TY - INPR A1 - Trancón y Widemann, Baltasar A1 - Lepper, Markus T1 - A theory of conversion relations for prefixed units of measure N2 - Units of measure with prefixes and conversion rules are given a formal semantic model in terms of categorial group theory. Basic structures and both natural and contingent semantic operations are defined. Conversion rules are represented as a class of ternary relations with both group-like and category-like properties. A hierarchy of subclasses is explored, each satisfying stronger useful algebraic properties than the preceding, culminating in a direct efficient conversion-by-rewriting algorithm. Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-31984 UR - https://arxiv.org/abs/2212.11580v5 SP - 1 EP - 45 ER - TY - JOUR A1 - Yüksel, Benjamin A1 - Schwarz, Klaus A1 - Creutzburg, Reiner T1 - AI-based anomaly detection for cyberattacks on Windows systems-Creation of a prototype for automated monitoring of the process environment JF - Electronic Imaging KW - anomaly detection KW - artificial intelligence KW - Automated Windows system monitoring KW - cybersecurity KW - machine learning KW - neural networks Y1 - 2020 U6 - https://doi.org/10.2352/ISSN.2470-1173.2020.3.MOBMU-331 SN - 2470-1173 SP - 331-1 EP - 331-13 PB - Society for Imaging Science and Technology CY - Springfield, VA ER - TY - JOUR A1 - Pfeiffer, Thomas A1 - Dilip, Khadse Himanshu A1 - Suryawanshi, Raunak A1 - Kishnamurthy, Gnana Swaroop A1 - Téllez, Batcheva Domínguez A1 - Creutzburg, Reiner A1 - Hartmann, Michael T1 - Airflow visualization and air purifier positioning optimization in potentially COVID-19 contaminated classrooms JF - Electronic Imaging KW - Covid-19 KW - aeroso KW - airflow visualization Y1 - 2021 U6 - https://doi.org/10.2352/ISSN.2470-1173.2021.3.MOBMU-039 SN - 2470-1173 SP - 39-1 EP - 39-15 PB - Society for Imaging Science and Technology CY - Springfield, VA ER - TY - THES A1 - Steffen, Christopher T1 - Analyse des Entwicklungsstandes bei Zero Trust-Umgebungen sowie Konzeption und Pilotierung eines Demonstrators basierend auf Open Source Komponenten N2 - Da sich Cyberbedrohungen stetig weiterentwickeln, müssen auch die defensiven Maßnahmen erweitert werden. Ein Konzept, welches sich mit derartigen Maßnahmen beschäftigt wird als Zero Trust bezeichnet. Diese Arbeit befasst, sich mit der Analyse des Konzepts Zero Trust sowie dessen praktischer Umsetzung. Ziel ist es, den aktuellen Entwicklungsstand von Zero Trust-Umgebungen zusammenzufassen und anschließend aus den gewonnenen Erkenntnissen einen Demonstrator zu konzipieren und letztendlich umzusetzen. Dazu sollen ausschließlich Open Source Komponenten verwendet werden. Zu diesem Zweck wurden aktuelle Quellen zu Zero Trust wie NIST, CISA, BSI und wis senschaftlichen Arbeiten analysiert und deren Inhalte zusammengefasst. Aus den Inhalten wurde anschließend ein Konzept für die Erstellung eines Zero Trust Demonstrators erarbei tet. Die praktische Umsetzung des Demonstrators wird anschließend beschrieben sowie auf Problematiken bei der Implementierung eingegangen. Der Demonstrator konnte nicht- wie ursprünglich konzipiert- umgesetzt werden, jedoch wurde exemplarisch dargestellt, wie die komplette Implementation ausgesehen hätte. KW - Computersicherheit KW - Informationssicherheit KW - Sicherheitsplanung Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-33012 PB - Technische Hochschule Brandenburg CY - Brandenburg an der Havel ER - TY - RPRT A1 - Brucker, Amelie T1 - Analyse von Cyber Threat Intelligence Quellen aus dem Projekt SzA4Hosp N2 - Im Rahmen des Projekts "SzA4Hosp - Systeme zur Angriffserkennung in der Medizinischen Versorgung" wurde eine Erhebung für deutsche Krankenhäuser durchgeführt, bei der genutzte Quellen für Cyber Threat Intelligence identifiziert wurden. Diese Arbeit stellt die 41 dabei erfassten Quellen hinsichtlich verschiedener Attribute wie Format, Inhalt und Bereitstellungsmodell vor. Abschließend erfolgt eine übergreifende Auswertung der Quellen in Bezug auf die Formate, in denen sie Informationen bereitstellen. Es wird gezeigt, dass die Verwendung von natürlicher Sprache in den untersuchten Quellen deutlich verbreiteter ist, als der Einsatz strukturierter Formate. KW - Computersicherheit KW - Medizinische Einrichtung