@article{YuekselSchwarzCreutzburg2020, author = {Y{\"u}ksel, Benjamin and Schwarz, Klaus and Creutzburg, Reiner}, title = {AI-based anomaly detection for cyberattacks on Windows systems-Creation of a prototype for automated monitoring of the process environment}, series = {Electronic Imaging}, journal = {Electronic Imaging}, publisher = {Society for Imaging Science and Technology}, address = {Springfield, VA}, issn = {2470-1173}, doi = {10.2352/ISSN.2470-1173.2020.3.MOBMU-331}, pages = {331-1 -- 331-13}, year = {2020}, language = {en} } @article{WhiskerdKoertgeJuergensetal.2020, author = {Whiskerd, Nicholas and K{\"o}rtge, Nicklas and J{\"u}rgens, Kris and Ezennaya-Gomez, Salatiel and Vielhauer, Claus and Dittmann, Jana and Hildebrandt, Mario}, title = {Keystroke biometrics in the encrypted domain: a first study on search suggestion functions of web search engines}, series = {EURASIP Journal on Information Security}, journal = {EURASIP Journal on Information Security}, number = {2020:2}, publisher = {Springer}, doi = {10.1186/s13635-020-0100-8}, year = {2020}, language = {en} } @masterthesis{Werse2021, type = {Bachelor Thesis}, author = {Werse, Otto-Leander}, title = {Anwendungsm{\"o}glichkeiten von Speichervirtualisierung f{\"u}r kleinere Unternehmen am Beispiel von OpenZFS und Microsoft Storage Spaces}, doi = {10.25933/opus4-2724}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-27240}, school = {Technische Hochschule Brandenburg}, year = {2021}, abstract = {Mit zunehmender Digitalisierung m{\"u}ssen immer mehr Daten gelagert werden, insbesondere im kommerziellen Bereich. Auch kleinere Unternehmen, welche nicht im IT-Bereich t{\"a}tig sind, sind davon betroffen. Klassische, professionelle Speicherl{\"o}sungen sind oftmals aufw{\"a}ndig zu administrieren und zu inflexibel f{\"u}r solche Unternehmen. Microsoft Storage Spaces und OpenZFS sind zwei RAID-{\"a}hnliche Systeme zur Virtualisierung von Speicherplatz. Die Systeme entspringen sehr unterschiedlichen Philosophien. Storage Spaces wird sowohl f{\"u}r den Konsumentenmarkt als auch den professionellen Bereich vermarktet. Und von Microsoft als anwenderfreundliche Alternative zu RAID angesehen. Es handelt sich um ein propriet{\"a}res System, welches großfl{\"a}chig auf die Features des unterliegenden Betriebssystems (Windows oder Windows Server) zur{\"u}ckgreift. Die Funktionalit{\"a}t ist hierbei auf Desktop Betriebssystemen gegen{\"u}ber Server Betriebssystemen stark eingeschr{\"a}nkt. OpenZFS dagegen stammt urspr{\"u}nglich aus der Datacenter-Anwendung von Sun Microsystems und sp{\"a}ter der Oracle Corporation. Es wird mittlerweile als Free Open Source Software durch das OpenZFS Project vertrieben und findet viele Anh{\"a}nger im SOHO-Bereich. Es ist f{\"u}r eine Vielzahl von Betriebssystemen verf{\"u}gbar, wird allerdings prim{\"a}r unter Linux entwickelt. Beide Systeme bieten eine Vielzahl an zus{\"a}tzlichen Features an, welche traditionelle RAID-Systeme lediglich {\"u}ber zus{\"a}tzliche Software bieten k{\"o}nnen. OpenZFS bietet hierbei, aufgrund seines Aufbaus, tiefere Integration. Initiale Kostenfaktoren sind im Falle von Storages Spaces deutlich h{\"o}her, da f{\"u}r die Nutzung aller Features eine aktuelle Windows Server Lizenz ben{\"o}tigt wird. OpenZFS ist selbst kostenfrei, und}, language = {de} } @masterthesis{Weidner2012, type = {Bachelor Thesis}, author = {Weidner, Wolfram}, title = {Evaluation von SQL- und NoSQL-Datenbanksystemen zur Speicherung medizinischer Messdaten}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus-802}, school = {Technische Hochschule Brandenburg}, year = {2012}, abstract = {Diese Bachelorarbeit befasst sich mit der Evaluierung einer SQL- und NoSQL-Datenbankl{\"o}sung zur Speicherung der anfallenden medizinischen Messdaten im Fachbereich Informatik und Medien der Fachhochschule Brandenburg. Im Studiengang Medizininformatik werden im Laufe des Studiums viele Versuche mit den unterschiedlichsten medizinischen Messger{\"a}ten, wie zum Beispiel EKG, EEG, EMG,Shimmer u.a. durchgef{\"u}hrt. Bei diesen Versuchen m{\"u}ssen teilweise sehr große Mengen an Messdaten gespeichert werden. Im weiteren Verlauf des Studiums werden diese Daten analysiert und ausgewertet. Da es noch kein Konzept zur effizienten Haltung der Daten in einem Datenbanksystem gibt und diese zurzeit in vielen verschiedenen Formaten im Dateisystem eines Servers zwischengespeichert werden, wurde in dieser Arbeit eine m{\"o}glichst effiziente Datenbankl{\"o}sung gesucht, implementiert und getestet.