@inproceedings{BraunFertig, author = {Braun, Peter and Fertig, Tobias}, title = {Model-driven testing of RESTful apis}, series = {World Wide Web Conference, Workshop on Web APIs and RESTful Design (WS-REST)}, booktitle = {World Wide Web Conference, Workshop on Web APIs and RESTful Design (WS-REST)}, language = {en} } @inproceedings{JohnFertig, author = {John, Isabel and Fertig, Tobias}, title = {Gamification for software engineering students - an experience report}, series = {2022 IEEE Global Engineering Education Conference (EDUCON)}, booktitle = {2022 IEEE Global Engineering Education Conference (EDUCON)}, publisher = {IEEE}, isbn = {978-1-6654-4434-7}, issn = {2165-9567}, doi = {10.1109/EDUCON52537.2022.9766825}, abstract = {In this paper we describe the evolution of a gamified course on agile methods and Scrum in software engineering teaching at university. The course covers among other topics, agile project management and scrum. For knowledge tranfer we used different gamification approaches in this course over the years, including point based gamification and story based gamification but also simple approaches like quizzes. The gamified e-learning course was realized with the learning management system Moodle. We describe how the course was built up in moodle, give some technical details on the used plugins and gamification elements. We describe our experiences with the different gamification approaches and give some lessons learned.}, language = {en} } @incollection{MetzgerFertigSchuetzetal., author = {Metzger, Lukas and Fertig, Tobias and Sch{\"u}tz, Andreas E and Weber, Kristin}, title = {Concerning Habits-Gewohnheit f{\"o}rdern zur Erh{\"o}hung der Information Security Awareness}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, isbn = {978-3-658-34523-5}, pages = {349 -- 364}, language = {en} } @incollection{WeberSchuetzFertig, author = {Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias}, title = {Insider Threats-Der Feind in den eigenen Reihen}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, isbn = {978-3-658-34523-5}, pages = {311 -- 329}, language = {en} } @article{FertigSchuetzWeber, author = {Fertig, Tobias and Sch{\"u}tz, Andreas and Weber, Kristin}, title = {Automated Measuring of Information Security Related Habits}, language = {en} } @inproceedings{FertigSchuetzWeber, author = {Fertig, Tobias and Sch{\"u}tz, Andreas and Weber, Kristin}, title = {Developing a Maturity Model for Information Security Awareness Using a Polytomous Extension of the Rasch Model}, series = {56th Hawaii International Conference on System Sciences (HICSS-56)}, booktitle = {56th Hawaii International Conference on System Sciences (HICSS-56)}, language = {en} } @article{JanikWeberSchuetzetal., author = {Janik, Maximilian and Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias}, title = {Informationssicheres Verhalten automatisiert messen}, series = {DA-CH Security}, journal = {DA-CH Security}, pages = {1 -- 12}, language = {en} } @inproceedings{SchuetzFertigWeber, author = {Sch{\"u}tz, Andreas E and Fertig, Tobias and Weber, Kristin}, title = {Defining a Core Ontology for Medical Devices in Germany to Ensure Semantic Interoperability}, series = {International Conference on Modelling and Development of Intelligent Systems}, booktitle = {International Conference on Modelling and Development of Intelligent Systems}, doi = {10.1007/978-3-030-68527-0_25}, pages = {394 -- 410}, language = {en} } @inproceedings{VuFertigBraun, author = {Vu, Henry and Fertig, Tobias and Braun, Peter}, title = {Automation of Integration Testing of RESTful Hypermedia Systems: A Model-driven Approach}, series = {14th International Conference on Web Information Systems and Technologies (WEBIST 2018), 3rd International Special Session on Advanced practices in Model-Driven Web Engineering (APMDWE 2018)}, booktitle = {14th International Conference on Web Information Systems and Technologies (WEBIST 2018), 3rd International Special Session on Advanced practices in Model-Driven Web Engineering (APMDWE 2018)}, doi = {10.5220/0006932004040411}, pages = {404 -- 411}, abstract = {The proper design of Representational State Transfer (REST) APIs is not trivial because developers have to deal with a flood of recommendations and best practices, especially the proper application of the hypermedia constraint