KW - Cyberattacke Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-32741 PB - Technische Hochschule Brandenburg CY - Brandenburg an der Havel ER - TY - JOUR A1 - Kant, Daniel A1 - Johannsen, Andreas A1 - Creutzburg, Reiner T1 - Analysis of IoT Security Risks based on the exposure of the MQTT Protocol JF - IS and T International Symposium on Electronic Imaging Science and Technology KW - Internet of Things KW - Industrial Internet of Thing KW - IoT KW - IIoT KW - MQTT KW - IoT protocol KW - IIoT protocol KW - IoT security KW - IIoT security KW - MQTT vulnerability Y1 - 2021 UR - https://itwirtschaft.de/wp-content/uploads/2021/02/2021_Electronic-Imaging_IoT_Security-BASIC-1.pdf U6 - https://doi.org/10.2352/ISSN.2470-1173.2021.3.MOBMU-096 N1 - Paper was created within the German program "Mittelstand (SME) 4.0 - Competence Center for IT Economy" of the Ministry for Economic Affairs and Energy VL - 33 SP - 096-1 EP - 096-8 PB - Society for Imaging Science and Technology (IS&T) ER - TY - THES A1 - Ferneding, Conrad T1 - Analysis of Vulnerability CVE-2024-3094 in XZ Utils: Precedent Supply Chain Attack and Incident Analysis N2 - This thesis falls within the domain of cybersecurity and computer science, specifically focusing on the vulnerability CVE-2024-3094, which has a CVSS score of 10, discovered in late March of 2024. It integrates methodologies from network security, reverse engineering, and OSINT to thoroughly investigate this vulnerability. An aspect of this thesis will be the exploration of the incident and its social engineering campaign that led to a threat actor becoming a maintainer of XZ Utils. Another part of this work will be the analysis of how the vulnerability in XZ Utils affects SSH and whether SSH authentication is compromised by this vulnerability. The objective is to conduct a Proof of Concept (PoC) to demonstrate the presence of the backdoor. KW - Computersicherheit KW - Reverse Engineering KW - Social Engineering Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-32278 PB - Technische Hochschule Brandenburg CY - Brandenburg an der Havel ER - TY - THES A1 - Henker, Maik T1 - Anwendung der IT-Grundschutz-Methodik auf die IT-gestützte Personal- und Gebäudeverwaltung einer Landesbehörde N2 - Eine Landesbehörde in Sachsen ist zum Schutz vor Cyberangriffen gesetzlich verpflichtet ein Informationssicherheitsmanagementsystem zu errichten. Die dafür nötigen Voraussetzungen wie die Einbindung der Leitungsebene und die Erstellung eines Sicherheitskonzeptes liegen bisher nicht vor. Für den Einstieg in die Informationssicherheit veranschaulicht diese Bachelorarbeit die Anwendung der IT-Grundschutz-Methodik des BSI. Zur Komplexitätsreduzierung wurde methodisch die Kernabsicherung nach BSI 200-2 zunächst für die Personalverwaltung und die Gebäudeverwaltung durchgeführt. Im Anschluss wurden Teile der unterstützenden IT-Systeme analysiert. Als Ergebnis der Strukturanalyse, Schutzbedarfsfeststellung, Risikoanalyse und des interviewgestützten Soll-Ist-Vergleiches entstand ein Sicherheitskonzept. Aus dessen Umsetzungstand wurde ein Umsetzungsplan entwickelt. N2 - A state authority in saxony is obligated by law to establish a Management Systems for Information Security to protect them against cyber-attacks. The necessary pre-conditions like accepting the responsibility by the top management and drawing up a security concept are not present yet. To initiate information security these bachelor thesis shows the usage of IT-Grundschutz Methodology. Cause for reducing complexity the core protection from BSI 200-2 was proceeded for personnel administration and for building management for the moment. Afterward parts of the supporting IT systems have been analysed. In result of structure analysis, protection needs, risk analysis and interview-based gap analysis a security concept was developed. On its state an implementation order has been developed. KW - IT-Grundschutz KW - BSI-Standard 200 KW - Informationssicherheit KW - Informationssicherheitskonzept KW - Öffentliche Verwaltung KW - IT-Grundschutz KW - BSI Standards 200 KW - information security KW - security concept KW - public administration Y1 - 2022 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-28381 ER - TY - THES A1 - Werse, Otto-Leander