@inproceedings{HutzelmannMaukschPretschner2020, author = {Hutzelmann, Thomas and Mauksch, Dominik and Pretschner, Alexander}, title = {How to Conduct Experiments with a Real Car? Experiences and Practical Guidelines}, booktitle = {Software Architecture: 14th European Conference, ECSA 2020, Tracks and Workshops, L'Aquila, Italy, September 14-18, 2020, Proceedings}, editor = {Muccini, Henry and Avgeriou, Paris and Buhnova, Barbora and Camara, Javier and Caporuscio, Mauro and Franzago, Mirco and Koziolek, Anne and Scandurra, Patrizia and Trubiani, Catia and Weyns, Danny and Zdun, Uwe}, publisher = {Springer}, address = {Cham}, isbn = {978-3-030-59155-7}, doi = {https://doi.org/10.1007/978-3-030-59155-7_37}, pages = {518 -- 526}, year = {2020}, language = {en} } @phdthesis{Hutzelmann2024, author = {Hutzelmann, Thomas}, title = {A Holistic Methodology for Quality Assessment of Intrusion Detection Systems}, publisher = {Technische Universit{\"a}t M{\"u}nchen}, address = {M{\"u}nchen}, pages = {B, xii, 165}, school = {Technische Universit{\"a}t M{\"u}nchen}, year = {2024}, language = {en} } @inproceedings{UllrichBayerlHutzelmannetal.2025, author = {Ullrich, Henning and Bayerl, Dominik and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Application of Quantum Key Distribution in Intelligent Transport Systems}, pages = {5}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762692}, year = {2025}, abstract = {Quantum Key Distribution (QKD) enables two parties to generate a secret key, based on quantum physical properties. The secrecy of the exchanged key is guaranteed by these quantum physical properties, even against an attacker using a quantum computer. QKD therefore offers an Quantum Information Theoretically Secure (Q-ITS) alternative to Post Quantum Cryptography (PQC) schemes. This paper discusses advantages and challenges of deploying a QKD system in an Intelligent Transport System (ITS), by examining two exemplary use cases. Approaches to effectively implement QKD in these use cases are proposed, with a short discussion of advantages over the use of classical and PQC schemes.}, language = {en} } @inproceedings{LavesHutzelmannMayeretal.2025, author = {Laves, Claudius and Hutzelmann, Thomas and Mayer, Kevin and Hof, Hans-Joachim}, title = {Driving Down Premiums: A Security and Forensic Analysis of the DriveWell Insurance System}, pages = {9}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762688}, year = {2025}, abstract = {Modern car insurance companies can dynamically adjust premiums with mobile sensor units that constantly record, analyze, and grade driving behavior. However, attackers can tamper with these systems to cheat the insurance company and reduce their premiums. We developed an attacker model for this threat in conjunction with a risk assessment using the ISO/SAE 21434 Risk Rating Methodology, a widely accepted standard for evaluating and managing risks in automotive systems. To support and showcase our model, we examined the static IT security of the mobile sensor unit DriveWell and its companion Android application HUK Mein Auto. In particular, we utilized digital forensic tools to analyze the stored data in the sensor's internal storage and the app's smartphone storage, with a focus on encryption mechanisms for locally stored data and internet communication. During this analysis, we spotted a critical vulnerability that enables attackers to manipulate their insurance scores and potentially reduce premiums by up to 30\%. Our model and real-world analysis provide a solid foundation for reducing the risk of such manipulation of insurance premiums.}, language = {en} } @unpublished{LoewVasuAshokaHutzelmannetal.2025, author = {L{\"o}w, Jakob and Vasu Ashoka, Vishwa Vimukthi and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Security Aspects of ISO 15118 Plug and Charge Payment}, publisher = {arXiv}, address = {Ithaca}, doi = {https://doi.org/10.48550/arXiv.2512.15966}, year = {2025}, language = {en} }