requires some decent experience. Furthermore, testing RESTful APIs is a missing topic within literature. Especially hypermedia testing is not mentioned at all. Manual hypermedia testing is time-consuming and hard to maintain. Testing a hypermedia API requires many test cases that have similar structure, especially when different user roles and error cases are considered. In order to tackle this problem, we proposed a Model-driven Testing (MDT) approach for hypermedia systems using the metamodel within our existing Model Driven Software Development (MDSD) approach. This work discusses challenges and results of hypermedia testing for RESTful APIs using MDT techniques that were discovered within our research. MDT allows white-box testing, hence covering complete program structure and behavior of the generated application. By doing this, we are able to achieve a high automated test coverage. Moreover, any runtime behavior deviated from the metamodel reveals bugs within the generators.}, language = {en} } @article{VuFertigBraun, author = {Vu, Henry and Fertig, Tobias and Braun, Peter}, title = {Model-Driven Integration Testing of Hypermedia Systems}, series = {Journal of Web Engineering}, volume = {18}, journal = {Journal of Web Engineering}, number = {4-6}, publisher = {River Publishers}, pages = {1 -- 28}, abstract = {The proper design of Representational State Transfer (REST) APIs is not trivial because developers have to deal with a flood of recommendations and best practices, especially the proper application of the hypermedia constraint requires some decent experience. Furthermore, testing RESTful APIs is a missing topic within literature. Especially hypermedia testing is not mentioned at all. Manual hypermedia testing is time-consuming and hard to maintain. Testing a hypermedia API requires many test cases that have similar structure, especially when different user roles and error cases are considered. In order to tackle this problem, we proposed a Model-Driven Testing (MDT) approach for hypermedia systems using the metamodel within our existing Model Driven Software Development (MDSD) approach. This work discusses challenges and results of hypermedia testing for RESTful APIs using MDT techniques that were discovered within our research. MDT allows white-box testing, hence covering complete program structure and behavior of the generated application. By doing this, we are able to achieve a high automated test coverage. Moreover, any runtime behavior deviated from the metamodel reveals bugs within the generators.}, language = {en} } @inproceedings{MuellerVuFertigetal., author = {M{\"u}ller, Patrick and Vu, Henry and Fertig, Tobias and Braun, Peter}, title = {Hypermedia: The Key to RESTful Web Applications}, series = {14th International Conference on Web Information Systems and Technologies (WEBIST 2018), 3rd International Special Session on Advanced practices in Model-Driven Web Engineering (APMDWE 2018)}, booktitle = {14th International Conference on Web Information Systems and Technologies (WEBIST 2018), 3rd International Special Session on Advanced practices in Model-Driven Web Engineering (APMDWE 2018)}, doi = {10.5220/0006927103780387}, pages = {378 -- 387}, abstract = {Implementing the hypermedia constraint for RESTful Systems is a challenging task for most developers. This is due to the lack of information about how to implement hypermedia on the client-side correctly. Therefore, new tools are required to support developers with the implementation of the hypermedia constraint. We propose a model-driven approach that allows developers to define a RESTful System as a finite-state machine: states represent resources and transitions represent hypermedia links. We present a metamodel that our generator can process to generate Poymer Web Applications. These web applications fulfill all REST constraints defined by Fielding. Therefore, developers do not have to implement the hypermedia constraint themselves. Our approach simplifies the developement of REStful Web Applications and reduces the developement efforts. Moreover, we describe how RESTful Web Applications can be derived from finite-state machines.