@misc{Hildebrandt2025, type = {Master Thesis}, author = {Hildebrandt, Hans}, title = {Integration von Cyber Threat Intelligence (CTI) in IT- und Medizinumgebungen: Quellen, Formate und praktische Umsetzung zur Verbesserung der IT-Sicherheit}, doi = {10.25933/opus4-3437}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-34377}, school = {Technische Hochschule Brandenburg}, pages = {131}, year = {2025}, abstract = {Die vorliegende Arbeit untersucht die Integration von Cyber Threat Intelligence in IT- und Gesundheitsumgebungen. Ziel war es, zu evaluieren, ob CTI-Daten in bestehende Sicherheitsl{\"o}sungen eingebunden werden k{\"o}nnen. Außerdem sollte festgestellt werden, welchen Mehrwert die Daten im Hinblick auf die Erkennung und Abwehr von Bedrohungen bieten. Hierzu wurde eine Laborumgebung aufgebaut, bestehend aus OpenCTI zur Sammlung und Verwaltung von Bedrohungsinformationen, Logstash zur Datenweiterleitung sowie Wazuh zur Analyse und Alarmierung. {\"U}ber einen Zeitraum von acht Wochen wurden Daten aus verschiedenen Open-Source-Feeds (u. a. CVE, MITRE, AlienVault, ThreatFox) gesammelt, verarbeitet und auf ihre Relevanz f{\"u}r den Gesundheitssektor gepr{\"u}ft. Zur Bewertung der Qualit{\"a}t der CTI-Daten wurde ein Beispielszenario f{\"u}r eine Krankenhausinfrastruktur entwickelt. Dieses Szenario umfasste typische Systeme und Hersteller im Gesundheitssektor, darunter Krankenhausinformationssysteme, Medizinger{\"a}te sowie Netzwerkinfrastrukturen. Die gesammelten Daten wurden auf diese Infrastruktur gemappt, um zu pr{\"u}fen, in welchem Umfang spezifische Bedrohungen abgedeckt werden. Die Ergebnisse zeigen, dass eine technische Integration grunds{\"a}tzlich m{\"o}glich ist und f{\"u}r generische IT-Bedrohungen belastbare Indikatoren vorliegen. Spezifische Informationen f{\"u}r den Gesundheitssektor konnten jedoch nur eingeschr{\"a}nkt identifiziert werden. Daraus ergibt sich, dass die Nutzung spezialisierter Feeds, etwa aus dem Health-ISAC, notwendig ist, um sektorspezifische Bedrohungen zuverl{\"a}ssig abdecken zu k{\"o}nnen.}, subject = {Computersicherheit}, language = {de} } @inproceedings{WeichLobachev2025, author = {Weich, Patrick and Lobachev, Oleg}, title = {PIN-a-Boo: Revealing Smartphone PINs via Segmentation and Hand Skeleton Tracking from Video Feeds}, series = {WSCG 2025 Proceedings : Computer Science Research Notes - CSRN}, booktitle = {WSCG 2025 Proceedings : Computer Science Research Notes - CSRN}, publisher = {WSCG}, address = {Plzen}, issn = {464-4617}, doi = {10.24132/CSRN.2025-31}, pages = {293 -- 304}, year = {2025}, abstract = {It is crucial to improve smartphone security, given the prevalence of sensitive information stored on them. This study presents an attack strategy that reveals smartphone PIN entries using computer vision and pattern recognition techniques. By leveraging modern segmentation and hand skeleton tracking, our method accurately identifies and analyzes finger movement patterns, even when partially obscured. We can reliably infer the entered PIN by combining these movement patterns with the smartphone's position and the on-screen keypad layout. This approach significantly enhances shoulder-surfing attacks, requiring only a video recording of the entry process. Our attack requires much less specialized expertise, making it more accessible. We conclude by analyzing the method's potential impact and its implications for public safety.}, language = {en} } @inproceedings{HenkelBestleFlassigetal.2025, author = {Henkel, Clara and Bestle, Dieter and Flassig, Peter and Janke, Christian and Slaby, Michal}, title = {Consideration of Balancing within the Fan-Blisk Design Process}, series = {Proceedings of Global Power and Propulsion Society, Shanghai, 2025}, booktitle = {Proceedings of Global Power and Propulsion Society, Shanghai, 2025}, publisher = {GPPS}, issn = {2504-4400}, doi = {10.33737/gpps25-tc-017}, pages = {1 -- 9}, year = {2025}, abstract = {The design of fan-blisks is a multi-criterion optimisation challenge primarily involving the aerodynamic shape optimisation of blade profiles and subsequent blade balancing, i.e., shifting profiles in axial and circumferential directions to avoid stress hotspots. Although it is already known that blade balancing affects aerodynamic properties, this correlation is often not taken into account, which is why it is usually performed as an independent step after solving the aerodynamic design problem. However, this assumption is questionable because such shifts should be used to control both secondary flow effects and resulting stress. Therefore, the paper proposes problem formulations combining both aspects. Since optimisation requires costly numerical evaluations, machine learning methods are investigated to predict aerodynamic performance and stress constraints more efficiently. This enables a global optimisation process by reducing computational costs. Various different surrogate types are investigated, where stress constraints are formulated either as regression task predicting stress maxima, or as classification problem directly assessing design feasibility.