@article{DegenStormsLeeetal.2024, author = {Degen, Jacqueline and Storms, Mona and Lee, Benjamin and Jechow, Andreas and Stoeckl, Anna and Hoelker, Franz and Jakhar, Aryan and Walter, Thomas and Walter, Stefan and Mitesser, Oliver and Hovestadt, Thomas and Degen, Tobias}, title = {Shedding light with harmonic radar: Unveiling the hidden impacts of streetlights on moth flight behavior}, series = {Proceedings of the National Academy of Sciences of the United States of America}, volume = {121}, journal = {Proceedings of the National Academy of Sciences of the United States of America}, number = {42}, publisher = {National Academy of Sciences}, doi = {10.1073/pnas.2401215121}, year = {2024}, abstract = {One of the most dramatic changes occurring on our planet is the ever- increasing extensive use of artificial light at night, which drastically altered the environment to which nocturnal animals are adapted. Such light pollution has been identified as a driver in the dramatic insect decline of the past years. One nocturnal species group experiencing marked declines are moths, which play a key role in food webs and ecosystem services such as plant pollination. Moths can be easily monitored within the illuminated area of a streetlight, where they typically exhibit disoriented behavior. Yet, little is known about their behavior beyond the illuminated area. Harmonic radar tracking enabled us to close this knowledge gap. We found a significant change in flight behavior beyond the illuminated area of a streetlight. A detailed analysis of the recorded trajectories revealed a barrier effect of streetlights on lappet moths whenever the moon was not available as a natural celestial cue. Furthermore, streetlights increased the tortuosity of flights for both hawk moths and lappet moths. Surprisingly, we had to reject our fundamental hypothesis that most individuals would fly toward a streetlight. Instead, this was true for only 4\% of the tested individuals, indicating that the impact of light pollution might be more severe than assumed to date. Our results provide experimental evidence for the fragmentation of landscapes by streetlights and demonstrate that light pollution affects movement patterns of moths beyond what was previously assumed, potentially affecting their reproductive success and hampering a vital ecosystem service.}, language = {en} } @book{FurbachMichaeliSchmidetal.2024, author = {Furbach, Ulrich and Michaeli, Tilman and Schmid, Ute and Kitzelmann, Emanuel}, title = {K{\"u}nstliche Intelligenz f{\"u}r Lehrkr{\"a}fte: Eine fachliche Einf{\"u}hrung mit didaktischen Hinweisen}, publisher = {Springer}, isbn = {9783658442477}, doi = {10.1007/978-3-658-44248-4}, pages = {241}, year = {2024}, language = {de} } @book{GrunwaldSchwill2024, author = {Grunwald, Guido and Schwill, J{\"u}rgen}, title = {Workbook Marktforschung: Konzepte - Methoden - Umsetzung}, edition = {1}, publisher = {Sch{\"a}ffer-Poeschel}, address = {Stuttgart}, isbn = {9783791062495}, pages = {260}, year = {2024}, abstract = {Sowohl f{\"u}r die eigene Durchf{\"u}hrung von Marktforschungsstudien als auch f{\"u}r die Interpretation und Beurteilung von in Auftrag gegebenen Studien sind profunde Marktforschungskenntnisse unverzichtbar. Mit welcher Erhebungsmethode k{\"o}nnen Daten m{\"o}glichst unverzerrt gewonnen werden? Wie ist das Erhebungsdesign festzulegen, um einen hohen Datenr{\"u}cklauf zu erreichen? Wie k{\"o}nnen die Daten analysiert und interpretiert werden? Wie l{\"a}sst sich die Qualit{\"a}t der Studie und der Ergebnisse einsch{\"a}tzen? Wie k{\"o}nnen die Ergebnisse zielgruppengerecht pr{\"a}sentiert werden? Das Workbook Marktforschung bietet Praktiker:innen und Studierenden einen schnellen {\"U}berblick {\"u}ber die Methoden und Werkzeuge zur Konzeption, Durchf{\"u}hrung und Beurteilung von Marktforschungsstudien. Dabei werden die zentralen Methoden der qualitativen und quantitativen Forschung zur Erhebung und Analyse von Marktdaten abgedeckt. Die Tools werden in kompakt-strukturierter Form pr{\"a}sentiert und anhand von Beispielen erl{\"a}utert. Zu jedem Tool gibt es hilfreiche Tipps f{\"u}r die praktische Umsetzung.