@inproceedings{KantJohannsen2022, author = {Kant, Daniel and Johannsen, Andreas}, title = {Evaluation of AI-based use cases for enhancing the cyber secu- rity defense of small and medium-sized companies (SMEs)}, series = {Proc. IS \& T International Symposium on Electronic Imaging: Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications}, booktitle = {Proc. IS \& T International Symposium on Electronic Imaging: Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications}, address = {Springfield, VA}, doi = {10.2352/EI.2022.34.3.MOBMU-387}, pages = {387-1 -- 387-8}, year = {2022}, language = {en} } @article{KantJohannsen2021, author = {Kant, Daniel and Johannsen, Andreas}, title = {Sicherer Datenaustausch in Kooperationen - „Kooperation first - Sicherheit second?"}, series = {Mittelstand-Digital Magazin - Wissenschaft trifft Praxis}, journal = {Mittelstand-Digital Magazin - Wissenschaft trifft Praxis}, number = {2021/16}, publisher = {Begleitforschung Mittelstand-Digital}, pages = {41 -- 46}, year = {2021}, language = {de} } @book{JohannsenKant2020, author = {Johannsen, Andreas and Kant, Daniel}, title = {IT-Governance, Risiko-und Compliance-Management (IT-GRC) f{\"u}r KMU - Literaturanalyse und Ansatzbildung}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg/Havel}, isbn = {978-3-945500-05-7}, issn = {2198-090X}, publisher = {Technische Hochschule Brandenburg}, pages = {28}, year = {2020}, language = {de} } @inproceedings{KantJohannsen2020, author = {Kant, Daniel and Johannsen, Andreas}, title = {Exemplarische API-Schwachstellen bei IoT-Ger{\"a}ten auf Grundlage von OWASP API Security TOP 10}, series = {Konferenz: Evaluation of Service APIs (ESAPI), D{\"u}ren, 2020/ Band: ESAPI 2020: 4. Workshop Evaluation of Service-APIs}, booktitle = {Konferenz: Evaluation of Service APIs (ESAPI), D{\"u}ren, 2020/ Band: ESAPI 2020: 4. Workshop Evaluation of Service-APIs}, editor = {Nadobny, Konrad and Schmietendorf, Andreas}, publisher = {Shaker}, address = {D{\"u}ren}, isbn = {978-3-8440-7515-1}, pages = {75 -- 88}, year = {2020}, language = {de} } @article{KantJohannsen2022, author = {Kant, Daniel and Johannsen, Andreas}, title = {Evaluation of AI-based use cases for enhancing the cyber security defense of small and medium-sized companies (SMEs)}, series = {IS and T International Symposium on Electronic Imaging Science and Technology}, volume = {34}, journal = {IS and T International Symposium on Electronic Imaging Science and Technology}, number = {3}, publisher = {Society for Imaging Science and Technology (IS\&T)}, issn = {2470-1173}, pages = {387-1 -- 387-8}, year = {2022}, abstract = {Companies are increasingly facing the challenges of a persistent cyber threat landscape. By means of AI, cyber attacks can be efficiently conducted more successful through offensive AI. As for cyber defense, AI can be also utilized against cyber threats (defensive AI). Due to limited resources, especially in small and medium-sized companies (SMEs), there is a need to deploy more effective defensive cyber security solutions. Precisely, the adaptation of AI-based resilient defenses must be driven forward. Therefore, the aim of this paper is to identify and evaluate AI-related use cases with a high impact potential on the cyber security level, while being applicable to SMEs at the same time. In order to reach the research goal, an extensive literature review of several online catalogs, surveys and online platforms was conducted. In conclusion, seven crucial AI-based security features were outlined that are providing a high impact potential to the security level for SMEs. Afterwards, the results are discussed and set into a broader context. Even though AI-based security solutions are providing a large range of advantages, certain challenges and barriers using AI-related security applications are addressed in the paper as well. A high need for usable state of the art AI based cyber security solution for SMEs was identified.