}, subject = {NoSQL-Datenbanksystem}, language = {de} } @misc{WeberSteinPilgermannetal.2023, author = {Weber, Simon and Stein, Stefan and Pilgermann, Michael and Schrader, Thomas}, title = {Attack Detection for Medical Cyber- Physical Systems - The Visualization}, doi = {10.25933/opus4-2914}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-29142}, year = {2023}, abstract = {Attack Detection for Medical Cyber-Physical Systems - The Visualization}, language = {en} } @techreport{WeberPilgermannSteinetal.2024, author = {Weber, Simon and Pilgermann, Michael and Stein, Stefan and Schrader, Thomas}, title = {SzA4Hosp - Systeme zur Angriffserkennung in der Medizinischen Versorgung}, organization = {Technische Hochschule Brandenburg}, doi = {10.25933/opus4-3207}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32075}, pages = {85}, year = {2024}, abstract = {Dieser Abschlussbericht stellt das Ergebnis der Projektarbeit {\"u}ber die Implementierung von Systemen zur Angriffserkennung (SzA) in deutschen Krankenh{\"a}usern im Kontext des IT-Sicherheitsgesetzes 2.0 und des branchenspezifischen Sicherheitsstandards (B3S) f{\"u}r die medizinische Versorgung dar. Ziel des Projekts war es, den aktuellen Umsetzungsstand von SzA in deutschen Krankenh{\"a}usern zu analysieren und Handlungsempfehlungen f{\"u}r die Weiterentwicklung des B3S zu erarbeiten. Die Analyse basiert auf einer umfangreichen Befragung von Krankenhausbetreibern, Expertengespr{\"a}chen sowie der Auswertung relevanter nationaler und internationaler Standards und Good Practices. Die Ergebnisse zeigen deutliche Unterschiede im Reifegrad der SzA-Implementierung zwischen verschiedenen Bereichen, wobei die Informationstechnik branchenweit am fortgeschrittensten ist. Der Bericht bietet konkrete Vorschl{\"a}ge zur Verbesserung der IT-Sicherheitslage in Krankenh{\"a}usern und betont die Notwendigkeit kontinuierlicher Weiterentwicklungen der SzA-Systeme, um den steigenden Anforderungen der IT-Sicherheit in der station{\"a}ren Versorgung gerecht zu werden.}, subject = {Computersicherheit}, language = {de} } @article{WeberSteinPilgermannetal.2023, author = {Weber, Simon B. and Stein, Stefan and Pilgermann, Michael and Schrader, Thomas}, title = {Attack Detection for Medical Cyber-Physical Systems - A Systematic Literature Review}, series = {IEEE Access}, journal = {IEEE Access}, number = {11}, publisher = {IEEE}, doi = {10.1109/ACCESS.2023.3270225}, pages = {41796 -- 41815}, year = {2023}, abstract = {The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain's unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected.}, language = {en} } @inproceedings{WagnerKitzelmannBoersch2025, author = {Wagner, Robin and Kitzelmann, Emanuel and Boersch, Ingo}, title = {Mitigating Hallucination by Integrating Knowledge Graphs into LLM Inference - a Systematic Literature Review}, series = {Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 4: Student Research Workshop)}, booktitle = {Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 4: Student Research Workshop)}, publisher = {Association for Computational Linguistics}, address = {Vienna}, doi = {10.18653/v1/2025.acl-srw.53}, pages = {795 -- 805}, year = {2025}, abstract = {Large Language Models (LLMs) demonstrate strong performance on different language tasks, but tend to hallucinate - generate plausible but factually incorrect outputs. Recently, several approaches to integrate Knowledge Graphs (KGs) into LLM inference were published to reduce hallucinations. This paper presents a systematic literature review (SLR) of such approaches. Following established SLR methodology, we identified relevant work by systematically search in different academic online libraries and applying a selection process. Nine publications were chosen for indepth analysis. Our synthesis reveals differences and similarities of how the KG is accessed, traversed, and how the context is finally assembled. KG integration can significantly improve LLM performance on benchmark datasets and additionally to mitigate hallucination enhance reasoning capabilities, explainability, and access to domain-specific knowledge. We also point out current limitations and outline directions for future work.