@inproceedings{ZimmerDrochtertGeigeretal.2017, author = {Zimmer, Christian and Drochtert, Daniel and Geiger, Christian and Brink, Michael and M{\"u}tze, Rolf}, title = {Mobile previsualization using augmented reality}, series = {SIGGRAPH Asia 2017 Mobile Graphics \& Interactive Applications on - SA '17, Bangkok, 27.11.2017 - 30.11.2017}, booktitle = {SIGGRAPH Asia 2017 Mobile Graphics \& Interactive Applications on - SA '17, Bangkok, 27.11.2017 - 30.11.2017}, editor = {Billinghurst, Mark and Rungjiratananon, Witawat}, publisher = {ACM Press}, address = {New York}, isbn = {9781450354103}, doi = {10.1145/3132787.3132805}, pages = {1 -- 5}, year = {2017}, language = {en} } @inproceedings{HerderTakedaVermeegenetal.2019, author = {Herder, Jens and Takeda, Shinpei and Vermeegen, Kai and Davin, Till and Berners, Dominique and Ryskeldiev, Bektur and Zimmer, Christian and Druzetic, Ivana and Geiger, Christian}, title = {Mixed Reality Art Experiments - Immersive Access to Collective Memories}, series = {ISEA2019, Proceedings, 25th International Symposium on Electronic Art, Gwangju, South Korea, June 22-28, 2019}, booktitle = {ISEA2019, Proceedings, 25th International Symposium on Electronic Art, Gwangju, South Korea, June 22-28, 2019}, publisher = {IESA}, address = {Gwangju}, pages = {334 -- 341}, year = {2019}, abstract = {We report about several experiments on applying mixed reality technology in the context of accessing collective memories from atomic bombs, Holocaust and Second World War. We discuss the impact of Virtual Reality, Augmented Virtuality and Augmented Reality for specific memorial locations. We show how to use a virtual studio for demonstrating an augmented reality application for a specific location in a remote session within a video conference. Augmented Virtuality is used to recreate the local environment, thus providing a context and helping the participants recollect emotions related to a certain place. This technique demonstrates the advantages of using virtual (VR) and augmented (AR) reality environments for rapid prototyping and pitching project ideas in a live remote setting.}, language = {en} } @inproceedings{WoltersKindsmuellerHeineckeetal.2019, author = {Wolters, Christian and Kindsm{\"u}ller, Martin Christof and Heinecke, Andreas M. and Rakow, Thomas C. and Dahm, Markus and Jent, Sophie and Rumpler, Martin}, title = {Medieninformatik 2019: Kompetenzorientierte Lehr-Lernszenarien in der Medieninformatik}, series = {Mensch und Computer 2019 - Workshopband. Bonn: Gesellschaft f{\"u}r Informatik e.V.}, booktitle = {Mensch und Computer 2019 - Workshopband. Bonn: Gesellschaft f{\"u}r Informatik e.V.}, publisher = {Deutsche Gesellschaft f{\"u}r Informatik e.V.}, doi = {10.18420/muc2019-ws-305}, pages = {512 -- 517}, year = {2019}, abstract = {Die Fachgruppe Medieninformatik (FG MI) im Fachbereich Mensch-Computer-Interaktion (FB MCI) der Gesellschaft f{\"u}r Informatik (GI) setzt im Workshop Medieninformatik 2019 die Arbeit an der Curriculums-Empfehlung f{\"u}r Medieninformatik (MI)-Studieng{\"a}nge fort. Die Identifikation grundlegender medieninformatik-spezifischer Kompetenzen steht zurzeit im Fokus der Arbeit des AK Curriculum der FG MI. Das besondere fachliche Spektrum in der Medieninformatik und Spezialisierungen einzelner MI- sowie MI-verwandter Studieng{\"a}nge stellt den Arbeitskreis immer wieder vor die Herausforderung zwischen grundlegenden Kompetenzen, die jede*r Medi-eninformatiker*in erwerben soll und fachlichen Vertiefungen zu differenzieren. Um die bisherige Curriculumsarbeit mit der Praxis in den Studieng{\"a}ngen abzugleichen bietet der Workshop der Fachcommunity ein Forum, um sowohl die bisher aufgestellten Kompetenzen zu diskutieren, gegebenenfalls zu erg{\"a}nzen, als auch MI-spezifische Lehr- und Lernformate vorzustellen, die die Erlangung dieser MI-Kompetenzen f{\"o}rdern. Der vorliegende Beitrag stellt den aktuellen Diskussionsstand dar.}, language = {de} } @incollection{GlowatzHaufsBrusbergSchmidt2020, author = {Glowatz, Christoph and Haufs-Brusberg, Peter and Schmidt, Holger}, title = {Unternehmensorganisation und Informationssicherheit - Einf{\"u}hrung und Grundlagen}, series = {Cybersicherheit f{\"u}r vernetzte Anwendungen in der Industrie 4.0}, booktitle = {Cybersicherheit f{\"u}r vernetzte Anwendungen in der Industrie 4.0}, editor = {Schulz, Thomas}, publisher = {Vogel Communications Group}, address = {W{\"u}rzburg}, isbn = {978-3-8343-3424-4}, pages = {315 -- 334}, year = {2020}, language = {de} } @article{Marmann2019, author = {Marmann, Michael}, title = {Alexa \& Co: Digitale Sprachassistenten in eLearning-Umgebungen}, publisher = {CHECK.point eLearning}, year = {2019}, abstract = {Karlsruhe/D{\"u}sseldorf, Dezember 2019 - "Alexa, ich m{\"o}chte mit Dir lernen! Digitale Sprachassistenten und eLearning - geht das?" Mit dieser Fragestellung widmet sich Prof. Dr. Michael Marmann von der Hochschule D{\"u}sseldorf am 30. Januar um 15.30 Uhr dem Thema Spracherkennung in der Weiterbildung. Prof. Marmann besch{\"a}ftigt sich intensiv mit dem Einsatz junger Tools und deren Erprobung.