}, language = {en} } @techreport{SchuetzFertig, author = {Sch{\"u}tz, Andreas E. and Fertig, Tobias}, title = {Security Awareness bei Maschinenfabrik Gustav Eirich GmbH \& Co KG}, doi = {10.57714/8rs2-dw87}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:863-opus-62331}, pages = {20}, abstract = {Die Maschinenfabrik Eirich hat eine komplexe IT-Struktur, in der jede Gesellschaft eigene Systeme nutzt, wobei nur einige aktiv mit der Muttergesellschaft verbunden sind. Trotz eines vorhandenen Informationssicherheitsmanagementsystems (ISMS) wird dieses nicht vollst{\"a}ndig umgesetzt, obwohl ein starker Fokus auf Risikomanagement und den Schutz sensibler Informationen gelegt wird. Besonders wertvoll ist das firmeninterne Know-how, das zunehmend digitalisiert und in einem internen Wiki gespeichert wird. Die Informationssicherheit sieht den Faktor Mensch als entscheidende Firewall, weshalb gezielte Sensibilisierungsmaßnahmen eingef{\"u}hrt wurden, um die Mitarbeiter f{\"u}r Sicherheitsrisiken zu sensibilisieren und diese Maßnahmen in ihrem Arbeitsalltag umzusetzen. Historisch begann die Sensibilisierung auf Initiative des ISB Markus St{\"a}udinger. Die erste Kampagne wurde nach anf{\"a}nglichen Schwierigkeiten ab 2012 geplant und durchgef{\"u}hrt. Aufgrund der verteilten und isolierten IT-Struktur in der Eirich-Gruppe, wurde die Sensibilisierungskampagne nur in der Hauptniederlassung durchgef{\"u}hrt.}, language = {de} } @inproceedings{JohnHessFertig, author = {John, Isabel and Hess, Anne and Fertig, Tobias}, title = {No More Binge Learning - Using Gamification Elements to Support Distributed Practice in Engineering Education}, series = {2025 IEEE Global Engineering Education Conference (EDUCON)}, booktitle = {2025 IEEE Global Engineering Education Conference (EDUCON)}, publisher = {IEEE}, isbn = {979-8-3315-3949-8}, issn = {2165-9567}, doi = {10.1109/EDUCON62633.2025.11016434}, abstract = {An effective technique to support sustainable learning is distributed practice, a method shown to enhance long-term knowledge retention. As part of our research agenda, we aim to investigate suitable design strategies for eLearning courses that support distributed practice through intrinsic motivation. Our most recent strategy followed the idea of linking the acquisition of badges gained by completing a set of quizzes with a small extrinsic reward, a small bonus in the exam grade. We built a course with quizzes and timed badges with staged deadlines for the badges to ensure students do the quizzes during the semester and not shortly before the exam. An initial evaluation of this course design yielded encouraging results. The assessment showed that students learned a great deal from the quizzes and were highly motivated by the quizzes and by receiving the badges. Qualitative feedback highlighted increased motivation, increased engagement, and lower levels of perceived stress among students, who attributed these changes to the platform's ability to make learning more enjoyable and less monotonous. This paper argues that the strategic use of gamification in engineering education can significantly support distributed practice by creating an interactive, motivating, and supportive learning environment.}, language = {en} } @inproceedings{JohnFertig, author = {John, Isabel and Fertig, Tobias}, title = {Evaluation of a Gamified Elearning Course for Agile Methods}, series = {2024 IEEE Global Engineering Education Conference (EDUCON)}, booktitle = {2024 IEEE Global Engineering Education Conference (EDUCON)}, publisher = {IEEE}, isbn = {979-8-3503-9402-3}, issn = {2165-9567}, doi = {10.1109/EDUCON60312.2024.10578678}, abstract = {For teaching agile methods in an IT undergraduate course we built up a gamified blended learning course. We created the course with gamification elements like videos, quizzes, badges, and points within the learning management system Moodle. To do so we used a gamification concept based on MDA (Mechanics-Dynamics-Aesthetics). The goal of the gamification concept was to increase intrinsic motivation of the students. We evaluated the motivation of our students with a questionnaire that is based on the psychological motivation theory STD (Self Determination Theory). The paper will shortly show how we built up the course in Moodle, and also gives some details on the used plugins and gamification elements. The main focus is on the evaluation which was done using a standardized questionnaire on intrinsic motivation built upon SDT at the beginning and at the end of our course. 