}, language = {en} } @inproceedings{VielhauerLoewePilgermann2025, author = {Vielhauer, Claus and Loewe, Fabian and Pilgermann, Michael}, title = {Towards Modeling Hidden \& Steganographic Malware Communication based on Images}, series = {IH\&MMSEC '25: ACM Workshop on Information Hiding and Multimedia Security, San Jose, CA, USA, 2025}, booktitle = {IH\&MMSEC '25: ACM Workshop on Information Hiding and Multimedia Security, San Jose, CA, USA, 2025}, doi = {10.1145/3733102.3733152}, pages = {52 -- 63}, year = {2025}, abstract = {Recently, an increasing number of IT security incidents involving malware, which makes use of hidden and steganographic channels for malicious communication (a.k.a. as "stegomalware"), can be observed in the wild. Especially the use of images to hide malicious code is rising. In consideration of this shift, a new model is proposed in this paper, which aims to help security professionals to identify and analyze incidents revolving around steganographic malware in the future. The model focuses on practical aspects of steganalysis of communication data to elaborate linking properties to previous code analysis knowledge. The model features two distinct roles that interact with a knowledge base which stores malware features and helps building a context for the incident. For evaluation, two image steganography malware types are chosen from popular databases (malpedia and MITRE ATT\&CK®), which are analyzed in multiple steps including steganalysis and code analysis. It is conceptually shown, how the extracted features can be stored in a knowledge base for later use to identify stegomalware from communication data without the need of a thorough code analysis. This allows to uncover previously hidden meta-information about the examined malicious programs, enrich the incident's forensic context traces and thus allows for thorough forensic insights, including attribution and improved preventive security measures in the future.}, language = {en} } @article{VaherTammSalusetal.2023, author = {Vaher, Ivi and Tamm, Anna-Liisa and Salus, Marit and Reisberg, Kirkke and V{\"a}hi, Aleksandra and Pallon, Helena and Paeste, Andra and Pirk, B{\"a}thel-Betty and Merila, Margus and Schrader, Thomas}, title = {Effectiveness of massage chair and classic massage in recovery from physical exertion: a pilot study}, series = {Journal of Novel Physiotherapy and Rehabilitation}, volume = {2023}, journal = {Journal of Novel Physiotherapy and Rehabilitation}, number = {7}, publisher = {HSPI}, doi = {10.29328/journal.jnpr.1001050}, pages = {8 -- 15}, year = {2023}, abstract = {Quick and cost-effective recovery is foundational to high-quality training and good competition results in today's sports. The aim of the research was to elucidate the effects of hand and massage chair massage on the biomechanical parameters of muscles of lower limbs and back, indicators of Pain Pressure Thresholds (PPT) and subjectively perceived fatigue. A total of 32 female recreational athletes (18 - 50 years old) were assigned to a hand massage, massage chair, or lying down the group. They were measured for muscle biomechanical properties (MyotonPro), PPT (Wagner Instruments) and subjectively perceived fatigue (VAS scale) before and after fatigue tests and treatment. The recovery procedure and subjective satisfaction with treatment were rated on a Likert scale. Changes in the median value of m. rectus femoris and m. gastrocnemius stiffness with treatment showed that hand massage could be more effective in reducing stiffness, as compared to chair massage. Hand massage may have benefits for recovery from physical exertion, but due to the individuality of subjects, detailed methodological studies are needed to evaluate the effects of massage chair vs. hand massage.