}, language = {en} } @inproceedings{SchulzJander2025, author = {Schulz, Theresa and Jander, Kai}, title = {Planless Agents: BDI Plan Generation Using LLMs}, series = {Intelligent Distributed Computing XVII, 2024}, booktitle = {Intelligent Distributed Computing XVII, 2024}, number = {1203}, publisher = {Springer}, doi = {10.1007/978-3-031-87639-4_15}, pages = {253 -- 268}, year = {2025}, abstract = {Belief-Desire-Intention (BDI) agents offer a unique approach for engi- neering complex behavior for individual agents in multi-agent systems. A developer can define goals for each agent, specifying the desired outcomes in various con- texts and implement plans as the means to reach those goals. The BDI reasoning engine can then proceed to automatically select goals to pursue (goal deliberation) and choose one or more of the provided plans to attempt to achieve them. However, usually plans or at least part of the plans have to be provided by the agent's developer before the system is deployed. In this paper we present an approach for BDI agents to generate their own plans using large language models (LLMs) using solely the available context information such as goal descriptions, available beliefs and their structural information. We show that the approach is viable in principle and explore its reliability as well as discuss further use of LLMs in the context of automating BDI-based agents.}, language = {en} } @inproceedings{HelmichBraubachSchulzetal.2025, author = {Helmich, Roland and Braubach, Lars and Schulz, Theresa and Jander, Kai}, title = {Securing End-to-End Encrypted File Sharing Services with the Messaging Layer Security Protocol}, series = {Intelligent Distributed Computing XVII, 2024}, booktitle = {Intelligent Distributed Computing XVII, 2024}, number = {1203}, publisher = {Springer}, doi = {10.1007/978-3-031-87639-4_7}, pages = {107 -- 122}, year = {2025}, abstract = {To protect data on the servers of cloud service providers, file-sharing services rely on End-to-End Encryption (E2EE). However, existing solutions have weaknesses that allow attackers to bypass E2EE permanently after stealing a clients keys once. In this paper, a concept for an E2EE file-sharing service is proposed which does not have this vulnerability. It is based on Messaging Layer Security (MLS) groups for key distribution, an authentication system based on asymmetric cryptography, Attribute-Based Access Control (ABAC) based access rights and a tamper-proof versioned storage system for synchronising sensitive data. The applicability of the concept is demonstrated by a prototype implementation and an evaluation based on benchmarks and a security analysis. Overall, the concept can fulfil the requirements of a basic file sharing service while providing stronger security guarantees than existing solutions.}, language = {en} } @inproceedings{FroschLindauerWinkel2025, author = {Frosch, Katharina and Lindauer, Friederike and Winkel, Carmen}, title = {Is Learning with an AI-Powered Chatbot for Everyone? A First Look at How Learning Preferences May Influence Learning Outcomes}, series = {Ubiquity Proceedings}, volume = {6}, booktitle = {Ubiquity Proceedings}, number = {1}, publisher = {ubiquity press}, doi = {10.5334/uproc.207}, pages = {1 -- 10}, year = {2025}, abstract = {In an era where AI-powered chatbots are increasingly being integrated into education and corporate learning, it is critical to determine whether these approaches benefit all learners or primarily cater to those with specific preferences. This study explores the interplay between learning preferences and learning outcomes in communication training using an AI-powered chatbot. In a field experiment with 17 participants, systematic thinkers and intrinsically motivated learners reported higher satisfaction and greater skill improvement, while those who preferred model learning and direct feedback benefited less. These findings suggest that AI-powered chatbots should be carefully designed to accommodate diverse learners and mitigate potential negative effects.