}, language = {de} } @techreport{MarmannNilson2019, author = {Marmann, Michael and Nilson, Bj{\"o}rn}, title = {Innovationssemester: Digitale Medien zum Thema nachhaltiges Bauen, Webanwendung "Der Butterfly-Effekt" - eine einfache E-Learning-Anwendung zum Thema energieeffizientes Bauen}, publisher = {Hochschule D{\"u}sseldorf}, address = {D{\"u}sseldorf}, organization = {Hochschule D{\"u}sseldorf}, year = {2019}, abstract = {Dieses E-Learning ist im Rahmen des sogenannten „Innovationssemesters", einem interdisziplin{\"a}ren Projekt der Wissensregion D{\"u}sseldorf, mit Studierenden und Experten der Hochschule D{\"u}sseldorf, der Heinrich-Heine-Universit{\"a}t D{\"u}sseldorf, der Fliedner Fachhochschule D{\"u}sseldorf und der Bildungs- und Wissensplattform ecolearn f{\"u}r energieeffizientes Bauen gestaltet worden. Die Projektleitung lag bei Prof. Dr. Michael Marmann aus dem Fachbereich Medien der Hochschule D{\"u}sseldorf. Der Butterfly-Effekt. Was hat ein Schmetterling mit Nachhaltigkeit zu tun? Die Metapher des Butterfly-Effektes beschreibt ein Ph{\"a}nomen, bei dem selbst kleine Ereignisse oder Entscheidungen große Auswirkungen auf die Zukunft haben k{\"o}nnen. Der Fl{\"u}gelschlag eines Schmetterlings kann einen Tornado auf der anderen Seite der Welt ausl{\"o}sen. Die Bedeutung des Butterfly-Effekts finden wir auch sehr passend in Bezug auf den Klimawandel. Denn wir alle wissen, dass wir auf einem Planeten leben, der sich im Moment durch die Handlungen der Menschen stark ver{\"a}ndert. Diese Handlungen k{\"o}nnen zu dramatischen Folgen f{\"u}r das Klima f{\"u}hren. Wir wollen ein Zeichen setzen und unser Handeln {\"u}berdenken und verbessern. Heute etwas anders, etwas besser machen und damit eine gr{\"u}nere Zukunft schaffen. Wir wollen einen Planeten hinterlassen, auf dem auch unsere Nachfahren noch eine lebenswerte Zukunft erleben k{\"o}nnen. Das ist unser Ziel und unsere Mission. Darum heißt unser E-Learning Der Butterfly-Effekt. ...}, language = {de} } @inproceedings{Marmann2019, author = {Marmann, Michael}, title = {Digital Learning Blends zur Unterst{\"u}tzung agiler Lernsettings}, series = {Learntec 2019 - Agile Methoden im Lernumfeld, 29.01.-31.01.2019 in Karlsruhe}, booktitle = {Learntec 2019 - Agile Methoden im Lernumfeld, 29.01.-31.01.2019 in Karlsruhe}, publisher = {Learntec}, address = {Karlsruhe}, organization = {Learntec}, year = {2019}, abstract = {Agile Lernsettings sind unter anderem dadurch charakterisiert, dass agile Grundwerte und Prinzipien wie z.B. Selbstorganisation, Transparenz, Fokussierung und Kommunikation auf Augenh{\"o}he auf den Lernkontext {\"u}bertragen werden. Hierdurch kann sehr flexibel und schnell auf individuelle Lernbedarfe reagiert werden und auch Lehrprozesse lassen sich deutlich effizienter gestalten. Vor dem Hintergrund der digitalen Lebens- und Arbeitswelt des 21. Jahrhunderts stellt sich unmittelbar auch die Frage nach einer geeigneten digitalen Unterst{\"u}tzung agiler Lernsettings. Ist ein klassisches Learning Management System noch das Tool der Wahl oder bedarf es wendigerer L{\"o}sungen, um spezifische Bildungsziele zu erreichen? Diesen Fragen m{\"o}chte dieser Beitrag nachgehen und Antworten liefern. Hierzu wird der Begriff "Digital Learning Blend" eingef{\"u}hrt und anhand konkreter Beispiele agiler Lehrpraxis im Fachbereich Medien der Hochschule D{\"u}sseldorf illustriert. Der Fokus liegt dabei auf einer geplanten und strukturierten Zusammenstellung digitaler Tools, die einen Workflow-basierten Lernprozess entweder vollst{\"a}ndig oder phasenbezogen begleiten. Da zur Nutzung dieser Werkzeuge allerdings auch ein gewisses Maß an Digitalkompetenz sowohl bei den Lehrenden als auch bei den Studierenden erforderlich ist, ist eine bloße Zusammenstellung von Tools weder ausreichend, noch zielf{\"u}hrend. Die vorgestellten agilen Lernsettings beinhalten daher nicht nur Digital Learning Blends, sondern dar{\"u}ber hinaus kommentierte Learning-Workflows, anschauliche Beispiele, Video-Tutorials, Whiteboard-Animations und Templates f{\"u}r benutzte Werkzeuge etc. Die Lehrenden starten k{\"u}nftig somit bereits auf einem hohen Abstraktionslevel mit der jeweiligen agilen Lehrveranstaltung und k{\"o}nnen sich auf das konzentrieren, was die Studierenden zu Recht erwarten d{\"u}rfen: spannende, motivierende Lernerfahrungen.}, subject = {Digitalisierung}, language = {de} } @inproceedings{Marmann2018, author = {Marmann, Michael}, title = {Schlanke Tools, vernetztes Wissen und Agilit{\"a}t in der technischen Kommunikation}, series = {Tekom Jahres­tagung 2018, 13.11.- 15.11.2018 in Stuttgart}, booktitle = {Tekom Jahres­tagung 2018, 13.11.- 15.11.2018 in Stuttgart}, publisher = {Telkom}, address = {Stuttgart}, organization = {Tekom}, year = {2018}, abstract = {Alles ist lean, vernetzt und agil! Was bedeutet das f{\"u}r technische Redaktionsprozesse? Wie lassen sich z.B. Autorenprozesse f{\"u}r interaktive Lernmedien schlanker gestalten? Welche Formate und Werkzeuge sind interessant, um technische Produkte und Dienstleistungen auf einfache und attraktive Weise zu erkl{\"a}ren, ohne dabei den Ressourcenrahmen zu sprengen? Und ist nicht auch die digitale Wissensvernetzung, die mehr und mehr zu einem entscheidenden Wettbewerbsfaktor f{\"u}r Unternehmen jeglicher Gr{\"o}ße und Branche wird, ein spannendes Bet{\"a}tigungsfeld f{\"u}r technische Redakteure? In der Keynote werden diese Fragestellungen aus einer E-Learning- und Wissensmanagementperspektive thematisiert und durch aktuelle Praxisbeispiele illustriert.}, language = {de} } @inproceedings{Marmann2018, author = {Marmann, Michael}, title = {Containerschiff oder Schnellboote: Wie machen wir digitale Bildung agiler?