}, language = {de} } @unpublished{Brasche2024, author = {Brasche, Ulrich}, title = {Climate justice - dimensions and conflicts}, pages = {12}, year = {2024}, abstract = {Probably no-one will publicly admit that justice is not important to him. The allegation of injustice is used to describe moral positions and justify demands. However, there is no simple and unambiguous description of just positions or just actions. To overcome the man-made climate crisis, a fair distribution of benefits and burdens is called for. Some stakeholders also use the argument of justice to disguise their interests. The question to be clarified is: Who may cause how much damage to whom and who must make what efforts to compensate for the damage and prevent future damage? This text reports on attempts to establish an ethical foundation for climate justice and on international political activities that claim to achieve greater climate justice.}, language = {en} } @unpublished{HeinlPatapovasPilgermann2024, author = {Heinl, Patrizia and Patapovas, Andrius and Pilgermann, Michael}, title = {Towards AI-enabled Cyber Threat Assessment in the Health Sector}, doi = {10.48550/arXiv.2409.12765}, pages = {10}, year = {2024}, abstract = {Cyber attacks on the healthcare industry can have tremendous consequences and the attack surface expands continuously. In order to handle the steadily rising workload, an expanding amount of analog processes in healthcare institutions is digitized. Despite regulations becoming stricter, not all existing infrastructure is sufficiently protected against cyber attacks. With an increasing number of devices and digital processes, the system and network landscape becomes more complex and harder to manage and therefore also more difficult to protect. The aim of this project is to introduce an AI-enabled platform that collects security relevant information from the outside of a health organization, analyzes it, delivers a risk score and supports decision makers in healthcare institutions to optimize investment choices for security measures. Therefore, an architecture of such a platform is designed, relevant information sources are identified, and AI methods for relevant data collection, selection, and risk scoring are explored.}, language = {en} } @article{SteinWeberPilgermannetal.2024, author = {Stein, Stefan and Weber, Simon and Pilgermann, Michael and Schrader, Thomas and Sedlmayr, Martin}, title = {A Novel Approach to Medical Device IT Security Landscape Analysis Leveraging Manufacturer Disclosure Statements}, series = {IEEE Access}, journal = {IEEE Access}, number = {12}, publisher = {IEEE}, issn = {2169-3536}, doi = {10.1109/ACCESS.2024.3487824}, pages = {160506 -- 160515}, year = {2024}, abstract = {The growing number of cyberattacks targeting the healthcare sector increasingly threatens network-enabled medical devices that are vital for life-sustaining patient care. Security researchers and healthcare IT managers are pursuing effective methods to assess the IT security landscape of medical devices. Their goal is to develop a comprehensive understanding of the devices' IT security status. Recent studies have successfully uncovered structural deficiencies in medical device security. However, the limitations of their data sources, particularly in evaluating features like logging capabilities and third-party libraries, restrict the scope of their findings. In this study, we present the first systematic analysis of Manufacturer Disclosure Statement for Medical Device Security (MDS2) documents to evaluate their use in creating holistic statements regarding the IT security posture of medical devices. We examined a total of 147 MDS2 documents encompassing devices from 105 different classes. Our findings indicate that MDS2 documents, especially those from the second version (2013) onwards, are suitable for this purpose. We also discuss the shortcomings of the latest MDS2 version in meeting current IT security requirements. Based on the gaps identified, we developed several recommendations to improve MDS2 documents and enhance their effectiveness across the global healthcare sector. In the future, these documents could be used not only for comprehensive landscape analyses but also for organization-specific reports, providing healthcare managers with direct insights into the IT security status within their institutions.