyzer (tool), which helped us
    evaluate 20 applications.'
author:
- first_name: Jost
  full_name: Rossel, Jost
  id: '58331'
  last_name: Rossel
  orcid: 0000-0002-3182-4059
- first_name: Vladislav
  full_name: Mladenov, Vladislav
  last_name: Mladenov
- first_name: Juraj
  full_name: Somorovsky, Juraj
  id: '83504'
  last_name: Somorovsky
  orcid: 0000-0002-3593-7720
citation:
  ama: 'Rossel J, Mladenov V, Somorovsky J. Security Analysis of the 3MF Data Format.
    In: <i>Proceedings of the 26th International Symposium on Research in Attacks,
    Intrusions and Defenses</i>. ACM; 2023. doi:<a href="https://doi.org/10.1145/3607199.3607216">10.1145/3607199.3607216</a>'
  apa: Rossel, J., Mladenov, V., &#38; Somorovsky, J. (2023). Security Analysis of
    the 3MF Data Format. <i>Proceedings of the 26th International Symposium on Research
    in Attacks, Intrusions and Defenses</i>. 26th International Symposium on Research
    in Attacks, Intrusions and Defenses, Hongkong. <a href="https://doi.org/10.1145/3607199.3607216">https://doi.org/10.1145/3607199.3607216</a>
  bibtex: '@inproceedings{Rossel_Mladenov_Somorovsky_2023, title={Security Analysis
    of the 3MF Data Format}, DOI={<a href="https://doi.org/10.1145/3607199.3607216">10.1145/3607199.3607216</a>},
    booktitle={Proceedings of the 26th International Symposium on Research in Attacks,
    Intrusions and Defenses}, publisher={ACM}, author={Rossel, Jost and Mladenov,
    Vladislav and Somorovsky, Juraj}, year={2023} }'
  chicago: Rossel, Jost, Vladislav Mladenov, and Juraj Somorovsky. “Security Analysis
    of the 3MF Data Format.” In <i>Proceedings of the 26th International Symposium
    on Research in Attacks, Intrusions and Defenses</i>. ACM, 2023. <a href="https://doi.org/10.1145/3607199.3607216">https://doi.org/10.1145/3607199.3607216</a>.
  ieee: 'J. Rossel, V. Mladenov, and J. Somorovsky, “Security Analysis of the 3MF
    Data Format,” presented at the 26th International Symposium on Research in Attacks,
    Intrusions and Defenses, Hongkong, 2023, doi: <a href="https://doi.org/10.1145/3607199.3607216">10.1145/3607199.3607216</a>.'
  mla: Rossel, Jost, et al. “Security Analysis of the 3MF Data Format.” <i>Proceedings
    of the 26th International Symposium on Research in Attacks, Intrusions and Defenses</i>,
    ACM, 2023, doi:<a href="https://doi.org/10.1145/3607199.3607216">10.1145/3607199.3607216</a>.
  short: 'J. Rossel, V. Mladenov, J. Somorovsky, in: Proceedings of the 26th International
    Symposium on Research in Attacks, Intrusions and Defenses, ACM, 2023.'
conference:
  end_date: 2023-10-18
  location: Hongkong
  name: 26th International Symposium on Research in Attacks, Intrusions and Defenses
  start_date: 2023-10-16
date_created: 2023-10-11T13:42:09Z
date_updated: 2025-07-16T11:06:49Z
ddc:
- '000'
department:
- _id: '632'
doi: 10.1145/3607199.3607216
file:
- access_level: open_access
  content_type: application/pdf
  creator: jrossel
  date_created: 2023-10-16T03:48:08Z
  date_updated: 2024-09-05T11:14:40Z
  file_id: '48065'
  file_name: Security_Analysis_of_the_3mf_Data_Format.pdf
  file_size: 1054999
  relation: main_file
file_date_updated: 2024-09-05T11:14:40Z
has_accepted_license: '1'
keyword:
- Data Format Security
- 3D Manufacturing Format
- 3D Printing
- Additive Manufacturing
language:
- iso: eng
main_file_link:
- url: https://dl.acm.org/doi/abs/10.1145/3607199.3607216
oa: '1'
publication: Proceedings of the 26th International Symposium on Research in Attacks,
  Intrusions and Defenses
publication_status: published
publisher: ACM
quality_controlled: '1'
status: public
title: Security Analysis of the 3MF Data Format
type: conference
user_id: '58331'
year: '2023'
...