}, series = {Pearson Deutschland der "Higher Education Summit 2018" zum Thema "Chancen und Notwendigkeiten der digitalisierten Hochschullehre", 19.10.2018}, booktitle = {Pearson Deutschland der "Higher Education Summit 2018" zum Thema "Chancen und Notwendigkeiten der digitalisierten Hochschullehre", 19.10.2018}, publisher = {Pearson}, address = {Frankfurt}, organization = {Pearson}, year = {2018}, abstract = {Die Digitalisierung kommt - auch in der Hochschullehre. Daran besteht kein Zweifel. Die Frage ist nur: Wann, wo und wie die deutsche Hochschullandschaft dem unaufhaltsamen Trend begegnen wird, um sowohl im nationalen wie auch internationalen Vergleich attraktiv und wettbewerbsf{\"a}hig zu bleiben. Eine Mammutaufgabe, zu deren erfolgreicher Bew{\"a}ltigung viele verschiedene „Stellschrauben" gedreht werden m{\"u}ssen. Welche das sind, wer sie bet{\"a}tigen muss und wohin die Reise letztendlich f{\"u}hren kann - darauf sucht der 1. HIGHER EDUCATION Summit 2018 kreative, kontroverse und vision{\"a}re Antworten. Veranstaltet vom neuen FORUM Higher Education, bringt der programmatisch hochwertige und intensive Tageskongress f{\"u}hrende Denker, Entscheider und Anwender digitaler Lern- und Lehrl{\"o}sungen f{\"u}r den Hochschulbetrieb aus dem deutschsprachigen Raum zusammen.}, language = {de} } @inproceedings{Marmann2018, author = {Marmann, Michael}, title = {Mit agilen Konzepten Digitalkompetenz f{\"o}rdern - Perspektiven f{\"u}r das Lernen und Lehren an Hochschulen}, series = {Tag der digitalen Lehre 2018, 2.10.2018 an der Universtit{\"a}t Regensurg}, booktitle = {Tag der digitalen Lehre 2018, 2.10.2018 an der Universtit{\"a}t Regensurg}, publisher = {Universit{\"a}t Regensburg}, address = {Regensburg}, organization = {Universit{\"a}t Regensburg; Zentrum f{\"u}r Hochschul- und Wirtschaftsdidaktik}, year = {2018}, abstract = {Vortrag ist als Videomitschnitt verf{\"u}gbar. Siehe related URL}, language = {de} } @misc{Marmann2018, author = {Marmann, Michael}, title = {Agile Lernsettings zur Entwicklung der digital literacy - Perspektiven f{\"u}r die Hochschullehre}, series = {Ringvorlesung Medien / Zuk{\"u}nfte an der TU Braunschweig}, journal = {Ringvorlesung Medien / Zuk{\"u}nfte an der TU Braunschweig}, publisher = {Technische Universit{\"a}t Brauschweig}, address = {Braunschweig}, organization = {Technische Universit{\"a}t Brauschweig}, year = {2018}, abstract = {Die Buzzwords Agilit{\"a}t und Digitalisierung sind in aller Munde. Durch den damit verbundenen digitalen Wandel ben{\"o}tigt der Arbeitsmarkt Personal mit hoher Digitalkompetenz, und zwar {\"u}ber alle Branchen und Berufsprofile hinweg. Doch wie l{\"a}sst sich das erreichen? Welchen Part k{\"o}nnen und sollten Hochschulen in der Entwicklung der digital literacy {\"u}bernehmen? Anhand konkreter Beispiele aus der Lehrpraxis zeigt der Vortrag auf, wie agile Konzepte und digitale Medien in neuen Lernsettings zusammenwirken k{\"o}nnen, um die Studierenden besser auf eine zunehmend digitalisierte Lebens- und Arbeitswelt vorzubereiten. Videomitschnitt der Vorlesung ist verf{\"u}gbar. Siehe related URL.}, language = {de} } @misc{BauerMarmann2017, author = {Bauer, Lena and Marmann, Michael}, title = {Was ist eigentlich ein "UnSeminar": Interview mit Prof. Marmann vom 10.11.2017}, publisher = {Hochschule D{\"u}sseldorf}, address = {D{\"u}sseldorf}, organization = {Hochschulradio}, year = {2017}, abstract = {Was ist eigentlich ein "UnSeminar"? Prof. Marmann aus dem Fachbereich Medien der Hochschule D{\"u}sseldorf erkl{\"a}rt in einem Interview mit dem Hochschulradio D{\"u}sseldorf​ sein Konzept f{\"u}r die Durchf{\"u}hrung von Seminaren, das den Teilnehmerinnen und Teilnehmern sehr viel Freiheit in der (digitalen) Ausgestaltung der Themen bietet. In Anlehnung an das Barcamp-Format, das auch "Unkonferenz" genannt wird, werden die Seminarthemen erst im Verlauf der Veranstaltung und durch Teilnehmenden entwickelt. Hierzu dienen mehrere Feedbackschleifen. Dar{\"u}ber hinaus kommen in den Unseminaren verschiedene digitale Technologien zur Organisation, zur Kommunikation und zur Kreation zum Einsatz, um en passant auch die Digitalkompetenz der Studierenden weiterzuentwickeln. So ist z.B. ein Multimedia-Abstract Bestandteil eines jeden Seminarbeitrages und die Seminarbeitr{\"a}ge selbst werden mit einem typischen Blogsystem ausgearbeitet. Alle Beitr{\"a}ge sind innerhalb des Fachbereichs f{\"u}r interessierte Studierende einsehbar, so dass Studierende auch von Kommilitonen lernen k{\"o}nnen. ​}, language = {de} } @misc{HankeMarmann2018, author = {Hanke, Florian and Marmann, Michael}, title = {{\"U}ber UnSeminare, agile Lehre und Digital Literacy - Michael Marmann im Interview}, series = {HFD Winter School 2017}, journal = {HFD Winter School 2017}, publisher = {Stifterverband f{\"u}r die Deutsche Wissenschaft e.V.}, address = {Berlin}, organization = {Stifterverband f{\"u}r die Deutsche Wissenschaft e.V.}, year = {2018}, abstract = {In diesem Interview mit Prof. Dr. Michael Marmann von der Hochschule D{\"u}sseldorf geht es um Digitalkompetenz und agile Lehre. Dar{\"u}ber hinaus erkl{\"a}rt uns Prof. Dr. Marmann was es mit UnSeminaren auf sich hat. Als Informatiker ist er f{\"u}r die Lehr- und Forschungsgebiete E-Learning, Multimedia und Datenbanksysteme verantwortlich. Seine Hauptforschungsinteressen liegen in den Bereichen E-Learning-Strategien, Optimierung von E-Learning-Entwicklungsprozessen, E-Assessment-Systeme und Digitale Transformation. Das Interview fand im Rahmen der HFD Winter School 2017 in Berlin statt. Interview ist online verf{\"u}gbar. Siehe related URL.}, language = {de} } @inproceedings{Marmann2018, author = {Marmann, Michael}, title = {Trello, Slack und Episode X - Geht Hochschullehre auch agil?}, series = {Learntec 2018, 20.01.-01.02.2018 in Karlsruhe}, booktitle = {Learntec 2018, 20.01.