}, language = {en} } @inproceedings{BertramJankeFlassigetal.2025, author = {Bertram, Hamun and Janke, Christian and Flassig, Robert and Flassig, Peter}, title = {Efficient ML-Based Prediction of Turbomachinery Blade Performance With B-Spline Surface Representation}, series = {ASME Turbo Expo 2025: Turbomachinery Technical Conference and Exposition, Memphis, Tennessee, USA, 2025}, booktitle = {ASME Turbo Expo 2025: Turbomachinery Technical Conference and Exposition, Memphis, Tennessee, USA, 2025}, publisher = {ASME}, isbn = {978-0-7918-8886-5}, doi = {10.1115/GT2025-152689}, pages = {13}, year = {2025}, abstract = {In turbomachinery blade design, rapid and accurate performance prediction is essential to accelerate optimization and reduce reliance on costly high-fidelity simulations. Traditional data-driven approaches often use dense surface point-cloud representations as input features, requiring extensive training datasets and computational resources. This work presents a more efficient methodology leveraging a compact B-Spline-based surface representation, where control points serve as input features, significantly reducing geometric dimensionality and computational overhead. A systematic Design of Experiments (DoE) is performed to generate a diverse set of blade geometries for NASA Rotor 67. Each design is evaluated via computational fluid dynamics (CFD) simulations in ANSYS CFX, providing key aerodynamic performance metrics such as isentropic efficiency. We train and compare Graph Convolutional Neural Networks (GCNN) and Random Forest Regression (RFR) models to predict blade performance directly from the reduced control-point parameterization. Incorporating first- and second-order geometric derivatives (gradients and Laplacians) into the feature set significantly enhances predictive accuracy and stability, capturing essential curvature-related flow physics. Results demonstrate that this B-Spline-based, CAD-centric methodology can achieve competitive accuracy in predictions with as few as 150-200 training simulations—comparable to other GCNN-based approaches. Consequently, the proposed framework reduces training overhead from days to minutes, enabling faster, more cost-effective turbomachinery design workflows and guiding optimization toward high-performing blade geometries.}, language = {en} } @inproceedings{MuellerMarkgrafVogeletal.2025, author = {M{\"u}ller, Katja and Markgraf, Klaus and Vogel, Andreas and Flassig, Peter and Flassig, Robert}, title = {Numerical Study of Ice Accretion on Fan Blades: Implications for the Design of Blade Geometries}, series = {ASME Turbo Expo 2025: Turbomachinery Technical Conference and Exposition, Memphis, Tennessee, USA, 2025}, booktitle = {ASME Turbo Expo 2025: Turbomachinery Technical Conference and Exposition, Memphis, Tennessee, USA, 2025}, publisher = {ASME}, isbn = {978-0-7918-8887-2}, doi = {10.1115/GT2025-152704}, pages = {12}, year = {2025}, abstract = {Ice formation on aircraft components due to the impact of supercooled droplets poses a severe safety risk. In particular, the formation of ice on the fan blades can lead to vibrations that affect the entire engine. While numerous studies have examined the effects of environmental conditions on ice accumulation, the influence of blade geometry has received little attention. This study investigates how variations in blade geometry affect ice accretion in a low-pressure compressor using a numerical approach. A Design of Experiments (DoE) is conducted on the NASA Rotor67, focusing on the sensitivity of ice formation to geometric modifications. The workflow includes geometry generation (ParaBlade), flow simulation (ANSYS CFX), and ice accretion modeling (ANSYS FENSAP-ICE) under rime ice conditions. The results reveal a strong correlation between the inlet metal angle and both accreted ice mass and maximum ice thickness. Furthermore, designs with good aerodynamic performance tend to exhibit higher ice accumulation. These findings enhance the understanding of icing behavior in low-pressure compressors and offer valuable insights for optimizing blade design in adverse environmental conditions.}, language = {en} } @inproceedings{NitzeWangJahnetal.2024, author = {Nitze, Andr{\´e} and Wang, Tingting and Jahn, Josephine and Ali, Sabah}, title = {Beyond Connectivity: A Sustainable Approach to Municipal LoRaWAN Infrastructure and Services}, series = {Konferenz: ICDS 2024 : The Eighteenth International Conference on Digital Society; Barcelona, Spain}, booktitle = {Konferenz: ICDS 2024 : The Eighteenth International Conference on Digital Society; Barcelona, Spain}, publisher = {IARIA}, pages = {19 -- 24}, year = {2024}, abstract = {This paper introduces the LoRaWAN Collaboration Framework (LCF), a strategic blueprint for deploying and managing LoRaWAN infrastructures in smart cities with an emphasis on rural and small municipalities. LoRaWAN technology is distinguished by its capability to support long-range, low-power IoT applications, making it ideal for extensive and sparsely populated areas. The LCF aims to address common challenges in these settings, such as limited technical expertise, financial constraints, and the need for cross-municipal cooperation. It outlines roles and responsibilities across various stakeholders including municipal authorities, IT service providers, application developers, and end-users. The framework emphasizes the balance of technological, economic, ecological, and social sustainability in line with the United Nations' Sustainable Development Goals. In this paper we describe the experiences from several LoRaWAN projects in small towns and municipalities, the derived framework, and future research directions towards ensuring the economic viability of the proposed model.