}, language = {en} } @article{WeberFegerPilgermann2024, author = {Weber, Simon B. and Feger, Marc and Pilgermann, Michael}, title = {Don't Stop Believin': A Unified Evaluation Approach for LLM Honeypots}, series = {IEEE Access}, journal = {IEEE Access}, number = {12}, publisher = {IEEE}, doi = {10.1109/ACCESS.2024.3472460}, pages = {144579 -- 144587}, year = {2024}, abstract = {The research area of honeypots is gaining new momentum, driven by advancements in large language models (LLMs). The chat-based applications of generative pretrained transformer (GPT) models seem ideal for the use as honeypot backends, especially in request-response protocols like Secure Shell (SSH). By leveraging LLMs, many challenges associated with traditional honeypots - such as high development costs, ease of exposure, and breakout risks - appear to be solved. While early studies have primarily focused on the potential of these models, our research investigates the current limitations of GPT-3.5 by analyzing three datasets of varying complexity. We conducted an expert annotation of over 1,400 request-response pairs, encompassing 230 different base commands. Our findings reveal that while GPT-3.5 struggles to maintain context, incorporating session context into response generation improves the quality of SSH responses. Additionally, we explored whether distinguishing between convincing and non-convincing responses is a metrics issue. We propose a paraphrase-mining approach to address this challenge, which achieved a macro F1 score of 77.85\% using cosine distance in our evaluation. This method has the potential to reduce annotation efforts, converge LLM-based honeypot performance evaluation, and facilitate comparisons between new and previous approaches in future research.}, language = {en} } @masterthesis{Schwabe2024, type = {Bachelor Thesis}, author = {Schwabe, Carina}, title = {Derivation of a technical representation of the MITRE ATT\&CK matrix and further analyses of the kill chain}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/10.25933/opus4-3215}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32152}, school = {Technische Hochschule Brandenburg}, pages = {46}, year = {2024}, abstract = {In modern societies, technology has a high value, as nearly all systems are controlled by information technology. This thesis aims to develop a technical representation of the MITRE ATT\&CK matrix to enable faster and more effective responses to cyber attacks. Based on a analysis of common cyber attack models, such as the Diamnond Model of Intrusion Analysis and the Lockheed Martin Cyber Kill Chain, the MITRE ATT\&CK matrix is used to develop an extended Kill Chain model. In this new model, MITRE tactics are grouped into five sequential attack phases, allowing for a clearer differentiation between actions taken during an attack. Aditionally, one ongoing group of MITRE tactics was identified. Building on this model, two graph-based representations are developed: a simple graph structure and a hierarchical, tree-shaped graph of MITRE tactics and techniques. The following discussion addresses the practical application of the new model, as well as potential further developments, such as integrating AI to analyse and predict existing and potential attack patterns.