}, language = {en} } @unpublished{TusetPeiroPilgermannPeguerolesetal.2025, author = {Tuset-Peiro, Pere and Pilgermann, Michael and Pegueroles, Josep and Vilajosana, Xavier}, title = {Assessing Cybersecurity of Internet-Facing Medical IT Systems in Germany \& Spain Using OSINT Tools}, doi = {10.20944/preprints202503.1340.v1}, pages = {190 -- 197}, year = {2025}, abstract = {This paper investigates cybersecurity threats in medical IT (Information Technology) systems exposed to the Internet. To that end, we develop a methodology and build a data processing pipeline that allows to gather data from different OSINT (Open Source Intelligence) sources, and processes it to obtain relevant cybersecurity metrics. To validate its operation and usefulness, we apply it to two countries, Germany and Spain, allowing to study the main threats that affect medical IT systems in these countries. Our initial findings reveal that 20\% of German hosts and 15\% of Spanish hosts tagged as medical devices have at least one CVE (Common Vulnerabilities and Exposures) with a CVSS (Common Vulnerability Scoring System) graded as critical (i.e., value 8 or greater). Moreover, we found that 74\% of CVEs found in German hosts are dated from earlier than 2020, whereas for Spanish hosts the percentage is 60\%. This indicates that medical IT systems exposed to the Internet are seldom updated, which further increases their exposure to cyberthreats. Based on these initial findings, we finish the paper providing some insights on how to improve cybersecurity of these systems.}, language = {en} } @misc{Trunz2009, type = {Master Thesis}, author = {Trunz, Frank}, title = {Erstellung digitaler Panoramen unter Ber{\"u}cksichtigung von High Dynamic Range Imaging zur Darstellung im Internet}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus-689}, school = {Technische Hochschule Brandenburg}, year = {2009}, abstract = {1. Einleitung 2. Grundlagen der Fotografie 2.1. Grundbegriffe 2.1.1. Brennweite 2.1.2. Blende 2.1.3. Belichtungszeit / Verschlusszeit 2.2. Objektive 2.3. Abbildungsfehler 2.3.1. Verzeichnungen 2.3.2. Perspektivische Verzerrung 2.3.3. Vignettierung 2.3.4. Chromatische Aberration 3. Panoramen 3.1. Ursprung und Entwicklungen 3.2. Projektion digitaler Panoramen 3.2.1. Planare Panoramen 3.2.2. Zylindrische Panoramen 3.2.3. Sph{\"a}rische Panoramen 3.2.4. Kubische Panoramen 3.3. Workflow zur Erstellung eines digitalen Panoramas 3.4. Ausr{\"u}stung 3.4.1. Kamera 3.4.2. Objektiv 3.4.3. Stativ und Panoramakopf 3.5. Die Aufnahme 3.5.1. {\"U}berlappung und Anzahl der Bilder 3.5.2. Nodalpunkt 3.5.3. Kameraeinstellungen 3.6. Stitching 4. High Dynamic Range Imaging 4.1. Einf{\"u}hrung 4.2. Kontrastunterschiede von Auge und 4.3. Aufnahme von HDR-Bildern 4.4. Erstellen von HDR-Bildern 4.5. Tonemapping 4.5.1. Globale Operatoren 4.5.2. Lokale Operatoren 5. HDR-Panoramen 5.1. Die Aufnahme 5.2. Workflow 5.2.1. Variante 1: HDRI nach dem Stitchen 5.2.2. Variante 2: HDRI vor dem Stitchen 5.2.3. Variante 3: Direktes HDR-Stitching 6. Ver{\"o}ffentlichung auf Webseiten 6.1. Anforderungen 6.2. QuickTime VR 6.3. Java 6.4. Flash 6.5. Zusammenfassung 7. HDRI-Software 7.1. Photomatix Pro 7.2. FDR Tools 7.3. Photoshop 8. Panorama-Software 8.1. Autostitch 8.2. Autopano Pro 8.3. PTGui 8.4. Panorama Studio 8.5. Photoshop 9. Fazit und Ausblick 10. Literaturverzeichnis}, language = {de} } @misc{Treffer2022, type = {Master Thesis}, author = {Treffer, Angelika}, title = {Design digitaler Lernmedien zur Quellenkompetenzvermittlung}, doi = {10.25933/opus4-2896}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-28961}, school = {Technische Hochschule Brandenburg}, pages = {121}, year = {2022}, abstract = {IK als Schl{\"u}sselkonzept in der Hochschulbildung beinhaltet neben anderen F{\"a}higkeiten auch den Bereich der Quellenkompetenz. Diese beschreibt die F{\"a}higkeit, Quellen hinsichtlich ihrer Qualit{\"a}t und ihrer Funktion kritisch zu bewerten. Um diese F{\"a}higkeit zu verbessern, wurde das HUMAN-Modell von Baldarelli et al. entwickelt. Ziel dieser Arbeit ist es, dieses HUMAN-Modell in E-Learning-Modulen zur Informationskompetenzvermittlung