-01.02.2018 in Karlsruhe}, publisher = {Learntec}, address = {Karlsruhe}, organization = {Learntec}, year = {2018}, abstract = {Das Buzzword Agilit{\"a}t ist in aller Munde. Agile Methoden und Werkzeuge werden vor allem in der Softwareentwicklung eingesetzt. Agilit{\"a}t steht dort vor allem f{\"u}r mehr Flexibilit{\"a}t und Kundenorientierung. Mehr und mehr setzen sich agile Prinzipien aber auch als generelles Managementkonzept jenseits der Softwareentwicklung durch. Gerade junge Unternehmen und Startups der Digitalbranche mit Ihren oftmals flachen Hierarchien machen sich agile Werte wie Selbstorganisation, Transparenz, Commitment, Kommunikation auf Augenh{\"o}he und kontinuierliches Feedback zu eigen. Wir haben uns gefragt, ob sich agile Werte, Prinzipien und Methoden nicht auch auf die Hochschullehre {\"u}bertragen lassen. F{\"u}hrt z.B. der Einsatz agiler Projekttools wie Slack oder Trello zu einer Bereicherung klassischer Lehrformate? Welche Auswirkungen haben sie m{\"o}glicherweise auf Lernintensit{\"a}t und Lehreffizienz? L{\"a}sst sich mit "agileren" Lehrformaten auch ein Beitrag zur Entwicklung der digital literacy von Studierenden erzielen, um sie auf diesem Weg besser auf eine zunehmend digitalisierte Lebens- und Arbeitswelt vorzubereiten? In mehreren Lehrveranstaltungen j{\"u}ngerer Vergangenheit sind wir diesen Fragen nachgegangen und berichten in diesem Beitrag {\"u}ber unsere Erfahrungen.}, language = {de} } @inproceedings{Marmann2017, author = {Marmann, Michael}, title = {Wie l{\"a}sst sich digital literacy in die Hochschullehre integrieren}, series = {HFD Winter School 2017, 4.12.-6.12.2017}, booktitle = {HFD Winter School 2017, 4.12.-6.12.2017}, publisher = {Stifterverband f{\"u}r die Deutsche Wissenschaft e.V.}, organization = {Stifterverband f{\"u}r die Deutsche Wissenschaft e.V.}, year = {2017}, language = {de} } @inproceedings{Mohren2019, author = {Mohren, Henning}, title = {Dienstleistungen der Campus IT unter Governance-Gesichtspunkten}, series = {Herbsttagung der Zentren f{\"u}r Kommunikations- und Informationsverarbeitung e.V. (ZKI), D{\"u}sseldorf, 09.-11.09.2019}, booktitle = {Herbsttagung der Zentren f{\"u}r Kommunikations- und Informationsverarbeitung e.V. (ZKI), D{\"u}sseldorf, 09.-11.09.2019}, address = {D{\"u}sseldorf}, organization = {Zentren f{\"u}r Kommunikations- und Informationsverarbeitung e.V.}, year = {2019}, subject = {Dienstleistung}, language = {de} } @inproceedings{Mohren2018, author = {Mohren, Henning}, title = {Entwicklung einer Softwarel{\"o}sung zur Personalbedarfsbemessung in Hochschul-DVZ}, publisher = {Hagen}, year = {2018}, subject = {Dienstleistung}, language = {de} } @incollection{Mohren2003, author = {Mohren, Henning}, title = {Automatische SSL-Zertifizierung}, series = {Security, E-Learning, E-Services}, booktitle = {Security, E-Learning, E-Services}, editor = {von Knop, Jan and Haverkamp, Wilhelm and Jessen, Eike}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, isbn = {3-88579-373-3}, pages = {233 -- 242}, year = {2003}, abstract = {Die Akzeptanz und Verbreitung von PKI-L{\"o}sungen (Public Key Infrastructure) nimmt in den letzten Jahren zwar zu, ein Durchbruch ist jedoch bisher nicht gelungen. Ein Grund daf{\"u}r ist das aufw{\"a}ndige und f{\"u}r den Endanwender schwer zu durchschauende Verfahren, um an ein SSL-Zertifikat zu gelangen. Die hohen Sicherheitsanforderungen einer qualifizierten Zertifizierung stehen derzeit dem fl{\"a}chendeckenden Einsatz entgegen. Um die Akzeptanz von PKI-L{\"o}sungen zu erh{\"o}hen, bieten sich - sowohl im universit{\"a}ren als auch im außeruniversit{\"a}ren Umfeld - Zertifikate, das sind elektronische Identit{\"a}tsbescheinigungen f{\"u}r Personen und Maschinen, die den Personen oder Maschinen eindeutig Signaturpr{\"u}fschl{\"u}ssel zuordnen, an. Solche Zertifikate k{\"o}nnen auch in automatisierten Verfahren ausgestellt werden. Dieser Artikel beschreibt die zur automatisierten Vergabe von Zertifikaten erforderlichen Verfahrensweisen und Sicherheitsvorkehrungen.}, language = {de} } @incollection{MohrenSternberger2003, author = {Mohren, Henning and Sternberger, Klaus}, title = {Zertifikatsserver der FernUniversit{\"a}t}, series = {Jahrbuch der Gesellschaft der Freunde der FernUniversit{\"a}t e.V. 2002}, booktitle = {Jahrbuch der Gesellschaft der Freunde der FernUniversit{\"a}t e.V. 2002}, editor = {Rapp-Frick, Hans-Peter}, address = {Hagen}, isbn = {3-9806654-5-3}, pages = {129 -- 136}, year = {2003}, language = {de} } @techreport{PaffrathMohren2003, author = {Paffrath, and Mohren, Henning}, title = {Roaming am Beispiel der Secure Shell (SSH): Anleitung f{\"u}r den mobilen Netz-Nutzer. Version: 3.0}, publisher = {DFN-Vereins}, organization = {DFN-Vereins}, year = {2003}, language = {de} } @incollection{Mohren2004, author = {Mohren, Henning}, title = {Zertifikate an der FernUniversit{\"a}t}, series = {Jahrbuch der FernUniversit{\"a}t in Hagen}, booktitle = {Jahrbuch der FernUniversit{\"a}t in Hagen}, address = {Hagen}, year = {2004}, language = {de} } @incollection{HaasMohren2005, author = {Haas, Stephanie and Mohren, Henning}, title = {PKI-Kooperationen zwischen Hochschulen und externen Einrichtungen}, series = {12. Workshop Sicherheit in Vernetzten Systemen}, booktitle = {12. Workshop Sicherheit in Vernetzten Systemen}, editor = {Thorbr{\"u}gge, Marco}, publisher = {DFN-CERT Services}, address = {Hamburg}, isbn = {3000153691}, year = {2005}, language = {de} } @incollection{MohrenPieper2007, author = {Mohren, Henning and Pieper, Stephan}, title = {Automatischer X.509v3-Zertifizierungsdienst}, series = {Informatik 2007: Informatik trifft Logistik. Beitr{\"a}ge der 37. Jahrestagung der Gesellschaft f{\"u}r Informatik e.V. (GI); 24. - 27. September 2007 in Bremen, GI Jahrestagung: Band 2}, booktitle = {Informatik 2007: Informatik trifft Logistik. Beitr{\"a}ge der 37. Jahrestagung der Gesellschaft f{\"u}r Informatik e.V. (GI); 24. - 27. September 2007 in Bremen, GI Jahrestagung: Band 2}, editor = {Koschke, Rainer and Herzog, Otthein and R{\"o}diger, Karl-Heinz and Ronthaler, Marc}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, isbn = {9783885792048}, pages = {169 -- 173}, year = {2007}, abstract = {Als erste Hochschule