}, subject = {Computersicherheit}, language = {en} } @incollection{JohannsenKant2022, author = {Johannsen, Andreas and Kant, Daniel}, title = {IT-Governance-, Risiko- und Compliance-Management (IT-GRC) - Ein kompetenzorientierter Ansatz f{\"u}r KMU}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, editor = {Weber, Kristin and Reinheimer, Stefan}, publisher = {Springer Vieweg}, address = {Wiesbaden}, doi = {10.1007/978-3-658-34524-2_15}, publisher = {Technische Hochschule Brandenburg}, pages = {275 -- 294}, year = {2022}, abstract = {Kleine und mittlere Unternehmen aller Branchen versuchen sich nach wie vor angemessen mit den Herausforderungen der Globalisierung und der digitalen Transformation auseinanderzusetzen. Sie bilden in diesem Zusammenhang wachsende Kompetenz in der Produktionsautomatisierung (Industrie 4.0) und in digitalen Gesch{\"a}fts- und Verwaltungsprozessen aus. In Bezug auf IT-GRC bleiben KMU demgegen{\"u}ber faktisch oft noch unreif. Bestehende Ans{\"a}tze des IT-Governance-, Risiko- und Compliance-Managements sind noch zu wenig f{\"u}r KMU ausgestaltet. Das Kapitel stellt vor diesem Hintergrund einen zun{\"a}chst aus der Literatur abgeleiteten, und dann zusammen mit Feedback von 14 IT-GRC Experten aufgestellten, kompetenzorientierten Ansatz zur Wahrnehmung und Messung des IT-Governance-, Risiko- und Compliance-Managements in KMU vor. Der Ansatz enth{\"a}lt sechs relevante Kompetenzkategorien. Das Kapitel stellt dann zwei abgeleitete, webbasierte Tools zur Messung und Erfassung der Handlungsbedarfe und zur Unterst{\"u}tzung von Management-Maßnahmen vor. Der Ansatz sowie die prototypisch realisierten Tools unterst{\"u}tzen das IT-GRC-Management von KMU gem{\"a}ß ihrem Reifegrad und bedarfsorientiert. Bei der Unterst{\"u}tzung wird der Fokus darauf gelegt, KMU bei der Umsetzung der st{\"a}ndig wachsenden IT-GRC-Anforderungen schlanke und konkrete Methoden, Werkzeuge und Hilfsmittel an die Hand zu geben und die verschiedenen Stakeholder einzubinden.}, subject = {Klein- und Mittelbetrieb}, language = {de} } @masterthesis{Reinhardt2024, type = {Bachelor Thesis}, author = {Reinhardt, Janek Simon}, title = {Untersuchung der Realisierbarkeit von Heartbeat-Monitoring in Wazuh}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3220}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32204}, school = {Fachhochschule Brandenburg}, pages = {99}, year = {2024}, abstract = {Der Stellenwert der {\"U}berwachung der Sicherheit von IT-Systemen nimmt mit dem Voranschreiten der Digitalisierung immer weiter zu. Um diese Aufgabe zu vereinfachen werden Monitoring-Systeme eingesetzt. Diese sammeln und verarbeiten Daten, um den Status des IT-Systems zu ermitteln. Zu diesen Monitoring-Systemen z{\"a}hlt Wazuh, welches in der Lage ist, die "Integrit{\"a}t" und "Vertraulichkeit" unter Zuhilfenahme von Agenten zu {\"u}berwachen. Damit deckt Wazuh lediglich zwei der drei Schutzziele der IT-Sicherheit ab. Aus diesem Grund wird in dieser Bachelorarbeit untersucht, auf welche Art und Weise sich das SIEM und XDR System um Heartbeat Monitoring erweitern l{\"a}sst. Dadurch wird Wazuh bef{\"a}higt das dritte Schutzziel der IT-Sicherheit, die Verf{\"u}gbarkeit, zu {\"u}berwachen. Zu diesem Zweck wird eine Erweiterung der Wazuh-Implementierung um den Heartbeat Daemon des Elastic Stacks durchgef{\"u}hrt. Die Implementierung soll in der Lage sein, die Daten des Heartbeat Daemons zu empfangen, zu speichern, darzustellen und Benachrichtigungen auszul{\"o}sen, sobald sich der Status von {\"u}berwachten Systemkomponenten {\"a}ndert. Um die Funktionalit{\"a}t dieses Proof of Concepts zu {\"u}berpr{\"u}fen wird Heartbeat Monitoring ebenfalls in einem Vergleichssystem umgesetzt. Dabei handelt es sich um die native Umgebung des Daemons, den Elastic Stack. Die Funktionalit{\"a}t des Elastic Stacks konnte auf unterschiedlichen Wegen reproduziert werden. Dies erfolgt zum einen durch die direkte Verarbeitung der Heartbeat-Ausgabe durch Wazuh. Alternativ besteht die M{\"o}glichkeit, die Heartbeat-Daten direkt in Wazuhs Datenbank zu schreiben. In Abh{\"a}ngigkeit der Version des Heartbeat-Daemons ist die Verwendung von Logstash als Middleware erforderlich. Das Darstellen der Daten ist f{\"u}r beide Methoden in Wazuhs Weboberfl{\"a}che m{\"o}glich. Das Erweitern von Wazuh um Heartbeat Monitoring erm{\"o}glicht der Software die Abdeckung der relevantesten Schutzziele der IT-Sicherheit. Es wird gezeigt, welche Methoden zur Erweiterung der Open-Source-Software angewendet werden k{\"o}nnen.