digital umzusetzen und die Auswirkungen des neuen Ansatzes zu evaluieren. Zu diesem Zweck werden zun{\"a}chst neue Lernmodule nach dem Human-Centered Design Ansatz entworfen und implementiert. Anschließend erfolgt die Evaluation des Moduls in einer Mixed-Methods-Untersuchung in zwei Bachelorseminargruppen zweier aufeinanderfolgender Jahrg{\"a}nge, die abgesehen von den neuen Lernmodule ein vergleichbares Treatment erhalten. Basierend auf Pre- und Post-Tests, Leistungsnachweisen und der Moodle-Aktivit{\"a}t beider Gruppen soll gemessen werden, inwiefern sich die Leistung und die Performance durch den Einsatz des neuen Lernmoduls ver{\"a}ndert haben. Die Ergebnisse zeigen, dass der Leistungszuwachs zwischen Pre- und Post-Test in der HUMAN-Gruppe leicht h{\"o}her ist als in der Vergleichsgruppe, insbesondere in Bezug auf den Bereich Quellenbeurteilung. Weiterhin zeigt die Analyse des schriftlichen Leistungsnachweises, dass die wissenschaftliche Qualit{\"a}t der zitierten Quellen in der Literaturliste bei der HUMAN-Gruppe gr{\"o}ßer ist, auch wenn die Gesamtperformanz der Studierenden sich nicht verbessert hat. Zur weiteren Analyse w{\"a}re es sinnvoll, die Quellen- zusammensetzung der Studierenden in der Bachelorarbeit zu untersuchen, um auch langfristige Auswirkungen zu evaluieren.}, subject = {Informationskompetenz}, language = {de} } @unpublished{TranconyWidemannLepper, author = {Tranc{\´o}n y Widemann, Baltasar and Lepper, Markus}, title = {A theory of conversion relations for prefixed units of measure}, doi = {10.48550/arXiv.2212.11580}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-31984}, pages = {1 -- 45}, abstract = {Units of measure with prefixes and conversion rules are given a formal semantic model in terms of categorial group theory. Basic structures and both natural and contingent semantic operations are defined. Conversion rules are represented as a class of ternary relations with both group-like and category-like properties. A hierarchy of subclasses is explored, each satisfying stronger useful algebraic properties than the preceding, culminating in a direct efficient conversion-by-rewriting algorithm.}, language = {en} } @inproceedings{TranconyWidemannLepper2024, author = {Tranc{\´o}n y Widemann, Baltasar and Lepper, Markus}, title = {Imagine There's No Source Code: Replay Diagnostic Location Information in Dynamic EDSL Meta-programming}, series = {MPLR 2024: Proceedings of the 21st ACM SIGPLAN International Conference on Managed Programming Languages and Runtimes}, booktitle = {MPLR 2024: Proceedings of the 21st ACM SIGPLAN International Conference on Managed Programming Languages and Runtimes}, editor = {Ertl, M. Anton and Kirsch, Christoph M.}, publisher = {ACM}, address = {New York}, doi = {10.1145/3679007.3685061}, pages = {1 -- 11}, year = {2024}, abstract = {Programs in embedded domain-specific languages are realized as graphs of objects of the host language rather than as static input texts. This property enables dynamic meta-programming, but also makes it harder to attach location information to diagnostic messages that arise at a later stage, after the program graph construction. Thus, EDSL-generating expressions and algorithms can be difficult to debug. Here, we present a technique for transparently capturing and replaying location information about the origin of EDSL program objects. It has been implemented in the context of the LLJava-live EDSL-to-bytecode compiler framework on the JVM. The basic idea can be generalized to other contexts, and to any managed runtime environment with reified stack traces}, language = {en} } @inproceedings{TetzlaffPurohitSpalleketal.2023, author = {Tetzlaff, Laura and Purohit, Anne-Maria and Spallek, Jacob and Holmberg, Christine and Schrader, Thomas}, title = {Evaluating Interoperability in German Critical Incident Reporting Systems}, series = {German Medical Data Sciences 2023 - Science. Close to People. Proceedings of the 68th Annual Meeting of the German Association of Medical Informatics, Biometry, and Epidemiology e.V. (gmds) 2023, Heilbronn, Germany}, booktitle = {German Medical Data Sciences 2023 - Science. Close to People. Proceedings of the 68th Annual Meeting of the German Association of Medical Informatics, Biometry, and Epidemiology e.V. (gmds) 2023, Heilbronn, Germany}, publisher = {IOS Press}, doi = {10.3233/SHTI230722}, pages = {249 -- 257}, year = {2023}, abstract = {In industrialised countries, one in ten patients suffers harm during hospitalization. Critical Incident Reporting Systems (CIRS) aim to minimize this by learning from errors and identifying potential risks. However, a lack of interoperability among the 16 CIRS in Germany hampers their effectiveness.