in Deutschland hat die FernUniversit{\"a}t in Hagen einen Server entwickelt, der den gesamten Vorgang einer X.509-Zertifizierung vom Antrag bis zum Empfang des Zertifikats durch den Nutzer innerhalb weniger Sekunden automatisch abwickelt. Es wurde bei der Entwicklung auf eine einfache und intuitive Bedienung Wert gelegt. Die Eingabem{\"o}glichkeiten des Nutzers wurden optimiert, um den Supportaufwand zu senken und das System besser etablieren zu k{\"o}nnen. Der Zertifikatsserver existiert mittlerweile in der Version 5.0. Seit dieser Version wird die sichere Speicherung der Signaturschl{\"u}ssel auf einem Hardware Security Modul (HSM) unterst{\"u}tzt, dar{\"u}ber hinaus k{\"o}nnen digitale Zertifikate mit speziell definierten Attributen ausgestellt werden. Dadurch k{\"o}nnen z.B. Zertifikate generiert werden, die nur verschl{\"u}sseln oder digital signieren k{\"o}nnen. Der Zertifikatsserver der FernUniversit{\"a}t in Hagen wurde an Hochschulen in Nordrhein-Westfalen im Hostingbetrieb zur Verf{\"u}gung gestellt und an zwei Hochschulen verkauft.}, language = {de} } @article{BergHomrighausenKreplinetal.2009, author = {Berg, Esther and Homrighausen, Andreas and Kreplin, Brigitte and Mohren, Henning}, title = {Hagen System Relaunch (hs.r) — Auswirkungen der Prozessorientierung auf das Zentrum f{\"u}r Medien und IT}, series = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, volume = {32}, journal = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, number = {4}, publisher = {De Gruyter}, doi = {10.1515/piko.2009.0046}, year = {2009}, language = {de} } @techreport{AuthBauerBestenlehneretal.2012, author = {Auth, Gunnar and Bauer, Hans-J{\"o}rg and Bestenlehner, Matthias and Felbecker, Heribert and Hartmann, Andreas and von der Heyde, Markus and Klapper, Frank and Lorenz, S{\"o}ren and Maly, Rudolf and Mohren, Henning and Peter, Gerhard and Prill, Torsten and Springer, G{\"u}nter and Weithofer, Irene}, title = {Treiben oder getrieben werden? IT-Strategie in Hochschulen}, address = {Heilbronn}, organization = {Zentren f{\"u}r Kommunikation und Informationsverarbeitung in Lehre und Forschung e.V.}, year = {2012}, language = {de} } @inproceedings{Mohren2019, author = {Mohren, Henning}, title = {ZKI Herbsttagung 2019}, series = {ZKI-Fr{\"u}hjahrstagung 2019, 20.03.2009}, booktitle = {ZKI-Fr{\"u}hjahrstagung 2019, 20.03.2009}, address = {Erfurft}, organization = {Friedrich-Schiller-Universit{\"a}t Jena}, year = {2019}, language = {de} } @inproceedings{vanAerssenLeichSchmidtetal.2022, author = {van Aerssen, Max and Leich, Christian and Schmidt, Holger and Al Ali, Salar and Benni, Abdulkader and Tanz, Jakob}, title = {CopypastaVulGuard - A browser extension to prevent copy and paste spreading of vulnerable source code in forum posts}, series = {ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security}, booktitle = {ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security}, publisher = {Association for Computing Machinery}, address = {New York}, doi = {10.1145/3538969.3538973}, pages = {1 -- 8}, year = {2022}, abstract = {Forums such as Stack Overflow are used by many software developers to find a solution for a given coding problem. Found solutions, i.e. forum posts containing relevant source code, are utilized in a copy and paste manner. This behavior carries the risk that vulnerabilities contained in the source code of the forum posts are spread. Software developers should be able to identify vulnerable source code at an early stage, thereby preventing copying the corresponding source code. In this paper, we introduce the tool CopypastaVulGuard that identifies vulnerable source code in forum posts and allows software developers to omit the source code by marking the forum posts as dangerous. Our tool consists of a browser extension and a management application capable to address as examples SQL injections, remote code executions and deprecated functions based on a dump of the archive.org Stack Overflow data set. We present an evaluation of our tool's possible impact and relevance considering pros/cons and selected research questions.}, language = {en} } @inproceedings{HimmeleinSteffens2022, author = {Himmelein, H. and Steffens, Jochen}, title = {"Ich sehe, was Du h{\"o}rst!" - Verwendung der Pupillometrie zur Messung des Einflusses kognitiver Belastung auf die Ger{\"a}uschbewertung}, series = {Deutsche Jahrestagung f{\"u}r Akustik (DAGA), Stuttgart}, booktitle = {Deutsche Jahrestagung f{\"u}r Akustik (DAGA), Stuttgart}, address = {Stuttgart}, year = {2022}, language = {de} } @inproceedings{BeckersFassbenderHeiseletal.2012, author = {Beckers, Kristian and Faßbender, Stephan and Heisel, Maritta and K{\"u}ster, Jan-Christoph and Schmidt, Holger}, title = {Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches}, series = {Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings}, volume = {LNCS, 7159}, booktitle = {Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings}, editor = {Barthe, Gilles and Livshits, Benjamin and Scandariato, Riccardo}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-28165-5}, doi = {10.1007/978-3-642-28166-2_2}, pages = {14 -- 21}, year = {2012}, language = {en} } @inproceedings{BeckersFassbenderKuesteretal.2012, author = {Beckers, Kristian and Faßbender, Stephan and K{\"u}ster, Jan-Christoph and Schmidt, Holger}, title = {A Pattern-Based Method for Identifying and Analyzing Laws}, series = {Requirements Engineering: Foundation for Software Quality: 18th International Working Conference, REFSQ 2012, Essen, Germany, March 19-22, 2012. Proceedings}, volume = {LNCS, 7195}, booktitle = {Requirements Engineering: Foundation for Software Quality: 18th International Working Conference, REFSQ 