39 students participated before taking the course and 16 after the completion of the course. The evaluation shows that some elements in the course like Videos and quizzes increase the motivation clearly whereas others do not. We could show an increase of intrinsic motivation in some factors of the questionnaire we used, but not in all factors.}, language = {en} } @inproceedings{VuFertigBraun, author = {Vu, Henry and Fertig, Tobias and Braun, Peter}, title = {Verification of Hypermedia Characteristic of RESTful Finite-State Machines}, series = {Proceedings of the 9th International Workshop on Web APIs and Service Architecture (WS-REST 2018)}, booktitle = {Proceedings of the 9th International Workshop on Web APIs and Service Architecture (WS-REST 2018)}, doi = {10.1145/3184558.3191656}, pages = {1881 -- 1886}, abstract = {Being an architectural style rather than a specification or a standard, the proper design of REpresentational State Transfer (REST) APIs is not trivial, since developers have to deal with a flood of recommendations and best practices, especially the proper application of the hypermedia constraint requires some decent experience. Furthermore, testing RESTful APIs is a missing topic within literature and especially, hypermedia testing is not mentioned at all. To deal with this state of affairs, we have elaborated a Model-Driven Software Development (MDSD) approach for creating RESTful APIs. As this project matured, we also explored the possibility of Model-Driven Testing (MDT). This work addresses the challenges of hypermedia testing and proposes approaches to overcome them with MDT techniques. We present the results of hypermedia testing for RESTful APIs using a model verification approach that were discovered within our research. MDT enables the verification of the underlying model of a RESTful API and ensuring its correctness before initiating any code generation. Therefore, we can prevent a poorly designed model from being transformed into a poorly designed RESTful API.}, language = {en} } @inproceedings{VuFertigBraun, author = {Vu, Henry and Fertig, Tobias and Braun, Peter}, title = {Towards Model-driven Hypermedia Testing for RESTful Systems}, series = {Proceedings of the 13th International Conference on Web Information Systems and Technologies - WEBIST}, volume = {1}, booktitle = {Proceedings of the 13th International Conference on Web Information Systems and Technologies - WEBIST}, publisher = {SciTePress}, isbn = {978-989-758-246-2}, issn = {2184-3252}, doi = {10.5220/0006353403400343}, pages = {340 -- 343}, abstract = {Testing RESTful systems is a missing topic within literature. Especially hypermedia testing is not mentioned at all. We discuss the challenges of hypermedia testing that were discovered within our research. We will differ between client-side and server-side challenges since REpresentational State Transfer (REST) describes a client-server system. Therefore, both sides have to be considered. Hypermedia tests for the server have to ensure that there is no response without hypermedia links. However, the client also has to be hypermedia compliant. Thus, we propose to simulate a server update to check whether the client breaks. Since we use Model-driven Software Development (MDSD) to generate RESTful systems we also propose a model-driven approach for hypermedia testing. This allows us to generate tests for a server based on its underlying model. Moreover, we can build a crawler to verify our generated servers and to test all hypermedia links for different user roles. Any modification to t he model can result in a server update, which can be used to test hypermedia clients.