}, language = {en} } @article{KantJohannsenCreutzburg2021, author = {Kant, Daniel and Johannsen, Andreas and Creutzburg, Reiner}, title = {Analysis of IoT Security Risks based on the exposure of the MQTT Protocol}, series = {IS and T International Symposium on Electronic Imaging Science and Technology}, volume = {33}, journal = {IS and T International Symposium on Electronic Imaging Science and Technology}, publisher = {Society for Imaging Science and Technology (IS\&T)}, doi = {10.2352/ISSN.2470-1173.2021.3.MOBMU-096}, pages = {096-1 -- 096-8}, year = {2021}, language = {en} } @article{KantCreutzburgJohannsen2020, author = {Kant, Daniel and Creutzburg, Reiner and Johannsen, Andreas}, title = {Investigation of risks for Critical Infrastructures due to the exposure of SCADA systems and industrial controls on the Internet based on the search engine Shodan}, series = {IS and T International Symposium on Electronic Imaging Science and Technology}, journal = {IS and T International Symposium on Electronic Imaging Science and Technology}, publisher = {Society for Imaging Science and Technology (IS\&T)}, address = {Springfield, VA}, issn = {2470-1173}, doi = {10.2352/ISSN.2470-1173.2020.3.MOBMU-253}, pages = {253-1 -- 253-16}, year = {2020}, language = {en} } @article{JohannsenKantCreutzburg2020, author = {Johannsen, Andreas and Kant, Daniel and Creutzburg, Reiner}, title = {Measuring IT security, compliance and data governance within small and medium-sized IT enterprises}, series = {IS and T International Symposium on Electronic Imaging Science and Technology}, journal = {IS and T International Symposium on Electronic Imaging Science and Technology}, publisher = {Society for Imaging Science and Technology (IS\&T)}, address = {Springfield, VA}, issn = {2470-1173}, doi = {10.2352/ISSN.2470-1173.2020.3.MOBMU-252}, pages = {252-1 -- 252-11}, year = {2020}, language = {en} } @article{JohannsenKant2020, author = {Johannsen, Andreas and Kant, Daniel}, title = {IT-Governance, Risiko- und Compliance-Management (IT‑GRC) - Ein Kompetenz-orientierter Ansatz f{\"u}r KMU}, series = {HMD Praxis der Wirtschaftsinformatik}, journal = {HMD Praxis der Wirtschaftsinformatik}, publisher = {Springer}, address = {Wiesbaden}, doi = {10.1365/s40702-020-00625-8}, year = {2020}, language = {de} } @incollection{JohannsenKant2022, author = {Johannsen, Andreas and Kant, Daniel}, title = {IT-Governance-, Risiko- und Compliance-Management (IT-GRC) - Ein kompetenzorientierter Ansatz f{\"u}r KMU}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, editor = {Weber, Kristin and Reinheimer, Stefan}, publisher = {Springer Vieweg}, address = {Wiesbaden}, doi = {10.1007/978-3-658-34524-2_15}, publisher = {Technische Hochschule Brandenburg}, pages = {275 -- 294}, year = {2022}, abstract = {Kleine und mittlere Unternehmen aller Branchen versuchen sich nach wie vor angemessen mit den Herausforderungen der Globalisierung und der digitalen Transformation auseinanderzusetzen. Sie bilden in diesem Zusammenhang wachsende Kompetenz in der Produktionsautomatisierung (Industrie 4.0) und in digitalen Gesch{\"a}fts- und Verwaltungsprozessen aus. In Bezug auf IT-GRC bleiben KMU demgegen{\"u}ber faktisch oft noch unreif. Bestehende Ans{\"a}tze des IT-Governance-, Risiko- und Compliance-Managements sind noch zu wenig f{\"u}r KMU ausgestaltet. Das Kapitel stellt vor diesem Hintergrund einen zun{\"a}chst aus der Literatur abgeleiteten, und dann zusammen mit Feedback von 14 IT-GRC Experten aufgestellten, kompetenzorientierten Ansatz zur Wahrnehmung und Messung des IT-Governance-, Risiko- und Compliance-Managements in KMU vor. Der Ansatz enth{\"a}lt sechs relevante Kompetenzkategorien. Das Kapitel stellt dann zwei abgeleitete, webbasierte Tools zur Messung und Erfassung der Handlungsbedarfe und zur Unterst{\"u}tzung von Management-Maßnahmen vor. Der Ansatz sowie die prototypisch realisierten Tools unterst{\"u}tzen das IT-GRC-Management von KMU gem{\"a}ß ihrem Reifegrad und bedarfsorientiert. Bei der Unterst{\"u}tzung wird der Fokus darauf gelegt, KMU bei der Umsetzung der st{\"a}ndig wachsenden IT-GRC-Anforderungen schlanke und konkrete Methoden, Werkzeuge und Hilfsmittel an die Hand zu geben und die verschiedenen Stakeholder einzubinden.}, subject = {Klein- und Mittelbetrieb}, language = {de} }