}, language = {en} } @unpublished{Nitze2023, author = {Nitze, Andr{\´e}}, title = {Future-proofing Education: A Prototype for Simulating Oral Examinations Using Large Language Models}, publisher = {arXiv}, doi = {10.48550/arXiv.2401.06160}, pages = {1 -- 6}, year = {2023}, abstract = {This study explores the impact of Large Language Models (LLMs) in higher education, focusing on an automated oral examination simulation using a prototype. The design considerations of the prototype are described, and the system is evaluated with a select group of educators and students. Technical and pedagogical observations are discussed. The prototype proved to be effective in simulating oral exams, providing personalized feedback, and streamlining educators' workloads. The promising results of the prototype show the potential for LLMs in democratizing education, inclusion of diverse student populations, and improvement of teaching quality and efficiency.}, language = {en} } @inproceedings{WangNitzeHofstedtetal.2024, author = {Wang, Tingting and Nitze, Andr{\´e} and Hofstedt, Petra and L{\"o}ffler, Sven and Hennig, Silvia and Klinge, Alexander}, title = {Technische Machbarkeit von l{\"a}ndlichem On-Demand-Verkehr: Anforderungen an eine Open-Source-Software-Architektur}, series = {24. Nachwuchswissenschaftler:innenkonferenz}, booktitle = {24. Nachwuchswissenschaftler:innenkonferenz}, number = {3}, publisher = {Hochschule Mittweida}, address = {Mittweida}, issn = {1437-7624}, doi = {10.48446/opus-15430}, url = {http://nbn-resolving.de/urn:nbn:de:bsz:mit1-opus4-154308}, pages = {361 -- 366}, year = {2024}, abstract = {On-Demand-Verkehr bezeichnet Mobilit{\"a}tsangebote, die auf Bestellung verf{\"u}gbar sind. Ziel ist es, durch flexible Mobilit{\"a}tsangebote L{\"u}cken im l{\"a}ndlichen {\"o}ffentlichen Personennahverkehr ({\"O}PNV) zu schließen, insbesondere in d{\"u}nn besiedelten R{\"a}umen und zu Randzeiten des Tages. Die Einf{\"u}hrung solcher Dienste gestaltet sich f{\"u}r viele Kommunen jedoch aufgrund der hohen Lizenzgeb{\"u}hren f{\"u}r propriet{\"a}re Software als {\"a}ußerst schwierig, insbesondere in strukturschwachen Regionen, die solche Dienste besonders ben{\"o}tigen. Im Rahmen des Projekts "Open-Source-Software f{\"u}r l{\"a}ndlichen On-Demand-Verkehr" (OSLO) wurde die Umsetzbarkeit einer niedrigschwelligen Open-Source-L{\"o}sung gepr{\"u}ft. Diese L{\"o}sung soll langfristig in die Open-Source-Mobilit{\"a}tsplattform bbnavi integriert werden, um die Nutzung vorhandener Mobilit{\"a}tsdaten zu erleichtern, Interoperabilit{\"a}t zu gew{\"a}hrleisten und die Anpassung an andere Regionen zu vereinfachen. Das Konzept beinhaltet eine Software-Architektur, einen speziell f{\"u}r den l{\"a}ndlichen Nahverkehr entwickelten intermodalen Routing-Algorithmus und ein Betriebs- und Organisationsmodell ([1]). In diesem Beitrag wird beschrieben, wie eine effiziente Software-Architektur f{\"u}r das OSLO-Projekt entworfen wurde. Die zentralen Themen beinhalten die Strukturierung der Komponenten, die Anwendung von GTFS-Flex-V2, die Integration des angepassten Routing-Algorithmus sowie die Einbindung externer Schnittstellen.}, subject = {Open Source}, language = {de} } @article{NitzeWangJahnetal.2024, author = {Nitze, Andr{\´e} and Wang, Tingting and Jahn, Josephine and Ali, Sabah and Miesner, Timon}, title = {Lessons learned from building sustainable municipal LoRaWan infrastructure}, series = {International Journal On Advances in Networks and Services}, volume = {17}, journal = {International Journal On Advances in Networks and Services}, number = {3\&4}, publisher = {IARIA}, pages = {59 -- 68}, year = {2024}, abstract = {Abstract—This paper introduces the LoRaWAN Collaboration Framework (LCF), a strategic blueprint for deploying and managing LoRaWAN infrastructures in smart cities with an emphasis on rural and small municipalities. LoRaWAN technology distinguishes itself by its capability to support long-range, low-power IoT applications, making it ideal for extensive and sparsely populated areas. The LCF aims to address common challenges in these settings, such as limited technical expertise, financial constraints, and the need for cross-municipal cooperation. It outlines roles and responsibilities across various stakeholders including municipal authorities, IT service providers, application developers, and end-users. The framework emphasizes the balance of technological, economic, social and ecological sustainability in line with the United Nations' Sustainable Development Goals. In this paper, we describe the experiences from several LoRaWAN projects in small towns and municipalities in Germany and give some insights to these use cases, the derived collaboration framework, and other arguments to consider before implementing LoRaWAN infrastructures.