<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>2914</id>
    <completedYear>2023</completedYear>
    <publishedYear/>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst/>
    <pageLast/>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>image</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2023-05-12</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Attack Detection for Medical Cyber- Physical Systems - The Visualization</title>
    <abstract language="eng">Attack Detection for Medical Cyber-Physical Systems -&#13;
The Visualization</abstract>
    <identifier type="urn">urn:nbn:de:kobv:522-opus4-29142</identifier>
    <identifier type="doi">10.25933/opus4-2914</identifier>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="PeerReviewNachweis">nein</enrichment>
    <licence>Creative Commons - CC BY - Namensnennung 4.0</licence>
    <author>Simon Weber</author>
    <author>Stefan Stein</author>
    <author>Michael Pilgermann</author>
    <author>Thomas Schrader</author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Detection</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>IDS</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>intrusion prevention</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>medical cyber-physical systems</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>medical CPS</value>
    </subject>
    <collection role="ddc" number="004">Datenverarbeitung; Informatik</collection>
    <collection role="open_access" number="">open_access</collection>
    <collection role="institutes" number="">Fachbereich Informatik und Medien</collection>
    <collection role="Hochschulbibliografie" number="1">Hochschulbibliografie</collection>
    <thesisPublisher>Technische Hochschule Brandenburg</thesisPublisher>
    <file>https://opus4.kobv.de/opus4-fhbrb/files/2914/AttackDetectionMCPS-Visu.pdf</file>
  </doc>
  <doc>
    <id>3305</id>
    <completedYear>2023</completedYear>
    <publishedYear/>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>41796</pageFirst>
    <pageLast>41815</pageLast>
    <pageNumber/>
    <edition/>
    <issue>11</issue>
    <volume/>
    <type>article</type>
    <publisherName>IEEE</publisherName>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2023-04-25</completedDate>
    <publishedDate>2023-04-25</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Attack Detection for Medical Cyber-Physical Systems – A Systematic Literature Review</title>
    <abstract language="eng">The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain’s unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected.</abstract>
    <parentTitle language="eng">IEEE Access</parentTitle>
    <identifier type="doi">10.1109/ACCESS.2023.3270225</identifier>
    <enrichment key="PeerReviewNachweis">ja</enrichment>
    <enrichment key="opus.source">publish</enrichment>
    <licence>Creative Commons - CC BY - Namensnennung 4.0</licence>
    <author>Simon B. Weber</author>
    <author>Stefan Stein</author>
    <author>Michael Pilgermann</author>
    <author>Thomas Schrader</author>
    <collection role="open_access" number="">open_access</collection>
    <collection role="institutes" number="">Fachbereich Informatik und Medien</collection>
    <collection role="Hochschulbibliografie" number="1">Hochschulbibliografie</collection>
    <thesisPublisher>Technische Hochschule Brandenburg</thesisPublisher>
  </doc>
  <doc>
    <id>3372</id>
    <completedYear>2021</completedYear>
    <publishedYear/>
    <thesisYearAccepted/>
    <language>deu</language>
    <pageFirst>733</pageFirst>
    <pageLast>737</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume>45</volume>
    <type>article</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2025-09-15</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="deu">Angriffserkennung beim Betrieb von KRITIS gemäß IT-Sicherheitsgesetz 2.0</title>
    <abstract language="deu">Die Krankenhaus-IT sieht sich einer stetig zunehmenden Bedrohung der Sicherheit der Patientendaten und des Krankenhausbetriebes gegenüber. Der Gesundheitssektor gehört zu den Kritischen Infrastrukturen, die zunehmend strengeren Regelungen unterliegen. Jüngste Regulierung ist das IT-Sicherheitsgesetz 2.0, das unter anderem Maßnahmen zur Detektion von Angriffen fordert. Der Beitrag stellt vor, wie eine branchenspezifische Umsetzung dieser Anforderung aussehen könnte.</abstract>
    <parentTitle language="deu">Datenschutz und Datensicherheit</parentTitle>
    <identifier type="doi">10.1007/s11623-021-1525-z</identifier>
    <enrichment key="PeerReviewNachweis">nein</enrichment>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="opus.doi.autoCreate">false</enrichment>
    <enrichment key="opus.urn.autoCreate">false</enrichment>
    <licence>Keine Nutzungslizenz vergeben - es gilt das deutsche Urheberrecht</licence>
    <author>Michael Pilgermann</author>
    <author>Stefan Stein</author>
    <author>Thomas Schrader</author>
    <author>Simon Weber</author>
    <collection role="institutes" number="">Fachbereich Informatik und Medien</collection>
    <collection role="Hochschulbibliografie" number="1">Hochschulbibliografie</collection>
    <thesisPublisher>Technische Hochschule Brandenburg</thesisPublisher>
  </doc>
  <doc>
    <id>3207</id>
    <completedYear>2024</completedYear>
    <publishedYear/>
    <thesisYearAccepted/>
    <language>deu</language>
    <pageFirst/>
    <pageLast/>
    <pageNumber>85</pageNumber>
    <edition/>
    <issue/>
    <volume/>
    <type>report</type>
    <publisherName/>
    <publisherPlace/>
    <creatingCorporation>Technische Hochschule Brandenburg</creatingCorporation>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2024-07-12</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="deu">SzA4Hosp - Systeme zur Angriffserkennung in der Medizinischen Versorgung</title>