T1 - Anwendungsmöglichkeiten von Speichervirtualisierung für kleinere Unternehmen am Beispiel von OpenZFS und Microsoft Storage Spaces N2 - Mit zunehmender Digitalisierung müssen immer mehr Daten gelagert werden, insbesondere im kommerziellen Bereich. Auch kleinere Unternehmen, welche nicht im IT-Bereich tätig sind, sind davon betroffen. Klassische, professionelle Speicherlösungen sind oftmals aufwändig zu administrieren und zu inflexibel für solche Unternehmen. Microsoft Storage Spaces und OpenZFS sind zwei RAID-ähnliche Systeme zur Virtualisierung von Speicherplatz. Die Systeme entspringen sehr unterschiedlichen Philosophien. Storage Spaces wird sowohl für den Konsumentenmarkt als auch den professionellen Bereich vermarktet. Und von Microsoft als anwenderfreundliche Alternative zu RAID angesehen. Es handelt sich um ein proprietäres System, welches großflächig auf die Features des unterliegenden Betriebssystems (Windows oder Windows Server) zurückgreift. Die Funktionalität ist hierbei auf Desktop Betriebssystemen gegenüber Server Betriebssystemen stark eingeschränkt. OpenZFS dagegen stammt ursprünglich aus der Datacenter-Anwendung von Sun Microsystems und später der Oracle Corporation. Es wird mittlerweile als Free Open Source Software durch das OpenZFS Project vertrieben und findet viele Anhänger im SOHO-Bereich. Es ist für eine Vielzahl von Betriebssystemen verfügbar, wird allerdings primär unter Linux entwickelt. Beide Systeme bieten eine Vielzahl an zusätzlichen Features an, welche traditionelle RAID-Systeme lediglich über zusätzliche Software bieten können. OpenZFS bietet hierbei, aufgrund seines Aufbaus, tiefere Integration. Initiale Kostenfaktoren sind im Falle von Storages Spaces deutlich höher, da für die Nutzung aller Features eine aktuelle Windows Server Lizenz benötigt wird. OpenZFS ist selbst kostenfrei, und KW - Microsoft Storage Spaces KW - OpenZFS KW - RAID KW - Speichervirtualisierung Y1 - 2021 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-27240 ER - TY - INPR A1 - Tuset-Peiro, Pere A1 - Pilgermann, Michael A1 - Pegueroles, Josep A1 - Vilajosana, Xavier T1 - Assessing Cybersecurity of Internet-Facing Medical IT Systems in Germany & Spain Using OSINT Tools N2 - This paper investigates cybersecurity threats in medical IT (Information Technology) systems exposed to the Internet. To that end, we develop a methodology and build a data processing pipeline that allows to gather data from different OSINT (Open Source Intelligence) sources, and processes it to obtain relevant cybersecurity metrics. To validate its operation and usefulness, we apply it to two countries, Germany and Spain, allowing to study the main threats that affect medical IT systems in these countries. Our initial findings reveal that 20% of German hosts and 15% of Spanish hosts tagged as medical devices have at least one CVE (Common Vulnerabilities and Exposures) with a CVSS (Common Vulnerability Scoring System) graded as critical (i.e., value 8 or greater). Moreover, we found that 74% of CVEs found in German hosts are dated from earlier than 2020, whereas for Spanish hosts the percentage is 60%. This indicates that medical IT systems exposed to the Internet are seldom updated, which further increases their exposure to cyberthreats. Based on these initial findings, we finish the paper providing some insights on how to improve cybersecurity of these systems. Y1 - 2025 U6 - https://doi.org/10.20944/preprints202503.1340.v1 SP - 190 EP - 197 ER - TY - GEN A1 - Weber, Simon A1 - Stein, Stefan A1 - Pilgermann, Michael A1 - Schrader, Thomas T1 - Attack Detection for Medical Cyber- Physical Systems - The Visualization N2 - Attack Detection for Medical Cyber-Physical Systems - The Visualization KW - Detection KW - IDS KW - intrusion prevention KW - medical cyber-physical systems KW - medical CPS Y1 - 2023 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus4-29142 ER - TY - JOUR A1 - Weber, Simon B. A1 - Stein, Stefan A1 - Pilgermann, Michael A1 - Schrader, Thomas T1 - Attack Detection for Medical Cyber-Physical Systems – A Systematic Literature Review JF - IEEE Access N2 - The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain’s unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected. Y1 - 2023 U6 - https://doi.org/10.1109/ACCESS.2023.3270225 IS - 11 SP - 41796 EP - 41815 PB - IEEE ER - TY - THES A1 - Hüllein, Maurice T1 - Automatische Generierung von Bewegungsmustern für reale Roboter mit Evolutionären Algorithmen T1 - Automatic generation of movement patterns for real robots by means of evolutionary algorithms N2 - Ziel der Arbeit ist die Untersuchung einer automatischen Erzeugung von Bewegungsmustern für gegebene Robotermorphologien am Beispiel des ELFE-Laufroboters. Hierzu ist der Stand der Forschung auf dem Gebiet des maschinellen Lernens sensomotorischer Rückkopplungen mit Gütefunktional, die möglichen Repräsentationen von Bewegungsmustern und deren Lernalgorithmen im Überblick darzustellen. Der Schwerpunkt der Arbeit liegt in der Untersuchung der Anwendung von evolutionären Algorithmen, insbesondere genetischem Programmieren auf die Problemstellung. Die gewonnen Erkenntnisse sind in ein prototypisches System mit einem realen Roboter umzusetzen. Hierbei ist auf Modularisierung und die Möglichkeit zur Weiterentwicklung Wert zu legen. Wenn möglich, sollten Hypothesen über den Evolutionsverlauf am realen System aus einer Simulation abgeleitet und im Experiment evaluiert werden. Diplomarbeit Abgabe: 29.11.2006 Kolloqium: 18.12.2006 Betreuer: Dipl.-Inform. Ingo Boersch, Prof. Dr.-Ing. Jochen Heinsohn Y1 - 2006 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:522-opus-400 ER - TY - JOUR A1 - Loose, Harald T1 - Autonomous mobile robots for outdoor tasks JF - Mechanika N2 - This paper presents a low-cost hardware platform for outdoor robots, being suitable for education, industrial prototyping and private use. The choice of components is discussed, including platform, sensors and controller as well as GPS and image processing hardware. Furthermore, a software approach is proposed, allowing students and researchers to easily implement own algorithms for localization, navigation and the tasks to fulfill. Several robots can be integrated in a framework which connects various different hardware platforms, called the BOSPORUS network. Together with other components, they form an intelligent network for gathering sensor and image data, sensor data fusion, navigation and control of mobile platforms. The architecture of a reference platform on the campus of the Brandenburg University of Applied Sciences is presented and evaluated. Y1 - 2007 U6 - https://doi.org/10.5755/j02.mech.36230 VL - 68 IS - 6 SP - 70 EP - 73 PB - Kaunas University of Technology CY - Kaunas ER - TY - CHAP A1 - Pepe, Alberto A1 - Lasenby, Joan A1 - Buchholz, Sven T1 - CGAPoseNet+GCAN: A Geometric Clifford Algebra Network for Geometry-aware Camera Pose Regression T2 - Winter Conference on Applications of Computer Vision, Waikoloa, Hawaii, US, 2024 N2 - We introduce CGAPoseNet+ GCAN, which enhances CGAPoseNet, an architecture for camera pose regression, with a Geometric Clifford Algebra Network (GCAN). With the addition of the GCAN we obtain a geometry-aware pipeline for camera pose regression from RGB images only. CGAPoseNet employs Clifford Geometric Algebra to unify quaternions and translation vectors into a single mathematical object, the motor, which can be used to uniquely describe camera poses. CGAPoseNet solves the issue of balancing rotation and translation components in the loss function, and can obtain comparable results to other approaches without the need of expensive tuning of the loss function or additional information about the scene, such as 3D point clouds, which might not always be available. CGAPoseNet, however, like several approaches in the literature, only learns to predict motor coefficients, and it is unaware of the mathematical space in which predictions sit in and of their geometrical meaning. By leveraging recent advances in Geometric Deep Learning, we modify CGAPoseNet with a GCAN: proposals of possible motor coefficients associated with a camera frame are obtained from the InceptionV3 backbone, and the GCAN downsamples them to a single motor through a sequence of layers that work in G_ 4, 0. The network is hence geometry-aware, has multivector-valued inputs, weights and biases and preserves the grade of the objects that it receives in input. CGAPoseNet+ GCAN has almost 4 million fewer trainable parameters, it