}, language = {en} } @article{PilgermannSteinSchraderetal.2021, author = {Pilgermann, Michael and Stein, Stefan and Schrader, Thomas and Weber, Simon}, title = {Angriffserkennung beim Betrieb von KRITIS gem{\"a}ß IT-Sicherheitsgesetz 2.0}, series = {Datenschutz und Datensicherheit}, volume = {45}, journal = {Datenschutz und Datensicherheit}, doi = {10.1007/s11623-021-1525-z}, pages = {733 -- 737}, year = {2021}, abstract = {Die Krankenhaus-IT sieht sich einer stetig zunehmenden Bedrohung der Sicherheit der Patientendaten und des Krankenhausbetriebes gegen{\"u}ber. Der Gesundheitssektor geh{\"o}rt zu den Kritischen Infrastrukturen, die zunehmend strengeren Regelungen unterliegen. J{\"u}ngste Regulierung ist das IT-Sicherheitsgesetz 2.0, das unter anderem Maßnahmen zur Detektion von Angriffen fordert. Der Beitrag stellt vor, wie eine branchenspezifische Umsetzung dieser Anforderung aussehen k{\"o}nnte.}, language = {de} } @article{SteinPilgermannSedlmayr2025, author = {Stein, Stefan and Pilgermann, Michael and Sedlmayr, Martin}, title = {Systematic Evaluation of Manufacturer Disclosure Statements for Medical Device Security (MDS2) to Strengthen Hospital OT Security Measures - Lessons Learned}, series = {Studies in health technology and informatics}, volume = {331}, journal = {Studies in health technology and informatics}, doi = {10.3233/SHTI251404}, pages = {256 -- 264}, year = {2025}, abstract = {The growing number of connected medical devices in hospitals poses serious operational technology (OT) security challenges. Effective countermeasures require a structured analysis of the communication interfaces and security configurations of individual devices. State of the art: Although Manufacturer Disclosure Statements for Medical Device Security (MDS2, Version 2019) offer relevant information, they are rarely integrated into cybersecurity workflows. Existing studies are limited in scope and lack scalable methodologies for systematic evaluation. Concept: This study analyzed 209 MDS2 documents and 161 security white papers to extract structured information on ports, protocols, and protective measures. Over 52,000 question-answer pairs were converted into a machine-readable format using customized parsing and validation routines. The aim was to establish whether this dataset could inform risk assessments and future applications involving Large Language Models (LLMs). Implementation: The analysis revealed 367 distinct ports, including common protocols such as HTTPS (443), DICOM (104), and RDP (3389), as well as vendor-specific proprietary ports. Approximately 40\% of the devices used over 20 ports, indicating a broad attack surface. OCR errors and inconsistent formatting required manual corrections. A consolidated dataset was developed to support clustering, comparison across vendors and versions, and preparation for downstream LLM use, particularly via structured SBOM and configuration data. Lessons learned: Although no model training was conducted, the structured dataset can support AI-based OT security workflows. The findings highlight the critical need for up-to-date, machine-readable manufacturer data in standardized formats and schemas. Such information could greatly enhance the automation, comparability, and scalability of hospital cybersecurity measures.}, language = {en} } @article{WeberSteinPilgermannetal.2023, author = {Weber, Simon B. and Stein, Stefan and Pilgermann, Michael and Schrader, Thomas}, title = {Attack Detection for Medical Cyber-Physical Systems - A Systematic Literature Review}, series = {IEEE Access}, journal = {IEEE Access}, number = {11}, publisher = {IEEE}, doi = {10.1109/ACCESS.2023.3270225}, pages = {41796 -- 41815}, year = {2023}, abstract = {The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain's unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected.}, language = {en} } @article{JamilMihajloskaTrpcheskaPopovskaMitrovikjetal.2025, author = {Jamil, Mahnoor and Mihajloska Trpcheska, Hristina and Popovska-Mitrovikj, Aleksandra and Dimitrova, Vesna and Creutzburg, Reiner}, title = {Advancing Image Spam Detection: Evaluating Machine Learning Models Through Comparative Analysis}, series = {Applied Sciences}, volume = {15}, journal = {Applied Sciences}, number = {11}, publisher = {MDPI}, issn = {2076-3417}, doi = {10.3390/app15116158}, year = {2025}, abstract = {Image-based spam poses a significant challenge for traditional text-based filters, as malicious content is often embedded within images to bypass keyword detection techniques. This study investigates and compares the performance of six machine learning models—ResNet50, XGBoost, Logistic Regression, LightGBM, Support Vector Machine (SVM), and VGG16—using a curated dataset containing 678 legitimate (ham) and 520 spam images. The novelty of this research lies in its comprehensive side-by-side evaluation of diverse models on the same dataset, using standardized dataset preprocessing, balanced data splits, and validation techniques. Model performance was assessed using evaluation metrics such as accuracy, receiver operating characteristic (ROC) curve, precision, recall, and area under the curve (AUC). The results indicate that ResNet50 achieved the highest classification performance, followed closely by XGBoost and Logistic Regression. This work provides practical insights into the strengths and limitations of traditional, ensemble-based, and deep learning models for image-based spam detection. The findings can support the development of more effective and generalizable spam filtering solutions in multimedia-rich communication platforms.