@thesis{Galler2024, author = {Galler, Jan-Moritz}, title = {Concept and implementation for a distributed event-storage on-board of aircraft}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-51413}, pages = {194}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {In the realm of avionics, there is a rising demand for modular and distributed system components to exchange event-based data. The events communicated throughout avionics systems rise from topics such as Smart Maintenance or Customer-Based Configuration of aircraft. This thesis presents the design and evaluation of a novel communications protocol tailored for the exchange of event-based data in avionics applications. This protocol, named Avionics Data Exchange Protocol, leverages configuration-based message routing, which fits the needs of distributed systems in the overall thrive towards Open System Architectures. This protocol is implemented in the Event-Logging Library as demonstration throughout this work. To ensure the high demands of assurance in avionics software and system design, the thesis addresses the commonly required technical challenges, such as statical bandwidth and memory allocation. Within the different avionics systems, storage of such event-based data is required to perform post-flight evaluation and potentially, future on-board processing. This aspect is analyzed within this thesis to provide future industrial applications the according foundation. A novel and far-reaching approach demonstrated by the Avionics Data Exchange Protocol is the usage of trust-based secure communications, that target the zero trust principle inside avionics. This vital introduction of secure communications will pave way for future-proof extension, modification and modularization of avionics systems for contributions for Modular Open Avionics Architecture. This thesis provides insights of the impact of using secure communications, further modularizaton of transport layer communication and highlights the advantages of approaching zero trust in avionics.}, language = {en} } @thesis{Gaber2024, author = {Gaber, Philip}, title = {WHOIS and WHOCARES?}, subtitle = {a systematic evaluation of data sources utilized in internet routing security}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-49769}, pages = {I-VI, 68, I-XXVII}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {The underlying infrastructure of the Internet is in a state of constant change, necessitating a high degree of resilience against a multitude of intentional attacks, as well as unintentional configuration errors. Nevertheless, the Internet is subject to numerous routing-related incidents on a daily basis. Multiple security mechanisms have been proposed to prevent such incidents, although only a few have been widely adopted, either utilizing data provided by the Internet Routing Registry (IRR) or the Resource Public Key Infrastructure (RPKI). Therefore, in this thesis we seek to answer the questions if the data provided by the IRRs is a sufficient foundation for routing security and how different IRR databases perform when utilized in two common methods of anomaly detection, in comparison to the emerging RPKI. Consequently, we evaluate the availability, recency, accuracy and update behavior of different IRRs and their provided objects. Moreover, we assess the capabilities and performance differences among IRRs when utilized in BGP Origin Validation (OV) and Path Verification (PV). Additionally, we compare the performance between IRR and RPKI when utilized as a data source for OV and PV. Our findings indicate that IRRs that mirror the majority of other IRRs while also utilizing data sanitization by employing RPKI Route Origin Authorizations (ROAs) could potentially provide the highest quantity and quality of data that can be used as a foundation for routing security. Additionally, our findings suggest that the age of objects is related to their validity when verified with the help of ROAs. The findings concerning the verification of Autonomous System (AS) paths by employing AS relationships from aut-num objects indicate that IRR data can only be utilized to a certain extent to verify the AS path in route announcements. Conversely, the remarkable explanatory power observed in IRR route(6) objects when utilized in OV and the recent increase in created objects within the IRRs indicate that these databases remain a viable foundation for validating Prefix Origins (POs) pairs, particularly when combined with data provided by the RPKI.}, language = {en} } @thesis{Storz2024, author = {Storz, Dominik Dong-Wei}, title = {Integration von Informationssicherheitsstandards in agile Softwareprojekte der Automobilindustrie am Beispiel TISAX und Scrum}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-49445}, pages = {I-X, 104, I-XXV}, school = {Technische Hochschule Ingolstadt}, year = {2024}, language = {de} } @thesis{GrafvonPerponcherSedlnitzki2024, author = {Graf von Perponcher-Sedlnitzki, Philipp Christian}, title = {Integrating the future into the past}, subtitle = {Approach to seamlessly integrate newly-developed Rust-components into an existing C++-system}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-45429}, pages = {vi, 99}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {The goal of this thesis is to provide a guide that can be used by software developers that wants to include Rust into an existing C++ application. After a brief summary of the languages, both the basics of integrating Rust code into C++ applications and the reverse way are presented to set a common base of knowledge. Additionally, a few tools and libraries are introduced, namely bindgen, cbindgen, cxx, and the cc crate. As they are being used in the following guide, the toolsets CMake and CMakeRust are presented and explained in more detail to make it easier for developers to include and use them in their own projects. The guide is separated into three steps which help to identify the required interfaces, implement them and eventually include everything into the C++ compilation process. Apart from more advanced types based on pointers, the integration is fairly easy and