}, subject = {Computersicherheit}, language = {de} } @masterthesis{Ferneding2024, type = {Bachelor Thesis}, author = {Ferneding, Conrad}, title = {Analysis of Vulnerability CVE-2024-3094 in XZ Utils: Precedent Supply Chain Attack and Incident Analysis}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3227}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32278}, school = {Technische Hochschule Brandenburg}, year = {2024}, abstract = {This thesis falls within the domain of cybersecurity and computer science, specifically focusing on the vulnerability CVE-2024-3094, which has a CVSS score of 10, discovered in late March of 2024. It integrates methodologies from network security, reverse engineering, and OSINT to thoroughly investigate this vulnerability. An aspect of this thesis will be the exploration of the incident and its social engineering campaign that led to a threat actor becoming a maintainer of XZ Utils. Another part of this work will be the analysis of how the vulnerability in XZ Utils affects SSH and whether SSH authentication is compromised by this vulnerability. The objective is to conduct a Proof of Concept (PoC) to demonstrate the presence of the backdoor.}, subject = {Computersicherheit}, language = {en} } @inproceedings{GiskeBankwitzEngeletal.2024, author = {Giske, Karl and Bankwitz, Madeleine and Engel, Christian and Bendyk, Ricky and Hirsch, Soeren}, title = {Advanced Sensor Systems for Sustainable Building Modernization: A Technological Approach to Enhance CO2 Savings}, series = {EUROSENSORS XXXVI, Debrecen, Hungary, 2024}, booktitle = {EUROSENSORS XXXVI, Debrecen, Hungary, 2024}, isbn = {978-3-910600-03-4}, doi = {10.5162/EUROSENSORSXXXVI/OT10.184}, pages = {216 -- 217}, year = {2024}, abstract = {This work presents an advanced sensor system design developed to improve diagnostic methods for sustainable building renovation, with focus on the optimization of energy efficiency and the achievement of significant CO2 reduction in the construction sector. Introduction Considering the challenges posed by climate change, it is imperative to adopt innovative strategies in all sectors, with particular focus on construction and real estate, which are well-known contributors to energy consumption and CO2 emissions. Sustainable renovation represents a pivotal approach for enhancing energy efficiency , reducing energy demand and improving environmental footprints through precise resource management and energy-efficient construction practices [1].}, language = {en} } @inproceedings{MuellerFlassigFlassig2024, author = {M{\"u}ller, Katja and Flassig, Peter and Flassig, Robert}, title = {Numerical Simulations and Sensitivity Analysis of Ice Formation on Fan Blades}, series = {ASME Turbo Expo 2024: Turbomachinery Technical Conference and Exposition, London, 2024}, booktitle = {ASME Turbo Expo 2024: Turbomachinery Technical Conference and Exposition, London, 2024}, publisher = {ASME}, isbn = {978-0-7918-8806-3}, doi = {10.1115/GT2024-125715}, pages = {10}, year = {2024}, abstract = {In-flight icing, the formation of ice during flight, poses risks to the safety and reliability of aircraft. Due to environmental conditions, ice accumulation occurs on the low-pressure compressor blades of an engine, diminishing aerodynamic performance and potentially causing damage to the engine. Numerical simulations of ice accretion are conducted on the blades of the NASA Rotor 67 utilizing the Computational Fluid Dynamics (CFD) software ANSYS CFX and the in-flight icing software FENSAP-ICE. One-dimensional and two-dimensional sensitivity studies aim to analyze the influences of temperature, droplet diameter and liquid water content (LWC) on the resulting ice build-up on the blade. The analyses reveal that ice accumulates predominantly at the leading edge of the blade, where collection efficiency is maximal. Additionally, an ice layer forms at the blade root on the pressure side. While LWC and temperature exerts a significant influence on the ice mass, only a marginal impact on droplet diameter is observed.