2012, Essen, Germany, March 19-22, 2012. Proceedings}, editor = {Regnell, Bj{\"o}rn and Damian, Daniela}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-28713-8}, doi = {10.1007/978-3-642-28714-5_23}, pages = {256 -- 262}, year = {2012}, language = {en} } @inproceedings{SchwittekSchmidtBeckersetal.2012, author = {Schwittek, Widura and Schmidt, Holger and Beckers, Kristian and Eicker, Stefan and Faßbender, Stephan and Heisel, Maritta}, title = {A Common Body of Knowledge for Engineering Secure Software and Services}, series = {2012 Seventh International Conference on Availability, Reliability and Security}, volume = {NESSoS, ICT-2009.1.4 Trustworthy ICT, Grant No. 25698}, booktitle = {2012 Seventh International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Prague}, isbn = {978-1-4673-2244-7}, doi = {10.1109/ARES.2012.31}, pages = {499 -- 506}, year = {2012}, abstract = {The discipline of engineering secure software and services brings together researchers and practitioners from software, services, and security engineering. This interdisciplinary community is fairly new, it is still not well integrated and is therefore confronted with differing perspectives, processes, methods, tools, vocabularies, and standards. We present a Common Body of Knowledge (CBK) to overcome the aforementioned problems. We capture use cases from research and practice to derive requirements for the CBK. Our CBK collects, integrates, and structures knowledge from the different disciplines based on an ontology that allows one to semantically enrich content to be able to query the CBK. The CBK heavily relies on user participation, making use of the Semantic MediaWiki as a platform to support collaborative writing. The ontology is complemented by a conceptual framework, consisting of concepts to structure the knowledge and to provide access to it, and a means to build a common terminology. We also present organizational factors covering dissemination and quality assurance.}, language = {en} } @inproceedings{BeckersFassbenderSchmidt2012, author = {Beckers, Kristian and Faßbender, Stephan and Schmidt, Holger}, title = {An Integrated Method for Pattern-Based Elicitation of Legal Requirements Applied to a Cloud Computing Example}, series = {2012 Seventh International Conference on Availability, Reliability and Security}, booktitle = {2012 Seventh International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Prague}, isbn = {978-0-7695-4775-6}, doi = {10.1109/ARES.2012.25}, pages = {463 -- 472}, year = {2012}, abstract = {Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws.}, language = {en} } @incollection{SchmidtHateburHeisel2011, author = {Schmidt, Holger and Hatebur, Denis and Heisel, Maritta}, title = {A Pattern-Based Method to Develop Secure Software}, series = {Software Engineering for Secure Systems: Industrial and Research Perspectives}, booktitle = {Software Engineering for Secure Systems: Industrial and Research Perspectives}, editor = {Mouratidis, Haralambos}, publisher = {IGI Global}, address = {Hershey}, isbn = {978-1-61520-837-1}, doi = {10.4018/978-1-61520-837-1.ch003}, pages = {32 -- 74}, year = {2011}, abstract = {The authors present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. The authors describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Afterwards, the security problems and the solution approaches are formally modeled in detail. The formal models serve to prove that the solution approaches are correct solutions to the security problems. Furthermore, the formal models of the solution approaches constitute a formal specification of the software to be developed. Then, the specification is implemented by generic security components and generic security architectures, which constitute architectural patterns. Finally, the generic security components and the generic security architecture that composes them are refined and the result is a secure software product built from existing and/or tailor-made security components.}, language = {en} } @inproceedings{JuerjensOchoaSchmidtetal.2011, author = {J{\"u}rjens, Jan and Ochoa, Mart{\´i}n and Schmidt, Holger and Marchal, Lo{\"i}c and Houmb, Siv Hilde and Islam, Shareeful}, title = {Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications}, series = {Formal Methods for Eternal Networked Software Systems: 11th International School on Formal Methods for the Design of Computer, Communication and Software Systems, SFM 2011, Bertinoro, Italy, June 13-18, 2011. Advanced Lectures}, volume = {LNCS, 6659}, booktitle = {Formal Methods for Eternal Networked Software Systems: 11th International School on Formal Methods for the Design of Computer, Communication and Software Systems, SFM 2011, Bertinoro, Italy, June 13-18, 2011. Advanced Lectures}, editor = {Bernardo, Marco and Issarny, Val{\´e}rie}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-21455-4}, doi = {10.1007/978-3-642-21455-4_15}, pages = {504 -- 526}, year = {2011}, abstract = {Developing security-critical systems is difficult, and there are many well-known examples of vulnerabilities exploited in practice. In fact, there has recently been a lot of work on methods, techniques, and tools to improve this situation already at the system specification and design. However, security-critical systems are increasingly long-living and undergo evolution throughout their lifetime. Therefore, a secure software development approach that supports maintaining the needed levels of security even through later software evolution is highly desirable. In this chapter, we recall the UMLsec approach to model-based security and discuss on tools and techniques to model and verify evolution of UMLsec models.