}, language = {en} } @inproceedings{CraigFitzMiller2025, author = {Craig, Kevin and Fitz, Lukas R. G. and Miller, Kasey}, title = {IT Identity fostering User Innovation on Digital Platforms: The Role of Self-Esteem}, series = {AMCIS 2025, 31st Americas Conference on Information Systems, Montr{\´e}al, Canada, 2025}, booktitle = {AMCIS 2025, 31st Americas Conference on Information Systems, Montr{\´e}al, Canada, 2025}, publisher = {Association for Information Systems}, pages = {1 -- 9}, year = {2025}, abstract = {Digital platforms can grow by motivating users to explore new ways to use a wider range of affiliated products and services. This work explores the power of IT Identity to motivate such innovative use, through identity's ability to intrinsically motivate behavior. Data from 209 Amazon.com users indicates that IT Identity may cause Trying to Innovate with an IT, mediated by Self-Esteem.}, language = {en} } @unpublished{TusetPeiroPilgermannPeguerolesetal.2025, author = {Tuset-Peiro, Pere and Pilgermann, Michael and Pegueroles, Josep and Vilajosana, Xavier}, title = {Assessing Cybersecurity of Internet-Facing Medical IT Systems in Germany \& Spain Using OSINT Tools}, doi = {10.20944/preprints202503.1340.v1}, pages = {190 -- 197}, year = {2025}, abstract = {This paper investigates cybersecurity threats in medical IT (Information Technology) systems exposed to the Internet. To that end, we develop a methodology and build a data processing pipeline that allows to gather data from different OSINT (Open Source Intelligence) sources, and processes it to obtain relevant cybersecurity metrics. To validate its operation and usefulness, we apply it to two countries, Germany and Spain, allowing to study the main threats that affect medical IT systems in these countries. Our initial findings reveal that 20\% of German hosts and 15\% of Spanish hosts tagged as medical devices have at least one CVE (Common Vulnerabilities and Exposures) with a CVSS (Common Vulnerability Scoring System) graded as critical (i.e., value 8 or greater). Moreover, we found that 74\% of CVEs found in German hosts are dated from earlier than 2020, whereas for Spanish hosts the percentage is 60\%. This indicates that medical IT systems exposed to the Internet are seldom updated, which further increases their exposure to cyberthreats. Based on these initial findings, we finish the paper providing some insights on how to improve cybersecurity of these systems.}, language = {en} } @book{Kraska2025, author = {Kraska, Martin}, title = {Engineering Calculations with SMath}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3370}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-33709}, publisher = {Technische Hochschule Brandenburg}, pages = {41}, year = {2025}, abstract = {Introduction to SMath Studio covering the topics installation, configuration, creating text and formulas, scientific units, graphics, embedded images. The tutorial takes approximately 2 hours to complete.}, subject = {SMath}, language = {en} } @article{DaupayevEngelHirsch2025, author = {Daupayev, Nursultan and Engel, Christian and Hirsch, S{\"o}ren}, title = {Two-to-One Trigger Mechanism for Event-Based Environmental Sensing}, series = {Sensors}, volume = {25}, journal = {Sensors}, number = {13}, publisher = {MDPI}, doi = {10.3390/s25134107}, pages = {1 -- 18}, year = {2025}, abstract = {Environmental monitoring systems often operate continuously, measuring various parameters, including carbon dioxide levels (CO2), relative humidity (RH), temperature (T), and other factors that affect environmental conditions. Such systems are often referred to as smart systems because they can autonomously monitor and respond to environmental conditions and can be integrated both indoors and outdoors to detect, for example, structural anomalies. However, these systems typically have high energy consumption, data overload, and large equipment sizes, which makes them difficult to install in constrained spaces. Therefore, three challenges remain unresolved: efficient energy use, accurate data measurement, and compact installation. To address these limitations, this study proposes a two-to-one threshold sampling approach, where the CO2 measurement is activated when the specified