}, language = {en} } @book{GrunwaldSchwill2022, author = {Grunwald, Guido and Schwill, J{\"u}rgen}, title = {Nachhaltigkeitsmarketing}, edition = {1. Auflage}, publisher = {Sch{\"a}ffer-Poeschel}, address = {Stuttgart}, isbn = {978-3-7910-4927-4 (eBook)}, pages = {391 Seiten}, year = {2022}, subject = {Nachhaltigkeit}, language = {de} } @masterthesis{AbdoulKarim2024, type = {Bachelor Thesis}, author = {Abdoul Karim, Malik}, title = {Verbesserung der Alarmqualit{\"a}t und Entscheidungsfindung bei der Erkennung von Cyberangriffen durch Integration von Threat Intelligence und externen Datenquellen}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3210}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32103}, school = {Technische Hochschule Brandenburg}, pages = {64}, year = {2024}, abstract = {Diese Arbeit untersucht die Integration von externer Threat Intelligence in Cybersicherheitsplattformen, um die Erkennung von Bedrohungen in Echtzeit und die Reaktion auf Vorf{\"a}lle zu verbessern. Durch den Einsatz von Datenscraping-Techniken auf sozialen Medien (X) in Kombination mit einer Python-basierten Verarbeitungspipeline und Elasticsearch zur Speicherung und Abfrage von Daten wird ein robustes System zur Analyse und Visualisierung bedrohungsrelevanter Informationen entwickelt. Das System integriert Natural Language Processing (NLP) Techniken, wie das Stanford CoreNLP-Framework und den Stucco Entity Extractor, um gesammelte Daten mit Cybersicherheitsentit{\"a}ten anzureichern. Zudem werden maschinelle Lernmodelle, insbesondere Satztransformatoren, verwendet, um Texte einzubetten und die Kosinus-{\"A}hnlichkeit zwischen potenziellen Bedrohungen und Warnmeldungen zu berechnen. Damit wird gezeigt, dass die Korrelation externer Datenquellen mit Threat Intelligence die Pr{\"a}zision von Alarmen erheblich verbessert und sicherheitsrelevante Einblicke f{\"u}r Analysten liefert. Das finale System bietet eine skalierbare und effiziente Datenverarbeitung sowie Echtzeit-Visualisierungen durch Elasticsearch und Kibana-Dashboards zur Unterst{\"u}tzung der Entscheidungsfindung in der Cybersicherheit.}, subject = {Maschinelles Lernen}, language = {de} } @book{Wrobel2024, author = {Wrobel, Martin}, title = {Marketing und Vertrieb f{\"u}r Startups}, publisher = {Springer Gabler}, address = {Wiesbaden}, isbn = {978-3-658-44081-7 (softcover)}, doi = {10.1007/978-3-658-44082-4}, pages = {XXV, 190}, year = {2024}, subject = {Marketing}, language = {de} } @misc{OPUS4-3211, title = {Forschungsbericht der Fachhochschule Brandenburg 2013 - 2014}, editor = {Wieneke-Toutaoui, Burghilde and Fischer, Arno}, address = {Brandenburg an der Havel}, organization = {Fachhochschule Brandenburg}, issn = {1861-3462}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32112}, pages = {216}, year = {2015}, subject = {Fachhochschule Brandenburg}, language = {de} } @article{JechowBumbergerPalmetal.2024, author = {Jechow, Andreas and Bumberger, Jan and Palm, Bert and Remmler, Paul and Schreck, G{\"u}nter and Ogashawara, Igor and Kiel, Christine and Kohnert, Katrin and Grossart, Hans-Peter and Singer, Gabirel A. and Nejstgaard, Jens C. and Wollrab, Sabine and Berger, Stella A. and H{\"o}lker, Franz}, title = {Characterizing and Implementing the Hamamatsu C12880MA Mini-Spectrometer for Near-Surface Reflectance Measurements of Inland Waters}, series = {Sensors}, volume = {24}, journal = {Sensors}, number = {19}, publisher = {MDPI}, doi = {10.3390/s24196445}, pages = {1 -- 14}, year = {2024}, abstract = {In recent decades, inland water remote sensing has seen growing interest and very strong development. This includes improved spatial resolution, increased revisiting times, advanced multispectral sensors and recently even hyperspectral sensors. However, inland waters are more challenging than oceanic waters due to their higher complexity of optically active constituents and stronger adjacency effects due to their small size and nearby vegetation and built structures. Thus, bio-optical modeling of inland waters requires higher ground-truthing efforts. Large-scale ground-based sensor networks that are robust, self-sufficient, non-maintenance-intensive and low-cost could assist this otherwise labor-intensive task. Furthermore, most existing sensor systems are rather expensive, precluding their employability. Recently, low-cost mini-spectrometers have become widely available, which could potentially solve this issue. In this study, we analyze the characteristics of such a mini-spectrometer, the Hamamatsu C12880MA, and test it regarding its application in measuring water-leaving radiance near the surface. Overall, the measurements performed in the laboratory and in the field show that the system is very suitable for the targeted application.