}, language = {en} } @article{Schmidt2011, author = {Schmidt, Holger}, title = {Threat and Risk-Driven Security Requirements Engineering}, series = {International Journal of Mobile Computing and Multimedia Communications}, volume = {3}, journal = {International Journal of Mobile Computing and Multimedia Communications}, number = {1}, publisher = {IGI Global}, issn = {1937-9412}, doi = {10.4018/jmcmc.2011010103}, pages = {35 -- 50}, year = {2011}, abstract = {In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements.}, language = {en} } @techreport{SchmidtJuerjens2011, author = {Schmidt, Holger and J{\"u}rjens, Jan}, title = {UMLsec4UML2 - Adopting UMLsec to Support UML2}, series = {LS 14 Software Engineering mit dem Schwerpunkt Entwicklung evolutionsf{\"a}higer Software und Systeme}, journal = {LS 14 Software Engineering mit dem Schwerpunkt Entwicklung evolutionsf{\"a}higer Software und Systeme}, publisher = {Technische Hochschule Dortmund}, address = {Dortmund}, doi = {10.17877/DE290R-990}, pages = {17}, year = {2011}, abstract = {In this paper, we present an approach to adopt UMLsec, which is defined for UML 1.5, to support the current UML version 2.3. The new profile UMLsec4UML2 is technically constructed as a UML profile diagram, which is equipped with a number of integrity conditions expressed using OCL. Consequently, the UMLsec4UML2-profile can be loaded in any Eclipse-based EMF- and MDT-compatible UML editing tool to develop and analyze different kinds of security models. The OCL constraints replace the static checks of the tool support for the old UMLsec defined for UML 1.5. Thus, the UMLsec4UML2-profile not only provides the whole expresiveness of UML2.3 for security modeling, it also brings considerably more freedom in selecting a basic UML editing tool, and it integrates modeling and analyzing security models. Since UML2.3 comprises new diagram types, as well as new model elements and new semantics of diagram types already contained in UML1.5, we consider a number of these changes in detail. More specifically, we consider composite structure and sequence diagrams with respect to modeling security properties according to the original version of UMLsec. The goal is to use UMLsec4UML2 to specify architectural security patterns.}, language = {en} } @inproceedings{HeymanYskoutScandariatoetal.2011, author = {Heyman, Thomas and Yskout, Koen and Scandariato, Riccardo and Schmidt, Holger and Yu, Yijun}, title = {The Security Twin Peaks}, series = {Engineering Secure Software and Systems: Third International Symposium, ESSoS 2011, Madrid, Spain, February 9-10, 2011. Proceedings}, volume = {LNCS}, booktitle = {Engineering Secure Software and Systems: Third International Symposium, ESSoS 2011, Madrid, Spain, February 9-10, 2011. Proceedings}, number = {6542}, editor = {Erlingsson, {\´U}lfar and Wieringa, Roel and Zannone, Nicola}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-19124-4}, doi = {10.1007/978-3-642-19125-1_13}, pages = {167 -- 180}, year = {2011}, language = {en} } @inproceedings{HateburHeiselJuerjensetal.2011, author = {Hatebur, Denis and Heisel, Maritta and J{\"u}rjens, Jan and Schmidt, Holger}, title = {Systematic Development of UMLsec Design Models Based on Security Requirements}, series = {Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbr{\"u}cken, Germany, March 26-April 3, 2011. Proceedings}, volume = {LNCS, 6603}, booktitle = {Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbr{\"u}cken, Germany, March 26-April 3, 2011. Proceedings}, editor = {Giannakopoulou, Dimitra and Orejas, Fernando}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-19810-6}, doi = {10.1007/978-3-642-19811-3_17}, pages = {232 -- 246}, year = {2011}, language = {en} } @inproceedings{SchmidtJuerjens2011, author = {Schmidt, Holger and J{\"u}rjens, Jan}, title = {Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec}, series = {Advanced Information Systems Engineering: 23rd International Conference, CAiSE 2011, London, UK, June 20-24, 2011. Proceedings}, volume = {LNCS, 6741}, booktitle = {Advanced Information Systems Engineering: 23rd International Conference, CAiSE 2011, London, UK, June 20-24, 2011. Proceedings}, editor = {Mouratidis, Haralambos and Rolland, Colette}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-21639-8}, doi = {10.1007/978-3-642-21640-4_28}, pages = {367 -- 382}, year = {2011}, language = {en} } @inproceedings{JuerjensMarchalOchoaetal.2011, author = {J{\"u}rjens, Jan and Marchal, Lo{\"i}c and Ochoa, Mart{\´i}n and Schmidt, Holger}, title = {Incremental Security Verification for Evolving UMLsec models}, series = {Modelling Foundations and Applications: 7th European Conference, ECMFA 2011, Birmingham, UK, June 6 - 9, 2011 Proceedings}, volume = {LNCS, 6698}, booktitle = {Modelling Foundations and Applications: 7th European Conference, ECMFA 2011, Birmingham, UK, June 6 - 9, 2011 Proceedings}, editor = {France, Robert B. and Kuester, Jochen M. and Bordbar, Behzad and Paige, Richard F.