T and RH change thresholds are exceeded. This event-driven method avoids redundant data collection, minimizes power consumption, and is suitable for resource-constrained embedded systems. The proposed approach was implemented on a low-power, small-form and self-made multivariate sensor based on the PIC16LF19156 microcontroller. In contrast, a commercial monitoring system and sensor modules based on the Arduino Uno were used for comparison. As a result, by activating only key points in the T and RH signals, the number of CO2 measurements was significantly reduced without loss of essential signal characteristics. Signal reconstruction from the reduced points demonstrated high accuracy, with a mean absolute error (MAE) of 0.0089 and root mean squared error (RMSE) of 0.0117. Despite reducing the number of CO2 measurements by approximately 41.9\%, the essential characteristics of the signal were saved, highlighting the efficiency of the proposed approach. Despite its effectiveness in controlled conditions (in buildings, indoors), environmental factors such as the presence of people, ventilation systems, and room layout can significantly alter the dynamics of CO2 concentrations, which may limit the implementation of this approach. Future studies will focus on the study of adaptive threshold mechanisms and context-dependent models that can adjust to changing conditions. This approach will expand the scope of application of the proposed two-to-one sampling technique in various practical situations.}, language = {en} } @article{SteinPilgermannWeberetal.2025, author = {Stein, Stefan and Pilgermann, Michael and Weber, Simon and Sedlmayr, Martin}, title = {Leveraging MDS2 and SBOM data for LLM-assisted vulnerability analysis of medical devices}, series = {Computational and Structural Biotechnology Journal}, volume = {28}, journal = {Computational and Structural Biotechnology Journal}, publisher = {Elsevier}, doi = {10.1016/j.csbj.2025.07.012}, pages = {267 -- 280}, year = {2025}, abstract = {This study investigated the use of a semi-automated, Retrieval-Augmented Generation (RAG)-based multi-agent architecture to analyze security-relevant data and assemble specialized exploitation paths targeting medical devices. The input dataset comprised device-specific sources, namely, the Manufacturer Disclosure Statement for Medical Device Security (MDS2) documents and Software Bills of Materials (SBOMs), enriched with public vulnerability databases, including Common Vulnerabilities and Exposures (CVE), Known Exploited Vulnerabilities (KEV), and Metasploit exploit records. The objective was to assess whether a modular, Large Language Model (LLM)-driven agent system could autonomously correlate device metadata with known vulnerabilities and existing exploit information to support structured threat modeling. The architecture follows a static RAG design based on predefined prompts and fixed retrieval logic, without autonomous agent planning or dynamic query adaptation. The developed Vulnerability Intelligence for Threat Analysis in Medical Security (VITAMedSec) system operates under human-prompted supervision and successfully synthesizes actionable insights and exploitation paths without requiring manual step-by-step input during execution. Although technically coherent results were obtained under controlled conditions, real-world validation remains a critical avenue for future research. This study further discusses the dual-use implications of such an agent-based framework, its relevance to patient safety in medical device cybersecurity, and the broader applicability of the proposed architecture to other critical infrastructure sectors. These findings emphasize both the technical potential and ethical responsibility for applying semi-automated AI workflows in medical cybersecurity contexts.}, language = {en} } @article{KollathHajduDegenetal.2025, author = {Koll{\´a}th, Zolt{\´a}n and Hajdu, Tam{\´a}s and Degen, Tobias and Jechow, Andreas and Sztakovics, J{\´a}nos}, title = {Conversion between measurement units used for night sky quality assessment with multispectral (RGB) cameras}, series = {Journal of Quantitative Spectroscopy and Radiative Transfer}, volume = {347}, journal = {Journal of Quantitative Spectroscopy and Radiative Transfer}, publisher = {Elsevier}, doi = {10.1016/j.jqsrt.2025.109636}, pages = {1 -- 10}, year = {2025}, abstract = {In recent years, many studies have shown that light pollution adversely affects wildlife, ecosystems, and human well-being. To assess and mitigate these impacts, it is crucial that measurements of night sky quality are reliable and comparable across sites and instruments. However, the lack of standardised night sky brightness metrology and the use of a wide variety of measurement instruments with varying spectral responsivity and field-specific measurement units hinder meaningful comparison. We collected night sky spectra from 44 nights