    <abstract language="deu">Dieser Abschlussbericht stellt das Ergebnis der Projektarbeit über die Implementierung von Systemen zur Angriffserkennung (SzA) in deutschen Krankenhäusern im Kontext des IT-Sicherheitsgesetzes 2.0 und des branchenspezifischen Sicherheitsstandards (B3S) für die medizinische Versorgung dar. Ziel des Projekts war es, den aktuellen Umsetzungsstand von SzA in deutschen Krankenhäusern zu analysieren und Handlungsempfehlungen für die Weiterentwicklung des B3S zu erarbeiten. Die Analyse basiert auf einer umfangreichen Befragung von Krankenhausbetreibern, Expertengesprächen sowie der Auswertung relevanter nationaler und internationaler Standards und Good Practices. Die Ergebnisse zeigen deutliche Unterschiede im Reifegrad der SzA-Implementierung zwischen verschiedenen Bereichen, wobei die Informationstechnik branchenweit am fortgeschrittensten ist. Der Bericht bietet konkrete Vorschläge zur Verbesserung der IT-Sicherheitslage in Krankenhäusern und betont die Notwendigkeit kontinuierlicher Weiterentwicklungen der SzA-Systeme, um den steigenden Anforderungen der IT-Sicherheit in der stationären Versorgung gerecht zu werden.</abstract>
    <identifier type="urn">urn:nbn:de:kobv:522-opus4-32075</identifier>
    <identifier type="doi">10.25933/opus4-3207</identifier>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="PeerReviewNachweis">nein</enrichment>
    <licence>Creative Commons - CC BY - Namensnennung 4.0</licence>
    <author>Simon Weber</author>
    <author>Michael Pilgermann</author>
    <author>Stefan Stein</author>
    <author>Thomas Schrader</author>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Computersicherheit</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Medizintechnik</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Eindringerkennung</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Kritische Infrastruktur</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Krankenhaus</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Kritische Informationsinfrastruktur</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>uncontrolled</type>
      <value>Intrusion Detection</value>
    </subject>
    <collection role="ddc" number="000">Informatik, Informationswissenschaft, allgemeine Werke</collection>
    <collection role="open_access" number="">open_access</collection>
    <collection role="institutes" number="">Fachbereich Informatik und Medien</collection>
    <collection role="Hochschulbibliografie" number="1">Hochschulbibliografie</collection>
    <thesisPublisher>Technische Hochschule Brandenburg</thesisPublisher>
    <file>https://opus4.kobv.de/opus4-fhbrb/files/3207/Abschlussbericht02.pdf</file>
  </doc>
  <doc>
    <id>3241</id>
    <completedYear>2024</completedYear>
    <publishedYear/>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>160506</pageFirst>
    <pageLast>160515</pageLast>
    <pageNumber/>
    <edition/>
    <issue>12</issue>
    <volume/>
    <type>article</type>
    <publisherName>IEEE</publisherName>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2024-11-29</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">A Novel Approach to Medical Device IT Security Landscape Analysis Leveraging Manufacturer Disclosure Statements</title>
    <abstract language="eng">The growing number of cyberattacks targeting the healthcare sector increasingly threatens network-enabled medical devices that are vital for life-sustaining patient care. Security researchers and healthcare IT managers are pursuing effective methods to assess the IT security landscape of medical devices. Their goal is to develop a comprehensive understanding of the devices’ IT security status. Recent studies have successfully uncovered structural deficiencies in medical device security. However, the limitations of their data sources, particularly in evaluating features like logging capabilities and third-party libraries, restrict the scope of their findings. In this study, we present the first systematic analysis of Manufacturer Disclosure Statement for Medical Device Security (MDS2) documents to evaluate their use in creating holistic statements regarding the IT security posture of medical devices. We examined a total of 147 MDS2 documents encompassing devices from 105 different classes. Our findings indicate that MDS2 documents, especially those from the second version (2013) onwards, are suitable for this purpose. We also discuss the shortcomings of the latest MDS2 version in meeting current IT security requirements. Based on the gaps identified, we developed several recommendations to improve MDS2 documents and enhance their effectiveness across the global healthcare sector. In the future, these documents could be used not only for comprehensive landscape analyses but also for organization-specific reports, providing healthcare managers with direct insights into the IT security status within their institutions.</abstract>
    <parentTitle language="eng">IEEE Access</parentTitle>
    <identifier type="doi">10.1109/ACCESS.2024.3487824</identifier>
    <identifier type="issn">2169-3536</identifier>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="PeerReviewNachweis">ja</enrichment>
    <licence>Creative Commons - CC BY - Namensnennung 4.0</licence>
    <author>Stefan Stein</author>
    <author>Simon Weber</author>
    <author>Michael Pilgermann</author>
    <author>Thomas Schrader</author>
    <author>Martin Sedlmayr</author>
    <collection role="institutes" number="">Fachbereich Informatik und Medien</collection>
    <collection role="Hochschulbibliografie" number="1">Hochschulbibliografie</collection>
    <thesisPublisher>Technische Hochschule Brandenburg</thesisPublisher>
  </doc>
</export-example>