reduces the average rotation error by 41% and the average translation error by 8.8% compared to CGAPoseNet. Similarly, it reduces rotation and translation errors by 32.6% and 19.9%, respectively, compared to the best performing PoseNet strategy. CGAPoseNet+ GCAN reaches the state-of-the-art results on 13 commonly employed datasets. To the best of our knowledge, it is the first experiment in GCANs applied to the problem of camera pose regression. Y1 - 2024 U6 - https://doi.org/10.1109/WACV57701.2024.00646 SP - 6593 EP - 6603 PB - IEEE ER - TY - CHAP A1 - Pepe, Alberto A1 - Buchholz, Sven A1 - Lasenby, Joan T1 - Clifford Group Equivariant Neural Network Layers for Protein Structure Prediction T2 - Northern Lights Deep Learning Conference, VOL 233, 09-11 Januar 2024, Tromso, Norwegen N2 - We employ Clifford Group Equivariant Neural Network (CGENN) layers to predict protein coordinates in a Protein Structure Prediction (PSP) pipeline. PSP is the estimation of the 3D structure of a protein, generally through deep learning architectures. Information about the geometry of the protein chain has been proven to be crucial for accurate predictions of 3D structures. However, this information is usually flattened as machine learning features that are not representative of the geometric nature of the problem. Leveraging recent advances in geometric deep learning, we redesign the 3D projector part of a PSP architecture with the addition of CGENN layers . CGENNs can achieve better generalization and robustness when dealing with data that show rotational or translational invariance such as protein coordinates, which are independent of the chosen reference frame. CGENNs inputs, outputs, weights and biases are objects in the Geometric Algebra of 3D Euclidean space, i.e. G3,0,0, and hence are interpretable from a geometrical perspective. We test 6 approaches to PSP and show that CGENN layers increase the accuracy in term of GDT scores by up to 2.1\%, with fewer trainable parameters compared to linear layers and give a clear geometric interpretation of their outputs. Y1 - 2024 UR - https://proceedings.mlr.press/v233/pepe24a/pepe24a.pdf SP - 1 EP - 7 PB - PMLR ER - TY - JOUR A1 - Pilgermann, Michael A1 - Bocklisch, Thomas A1 - Creutzburg, Reiner T1 - Conception and implementation of a course for professional training and education in the field of IoT and smart home security JF - Electronic Imaging KW - Internet of Things KW - IoT KW - Smart Home KW - Smart Home Security KW - Cybersecurity KW - Connected Home Y1 - 2020 U6 - https://doi.org/10.2352/ISSN.2470-1173.2020.3.MOBMU-277 SN - 2470-1173 SP - 277-1 EP - 277-8 PB - Society for Imaging Science and Technology ER - TY - JOUR A1 - Richter, Maximilian A1 - Schwarz, Klaus A1 - Creutzburg, Reiner T1 - Conception and Implementation of Professional Laboratory Exercises in the field of ICS/SCADA Security - Part I: Fundamentals JF - Electronic imaging KW - Blue Team KW - Censys KW - Maltego KW - OSINT KW - Red Team KW - Shodan KW - cybersecurity KW - open source intelligence Y1 - 2021 U6 - https://doi.org/10.2352/ISSN.2470-1173.2021.3.MOBMU-073 SP - 73-1 EP - 73-13 PB - Society for Imaging Science and Technology ER - TY - JOUR A1 - Richter, Maximilian A1 - Schwarz, Klaus A1 - Creutzburg, Reiner T1 - Conception and Implementation of Professional Laboratory Exercises in the field of ICS/SCADA Security Part II: Red Teaming and Blue Teaming JF - Electronic Imaging KW - Blue Team KW - Censys KW - Maltego KW - OSINT KW - Red Team KW - Shodan KW - cybersecurity KW - open source intelligence Y1 - 2021 U6 - https://doi.org/10.2352/ISSN.2470-1173.2021.3.MOBMU-074 SN - 2470-1173 SP - 74-1 EP - 74-13 PB - Society for Imaging Science and Technology CY - Springfield, VA ER - TY - JOUR A1 - Schwarz, Klaus A1 - Schwarz, Franziska A1 - Creutzburg, Reiner T1 - Conception and implementation of professional laboratory exercises in the field of open source intelligence (OSINT) JF - Electronic Imaging KW - Open Source Intelligence KW - OSINT KW - cybersecurity KW - Shodan KW - PassiveTotal KW - Censys KW - Maltego Y1 - 2020 U6 - https://doi.org/10.2352/ISSN.2470-1173.2020.3.MOBMU-278 SN - 2470-1173 SP - 278-1 EP - 278-10 PB - Society for Imaging Science and Technology CY - Springfield, VA ER -