}, language = {en} } @masterthesis{Struck2021, type = {Bachelor Thesis}, author = {Struck, Ingo}, title = {IT-Grundschutz f{\"u}r Container-Plattformen}, doi = {10.25933/opus4-2671}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-26711}, school = {Technische Hochschule Brandenburg}, pages = {100}, year = {2021}, abstract = {Im Rahmen dieser Arbeit wird die Architektur einer Cloud-Infrastruktur als Betriebsplattform f{\"u}r Software-as-a-Service-Angebote entworfen, die auf Basis von Software-Containern funktioniert. Sie soll nach den Anforderungen des Bundesamts f{\"u}r Sicherheit in der Informationstechnik abgesichert werden. Angelehnt an eine der drei Vorgehensweisen des BSI-Standards 200-2 werden die wesentlichen Komponenten dieser Plattform als Informationsverbund definiert. Zudem werden f{\"u}r diese Teile Auswahlkriterien aus den Bausteinen des IT-Grundschutz-Kompendiums und den allgemeinen Empfehlungen der Fachliteratur nach Stand der Technik abgeleitet. Optionen f{\"u}r die einzelnen Komponenten und Strukturen werden vorgestellt. Anhand der vorher definierten Kriterien wird eine Auswahl getroffen und ein Entwurf konstruiert. Abschließend wird dieser Entwurf hinsichtlich des erzielbaren Schutzniveaus bewertet und als Ausblick die M{\"o}glichkeit betrachtet, eine Umsetzung des Entwurfs nach ISO 27001 basierend auf dem IT-Grundschutz zertifizieren zu lassen.}, subject = {SaaS }, language = {de} } @article{SteinPilgermannWeberetal.2025, author = {Stein, Stefan and Pilgermann, Michael and Weber, Simon and Sedlmayr, Martin}, title = {Leveraging MDS2 and SBOM data for LLM-assisted vulnerability analysis of medical devices}, series = {Computational and Structural Biotechnology Journal}, volume = {28}, journal = {Computational and Structural Biotechnology Journal}, publisher = {Elsevier}, doi = {10.1016/j.csbj.2025.07.012}, pages = {267 -- 280}, year = {2025}, abstract = {This study investigated the use of a semi-automated, Retrieval-Augmented Generation (RAG)-based multi-agent architecture to analyze security-relevant data and assemble specialized exploitation paths targeting medical devices. The input dataset comprised device-specific sources, namely, the Manufacturer Disclosure Statement for Medical Device Security (MDS2) documents and Software Bills of Materials (SBOMs), enriched with public vulnerability databases, including Common Vulnerabilities and Exposures (CVE), Known Exploited Vulnerabilities (KEV), and Metasploit exploit records. The objective was to assess whether a modular, Large Language Model (LLM)-driven agent system could autonomously correlate device metadata with known vulnerabilities and existing exploit information to support structured threat modeling. The architecture follows a static RAG design based on predefined prompts and fixed retrieval logic, without autonomous agent planning or dynamic query adaptation. The developed Vulnerability Intelligence for Threat Analysis in Medical Security (VITAMedSec) system operates under human-prompted supervision and successfully synthesizes actionable insights and exploitation paths without requiring manual step-by-step input during execution. Although technically coherent results were obtained under controlled conditions, real-world validation remains a critical avenue for future research. This study further discusses the dual-use implications of such an agent-based framework, its relevance to patient safety in medical device cybersecurity, and the broader applicability of the proposed architecture to other critical infrastructure sectors. These findings emphasize both the technical potential and ethical responsibility for applying semi-automated AI workflows in medical cybersecurity contexts.