straight-forward. Using structs and their implemented methods, Rust is able to replicate a class structure that is typical for object-oriented C++. After providing the required binding files, the Rust component can easily be called from C++ code like any other function. While external Rust methods need to be called using a function(Object) syntax, they can be also be converted and used via the standard Object.function() syntax by implementing wrapper classes that translate the calls. These can then be included in more complex C++ architectures like inheritance structures. The usage of the aforementioned advanced types, which are based on pointers, is not covered in this thesis, though the cxx library can be used for those. The compilation for and usage on embedded targets is also possible with its required effort depending on the target architecture. If the necessary target is not officially supported yet, some additional things like the standard library need to be downloaded and compiled manually. The thesis comes to the conclusion that considering C++ is not officially supported by the Rust FFI, it works very well with the C ABI and apart from one floating point type, no clear limitations or incompatibilities were identified. For interfaces that only work with basic types and to get a general understanding of the topic, this thesis is a good starting point and guide for a developer who is new to the topic.}, language = {en} } @thesis{Stahmer2024, author = {Stahmer, Dominik}, title = {BGPsyche}, subtitle = {AS path predictions beyond valley-free routing}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-50624}, pages = {64, VIII}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {The BGP routing protocol is one of the essential building blocks of the modern Internet. It allows networks to discover paths to one another on a global scale. While individual BGP participants know how to reach every other participant, there is no way to know the AS path between two arbitrary networks. Network operators however have a need to know these paths to, for example, deploy security mechanisms and optimize peer to peer applications. Over the years, many heuristics have been developed to predict these inter-domain paths. However, all of them still fall short of being truly reliable, which justifies further research in the field. In this thesis, we develop a new AS path prediction system BGPsyche. To our knowledge, it is the first of its kind to be based on deep learning. BGPsyche can find the correct path in the set of its top three selected candidates 85 \% of the time and selects the correct path as its top candidate with an accuracy of 66 \%. This makes it about as accurate as most of its competition, with only one system yielding a superior accuracy. Because of the easy extensibility of BGPsyche, we think that there is still more potential in our approach. In building BGPsyche, we also analyze many features of ASes, links and paths from the perspective of a machine learning application, which may serve as a basis for future research. Notably, we show that including the widely used valley-free constraint in our training data worsens the result, indicating that BGPsyche has learned something more nuanced on its own.}, language = {en} } @thesis{Knauer2024, author = {Knauer, Dominik}, title = {A dual study of filter capacity and adversarial robustness on CNN models using pattern-based pruning}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-51309}, pages = {66, XXIII}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {This thesis investigates the adversarial robustness and filter capacity of Convolutional Neural Networks (CNN) using a pattern-based pruning approach. Modern CNNs, which are essential in image processing for safety-critical applications like autonomous driving, are susceptible to perturbations and targeted adversarial attacks that can weaken their accuracy and reliability. To address these challenges, an approach based on reducing specific filter weights selected by patterns was developed to increase the efficiency of neural networks without significantly compromising classification accuracy. The Alternating Direction Method of Multipliers algorithm was used to optimally apply this pruning technique while preserving the model's robustness against adversarial attacks. The results show that pattern-based pruning methods not only improve the memory and computational efficiency of CNNs but can also enhance their precision efficiency and resilience against adversarial attacks. Adversarial training as well as filter kernel pruning were integrated into the pattern pruning algorithm to further explore adversarial robustness and the possibility of higher computational efficiency through increased pruning rates, but were considered in a limited way as side information. Additionally, I developed a new evaluation method based on Channel-wise Increases in Confidence, which enables a fine-grained analysis of filter performances within a convolutional layer. This work provides important insights for the further development of robust and efficient CNN optimization techniques in safety-critical applications.}, language = {en} } @thesis{Harsh2024, author = {Harsh, Kshitij}, title = {RFID cloning for enhancing mobile quality assurance aspects}, publisher = {Technische Hochschule Ingolstadt}, address = {Ingolstadt}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:573-51278}, pages = {74}, school = {Technische Hochschule Ingolstadt}, year = {2024}, abstract = {This thesis discusses the challenges and developments in end-to-end RFID card testing, focussing on the use of RFID cloning technology to improve testing efficiency and efficacy. The initial testing arrangement featured mobile devices connected to a host device via USB cables, with just one RFID card checked per mobile device. This arrangement decreased the testing capability while increasing the time and resources required. The study, undertaken by Deutsche Telekom's Mobile Quality Assurance Department in Dresden, investigates an innovative technique to overcoming these restrictions utilising the Proxmark3 gadget.}, language = {en} }