at dark locations (existing and proposed dark sky parks). Based on this observational dataset, we created a larger random set of spectra. These data served to fit conversion parameters for a wide variety of units. We demonstrate that RGB cameras, when used as multichannel measuring devices, enable the retrieval of measurements that facilitate conversions between different units. Furthermore, even airglow can be quantified from a given measurement, enabling the determination of oxygen and sodium emission line contributions. Since this contribution is not negligible, quantitative measurements of its magnitude are crucial for accurately assessing light pollution at dark-sky sites. Using our spectral measurement database, we constructed the most probable transformation from the cameras' R, G, and B channel 𝑑𝑠𝑢 values to other units, such as the astronomical Bessel V band magnitudes. The unit conversion formulas provided in this paper are valid for mildly polluted sites (existing and proposed dark sky places), in the 21-22 magV∕arcsec2 range.}, language = {de} } @article{SchulzJander2025, author = {Schulz, Theresa and Jander, Kai}, title = {Dynamic plan generation with LLMs: automatic execution of abstract BDI-agent goals}, series = {International Journal of Parallel, Emergent and Distributed Systems}, journal = {International Journal of Parallel, Emergent and Distributed Systems}, publisher = {Taylor\&Francis}, doi = {10.1080/17445760.2025.2541956}, pages = {1 -- 21}, year = {2025}, abstract = {Belief-Desire-Intention (BDI) agents enable complex behavior in multi-agent systems by defining goals and implementing plans to achieve their goals. Typically, developers pre-define plans, which limits adaptability. This paper presents an approach for BDI agents to dynamically generate plans using large language models (LLMs), exploiting contextual information such as goals, beliefs, and structural data. We evaluate the feasibility, reliability, and limitations of this method, and discuss its implications for the automation of BDI-based agents. Our results suggest that LLMs can enhance agent autonomy by reducing the need for manual plan definition, while maintaining goal-oriented reasoning.}, language = {en} } @inproceedings{WagnerKitzelmannBoersch2025, author = {Wagner, Robin and Kitzelmann, Emanuel and Boersch, Ingo}, title = {Mitigating Hallucination by Integrating Knowledge Graphs into LLM Inference - a Systematic Literature Review}, series = {Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 4: Student Research Workshop)}, booktitle = {Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 4: Student Research Workshop)}, publisher = {Association for Computational Linguistics}, address = {Vienna}, doi = {10.18653/v1/2025.acl-srw.53}, pages = {795 -- 805}, year = {2025}, abstract = {Large Language Models (LLMs) demonstrate strong performance on different language tasks, but tend to hallucinate - generate plausible but factually incorrect outputs. Recently, several approaches to integrate Knowledge Graphs (KGs) into LLM inference were published to reduce hallucinations. This paper presents a systematic literature review (SLR) of such approaches. Following established SLR methodology, we identified relevant work by systematically search in different academic online libraries and applying a selection process. Nine publications were chosen for indepth analysis. Our synthesis reveals differences and similarities of how the KG is accessed, traversed, and how the context is finally assembled. KG integration can significantly improve LLM performance on benchmark datasets and additionally to mitigate hallucination enhance reasoning capabilities, explainability, and access to domain-specific knowledge. We also point out current limitations and outline directions for future work.}, language = {en} } @masterthesis{Schumacher2025, type = {Bachelor Thesis}, author = {Schumacher, Jan Gregor}, title = {Untersuchung von Response-Optionen der Wazuh Endpoint-Detection zur Isolierung verd{\"a}chtiger Endger{\"a}te}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3362}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-33624}, school = {Technische Hochschule Brandenburg}, pages = {63}, year = {2025}, abstract = {Diese Arbeit entwickelt und realisiert automatisierte Reaktionsme-chanismen zur Netzwerkisolierung kompromittierter Endger{\"a}te mit-tels der Open-Source-Plattform Wazuh. Es werden zwei Ans{\"a}tze als Proof of Concept implementiert und verglichen: eine host-basierte Isolierung durch Deaktivierung der lokalen Netzwerk-schnittstelle (Windows/Linux) und eine netzwerk-basierte Methode, die den Switch-Port des Ger{\"a}ts zentral abschaltet. Die Validierung in einer Testumgebung zeigt, dass die host-basierte Methode eine schnelle Reaktion erm{\"o}glicht, w{\"a}hrend der netzwerk-basierte An-satz unempfindlicher gegen{\"u}ber Manipulationen auf dem Host ist.}, language = {de} }