}, language = {en} } @article{SteinPilgermannSedlmayr2025, author = {Stein, Stefan and Pilgermann, Michael and Sedlmayr, Martin}, title = {Systematic Evaluation of Manufacturer Disclosure Statements for Medical Device Security (MDS2) to Strengthen Hospital OT Security Measures - Lessons Learned}, series = {Studies in health technology and informatics}, volume = {331}, journal = {Studies in health technology and informatics}, doi = {10.3233/SHTI251404}, pages = {256 -- 264}, year = {2025}, abstract = {The growing number of connected medical devices in hospitals poses serious operational technology (OT) security challenges. Effective countermeasures require a structured analysis of the communication interfaces and security configurations of individual devices. State of the art: Although Manufacturer Disclosure Statements for Medical Device Security (MDS2, Version 2019) offer relevant information, they are rarely integrated into cybersecurity workflows. Existing studies are limited in scope and lack scalable methodologies for systematic evaluation. Concept: This study analyzed 209 MDS2 documents and 161 security white papers to extract structured information on ports, protocols, and protective measures. Over 52,000 question-answer pairs were converted into a machine-readable format using customized parsing and validation routines. The aim was to establish whether this dataset could inform risk assessments and future applications involving Large Language Models (LLMs). Implementation: The analysis revealed 367 distinct ports, including common protocols such as HTTPS (443), DICOM (104), and RDP (3389), as well as vendor-specific proprietary ports. Approximately 40\% of the devices used over 20 ports, indicating a broad attack surface. OCR errors and inconsistent formatting required manual corrections. A consolidated dataset was developed to support clustering, comparison across vendors and versions, and preparation for downstream LLM use, particularly via structured SBOM and configuration data. Lessons learned: Although no model training was conducted, the structured dataset can support AI-based OT security workflows. The findings highlight the critical need for up-to-date, machine-readable manufacturer data in standardized formats and schemas. Such information could greatly enhance the automation, comparability, and scalability of hospital cybersecurity measures.}, language = {en} } @misc{Steffen2025, type = {Master Thesis}, author = {Steffen, Christopher}, title = {Analyse des Entwicklungsstandes bei Zero Trust-Umgebungen sowie Konzeption und Pilotierung eines Demonstrators basierend auf Open Source Komponenten}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3301}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-33012}, school = {Technische Hochschule Brandenburg}, pages = {85}, year = {2025}, abstract = {Da sich Cyberbedrohungen stetig weiterentwickeln, m{\"u}ssen auch die defensiven Maßnahmen erweitert werden. Ein Konzept, welches sich mit derartigen Maßnahmen besch{\"a}ftigt wird als Zero Trust bezeichnet. Diese Arbeit befasst, sich mit der Analyse des Konzepts Zero Trust sowie dessen praktischer Umsetzung. Ziel ist es, den aktuellen Entwicklungsstand von Zero Trust-Umgebungen zusammenzufassen und anschließend aus den gewonnenen Erkenntnissen einen Demonstrator zu konzipieren und letztendlich umzusetzen. Dazu sollen ausschließlich Open Source Komponenten verwendet werden. Zu diesem Zweck wurden aktuelle Quellen zu Zero Trust wie NIST, CISA, BSI und wis senschaftlichen Arbeiten analysiert und deren Inhalte zusammengefasst. Aus den Inhalten wurde anschließend ein Konzept f{\"u}r die Erstellung eines Zero Trust Demonstrators erarbei tet. Die praktische Umsetzung des Demonstrators wird anschließend beschrieben sowie auf Problematiken bei der Implementierung eingegangen. Der Demonstrator konnte nicht- wie urspr{\"u}nglich konzipiert- umgesetzt werden, jedoch wurde exemplarisch dargestellt, wie die komplette Implementation ausgesehen h{\"a}tte.}, subject = {Computersicherheit}, language = {de} }