}, language = {en} } @techreport{WeberPilgermannSteinetal.2024, author = {Weber, Simon and Pilgermann, Michael and Stein, Stefan and Schrader, Thomas}, title = {SzA4Hosp - Systeme zur Angriffserkennung in der Medizinischen Versorgung}, organization = {Technische Hochschule Brandenburg}, doi = {10.25933/opus4-3207}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32075}, pages = {85}, year = {2024}, abstract = {Dieser Abschlussbericht stellt das Ergebnis der Projektarbeit {\"u}ber die Implementierung von Systemen zur Angriffserkennung (SzA) in deutschen Krankenh{\"a}usern im Kontext des IT-Sicherheitsgesetzes 2.0 und des branchenspezifischen Sicherheitsstandards (B3S) f{\"u}r die medizinische Versorgung dar. Ziel des Projekts war es, den aktuellen Umsetzungsstand von SzA in deutschen Krankenh{\"a}usern zu analysieren und Handlungsempfehlungen f{\"u}r die Weiterentwicklung des B3S zu erarbeiten. Die Analyse basiert auf einer umfangreichen Befragung von Krankenhausbetreibern, Expertengespr{\"a}chen sowie der Auswertung relevanter nationaler und internationaler Standards und Good Practices. Die Ergebnisse zeigen deutliche Unterschiede im Reifegrad der SzA-Implementierung zwischen verschiedenen Bereichen, wobei die Informationstechnik branchenweit am fortgeschrittensten ist. Der Bericht bietet konkrete Vorschl{\"a}ge zur Verbesserung der IT-Sicherheitslage in Krankenh{\"a}usern und betont die Notwendigkeit kontinuierlicher Weiterentwicklungen der SzA-Systeme, um den steigenden Anforderungen der IT-Sicherheit in der station{\"a}ren Versorgung gerecht zu werden.}, subject = {Computersicherheit}, language = {de} } @masterthesis{Hoerig2024, type = {Bachelor Thesis}, author = {H{\"o}rig, Philipp}, title = {Vergleichende Analyse der Performance und Ressourcenauslastung zwischen Platform- und Virtual-Threads in Java 21}, doi = {10.25933/opus4-3206}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32064}, school = {Technische Hochschule Brandenburg}, pages = {74}, year = {2024}, abstract = {Die Bachelorarbeit untersucht die Performance und Ressourcenauslastung von Platform- und Virtual-Threads in Java 21. Im Kontext der E-Commerce-Plattform der Telef{\´o}nica Germany GmbH \& Co. OHG stellt sich die Frage, ob die neu eingef{\"u}hrten Virtual-Threads dazu verwendet werden k{\"o}nnen, den aktuellen Softwareentwicklungsprozess des Unternehmens zu optimieren. Zu diesem Zweck werden Proof-of-Concept-Anwendungen entwickelt, die auf den Webframeworks Spring MVC und Spring WebFlux basieren. Diese Anwendungen werden anschließend einem Stresstest unterzogen, um die Leistungsunterschiede der Threading-Modelle zu analysieren. Die Ergebnisse der Untersuchung legen nahe, dass die Verwendung von Virtual- Threads im Vergleich zu Platform-Threads in einer asynchronen Spring MVC- Architektur zu einer Reduktion der durchschnittlichen Antwortzeit um etwa 20 \% und zu einer Steigerung des Durchsatzes um nahezu 20 \% f{\"u}hrt. Des Weiteren konnte eine Reduktion der CPU- und RAM-Auslastung bei maximaler Last um 11 \% bzw. 13 \% festgestellt werden. Obwohl die Spring WebFlux- Architektur unter Verwendung von Platform-Threads und eines Netty-Servers in den meisten Testmetriken bessere Ergebnisse erzielte, sind die Resultate der asynchronen Spring MVC-Architektur mit Virtual-Threads vielversprechend. Eine Implementierung dieser Technologie k{\"o}nnte demnach eine deutliche Verbesserung des aktuellen Softwareentwicklungsprozesses im Unternehmen bewirken.}, subject = {Java Standard Edition 21}, language = {de} }