}, language = {en} } @inproceedings{FertigBraun, author = {Fertig, Tobias and Braun, Peter}, title = {Towards Offline Support for RESTful Systems}, series = {Proceedings of the 9th International Workshop on Web APIs and Service Architecture (WS-REST 2018)}, booktitle = {Proceedings of the 9th International Workshop on Web APIs and Service Architecture (WS-REST 2018)}, doi = {10.1145/3184558.3191655}, pages = {1875 -- 1880}, abstract = {Representational State Transfer (REST) is an efficient and by now established architectural style for distributed hypermedia systems. However, REST has not been designed for offline operations, yet many applications must also keep functioning when going offline for more than a few seconds. Burdening the programmer with knowledge about offline status is undesirable. RESTful applications can be described by a formal model. Therefore, we define a function to derive a formal model of the proxy for handling offline support on the client-side. We then extend existing caching approaches so that a client-side proxy can transparently hide the offline status from the application. We validate our solution with a proxy layer that covers all test cases derived from the model. Using our model and proxy, clients do not have to know and worry about whether they are online or offline.}, language = {en} } @inproceedings{JohnHessFertig, author = {John, Isabel and Hess, Anne and Fertig, Tobias}, title = {Work in Progress: Supporting Distributed Practice with a Gamified E-Learning Course}, series = {Engineering Education for Global Responsibility (ICL 2024)}, booktitle = {Engineering Education for Global Responsibility (ICL 2024)}, editor = {Auer, Michael E. and R{\"u}{\"u}tmann, Tiia}, publisher = {Springer}, address = {Cham}, isbn = {978-3-031-83519-3}, doi = {10.1007/978-3-031-83520-9_13}, pages = {139 -- 146}, language = {en} } @inproceedings{JohnHessFertig, author = {John, Isabel and Hess, Anne and Fertig, Tobias}, title = {Work in Progress: Supporting Distributed Practice with a Gamified E-Learning Course}, series = {International Conference on Interactive Collaborative Learning}, booktitle = {International Conference on Interactive Collaborative Learning}, publisher = {Springer}, address = {Cham}, pages = {139 -- 146}, language = {en} } @inproceedings{UlsamerFertigBraun, author = {Ulsamer, Philipp and Fertig, Tobias and Braun, Peter}, title = {Feature Oriented DSLs}, series = {Workshop zu Modellbasierter Entwicklung eingebetteter Systeme (MBEES 2018)}, booktitle = {Workshop zu Modellbasierter Entwicklung eingebetteter Systeme (MBEES 2018)}, pages = {340 -- 343}, language = {en} } @techreport{SchuetzFertig, author = {Sch{\"u}tz, Andreas E. and Fertig, Tobias}, title = {Security Awareness bei DHL Group}, doi = {10.57714/v3pz-dt90}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:863-opus-62848}, pages = {20}, abstract = {DHL Group ist ein weltweit f{\"u}hrendes Logistik- und Postunternehmen, das in {\"u}ber 220 L{\"a}ndern und Territorien t{\"a}tig ist. Die Gruppe gliedert sich in verschiedene Gesch{\"a}ftsbereiche und bietet eine breite Palette von Dienstleistungen an, darunter Postversand, Expresslieferungen, Frachttransport und Supply-Chain-L{\"o}sungen. Wie in Abbildung 1 zu sehen, teilt sich die Unternehmensgruppe in f{\"u}nf operative Unternehmensbereiche auf: Express, Global Forwarding, Freight, Supply Chain, eCommerce und Post \& Paket Deutschland. Der Bereich Express bietet internationale Express-Lieferdienste an und ist auf zeitkritische Sendungen spezialisiert. Der Fokus liegt auf einer schnellen, zuverl{\"a}ssigen Zustellung von Dokumenten und Waren weltweit. Global Forwarding, Freight bietet Speditionsdienstleistungen f{\"u}r den Luft-, See- und Landtransport an und unterst{\"u}tzt Kunden dabei, ihre Waren effizient und kosteng{\"u}nstig weltweit zu transportieren. Supply Chain ist auf integrierte Logistikl{\"o}sungen spezialisiert und bietet Dienstleistungen in den Bereichen Lagerhaltung, Bestandsmanagement und Distribution, um maßgeschneiderte L{\"o}sungen f{\"u}r Kunden zu entwickeln. Der Bereich eCommerce konzentriert sich auf den nationalen Pakettransport in ausgew{\"a}hlten L{\"a}ndern in Europa, Amerika und Asien, sowie auf grenz{\"u}berschreitende Transporte, die weniger zeitkritisch sind. Der Bereich Post \& Paket Deutschland {\"u}bernimmt das Brief- und Paketgesch{\"a}ft in Deutschland und ist f{\"u}r die Zustellung von Briefen, Paketen und Presseerzeugnissen verantwortlich. Zu diesem Bereich geh{\"o}rt neben der Marke DHL auch die Marke Deutsche Post. Zus{\"a}tzlich gibt es die Bereiche Corporate Center, Global Business Services und Customer Solutions \& Innovation. Der Corporate Center nimmt die Aufgaben der Konzernf{\"u}hrung wahr. Der Bereich Global Business Services ist konzernweit f{\"u}r die internen Dienstleistungen zust{\"a}ndig. Bei Customer Solutions \& Innovation handelt es sich um die Account-Management- und Innovationseinheit.}, language = {de} }