}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-21469-1}, doi = {10.1007/978-3-642-21470-7_5}, pages = {52 -- 68}, year = {2011}, language = {en} } @inproceedings{BeckersSchmidtKuesteretal.2011, author = {Beckers, Kristian and Schmidt, Holger and K{\"u}ster, Jan-Christoph and Faßbender, Stephan}, title = {Pattern-Based Support for Context Establishment and Asset Identification of the ISO 27000 in the Field of Cloud Computing}, series = {2011 Sixth International Conference on Availability, Reliability and Security}, booktitle = {2011 Sixth International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Vienna}, isbn = {978-1-4577-0979-1}, doi = {10.1109/ARES.2011.55}, pages = {327 -- 333}, year = {2011}, abstract = {The ISO 27000 is a well-established series of information security standards. The scope for applying these standards can be an organisation as a whole, single business processes or even an IT application or IT infrastructure. The context establishment and the asset identification are among the first steps to be performed. The quality of the results produced when performing these steps has a crucial influence on the subsequent steps such as identifying loss, vulnerabilities, possible attacks and defining countermeasures. Thus, a context analysis to gather all necessary information in the initial steps is important, but is not offered in the standard. In this paper, we focus on the scope of cloud computing systems and present a way to support the context establishment and the asset identification described in ISO 27005. A cloud system analysis pattern and different kinds of stakeholder templates serve to understand and describe a given cloud development problem, i.e. the envisaged IT systems and the relevant parts of the operational environment. We illustrate our support using an online banking cloud scenario.}, language = {en} } @inproceedings{CoteHeiselSchmidtetal.2011, author = {C{\^o}t{\´e}, Isabelle and Heisel, Maritta and Schmidt, Holger and Hatebur, Denis}, title = {UML4PF — A tool for problem-oriented requirements analysis}, series = {2011 IEEE 19th International Requirements Engineering Conference}, booktitle = {2011 IEEE 19th International Requirements Engineering Conference}, publisher = {IEEE}, address = {Trento}, isbn = {978-1-4577-0924-1}, doi = {10.1109/RE.2011.6051670}, pages = {349 -- 350}, year = {2011}, abstract = {We present UML4PF, a tool for requirements analysis based on problem frames. It consists of a UML profile and an Eclipse-Plugin to model and analyze problem diagrams, derive specifications, and develop architectures.}, language = {en} } @inproceedings{SchwittekSchmidtEickeretal.2011, author = {Schwittek, Widura and Schmidt, Holger and Eicker, Stefan and Heisel, Maritta}, title = {Towards a Common Body of Knowledge for Engineering Secure Software and Services}, series = {Proceedings of the International Conference on Knowledge Management and Information Sharing}, booktitle = {Proceedings of the International Conference on Knowledge Management and Information Sharing}, editor = {Filipe, Joaquim and Liu, Kecheng}, publisher = {SciTePress - Science and Technology Publications}, address = {Paris}, pages = {369 -- 374}, year = {2011}, abstract = {Interdisciplinary communities involve people and knowledge from different disciplines in addressing a common challenge. Differing perspectives, processes, methods, tools, vocabularies, and standards are problems that arise in this context. We present an approach to support bringing together disciplines based on a common body of knowledge (CBK), in which knowledge from different disciplines is collected, integrated, and structured. The novelty of our approach is twofold: first, it introduces a CBK ontology, which allows one to semantically enrich contents in order to be able to query the CBK in a more elaborate way afterwards. Second, it heavily relies on user participation in building up a CBK, making use of the Semantic MediaWiki as a platform to support collaborative writing. The CBK ontology is backed by a conceptual framework, consisting of concepts to structure the knowledge, to provide access options to it, and to build up a common terminology. To ensure a high quality of the provided contents and to sustain the community's commitment, we further present organizational means as part of our approach. We demonstrate our work using the example of a Network of Excellence EU project, which aims at bringing together researchers and practitioners from services computing, security and software engineering.}, language = {en} } @article{FabianGuersesHeiseletal.2010, author = {Fabian, Benjamin and G{\"u}rses, Seda and Heisel, Maritta and Santen, Thomas and Schmidt, Holger}, title = {A comparison of security requirements engineering methods}, series = {Requirements Engineering}, volume = {15}, journal = {Requirements Engineering}, number = {1}, publisher = {Springer}, address = {Wiesbaden}, issn = {0947-3602}, doi = {10.1007/s00766-009-0092-x}, pages = {7 -- 40}, year = {2010}, abstract = {This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another.}, language = {en} } @inproceedings{Schmidt2009, author = {Schmidt, Holger}, title = {Pattern-Based Confidentiality-Preserving Refinement}, series = {Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings}, volume = {LNCS, 5429}, booktitle = {Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings}, editor = {Massacci, Fabio and Redwine Jr., Samuel T. and Zannone, Nicola}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-00198-7}, doi = {10.1007/978-3-642-00199-4_5}, pages = {43 -- 59}, year = {2009}, language = {en} } @inproceedings{HateburHeiselSchmidt2008, author = {Hatebur, Denis and Heisel, Maritta and Schmidt, Holger}, title = {Analysis and Component-based Realization of Security Requirements}, series = {2008 Third International Conference on Availability, Reliability and Security}, booktitle = {2008 Third International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Barcelona}, isbn = {978-0-7695-3102-1}, doi = {10.1109/ARES.2008.27}, pages = {195 -- 203}, year = {2008}, abstract = {We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example.}, language = {en} } @inproceedings{HateburHeiselSchmidt2008, author = {Hatebur, Denis and Heisel, Maritta and Schmidt, Holger}, title = {A Formal Metamodel for Problem Frames}, series = {Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings}, volume = {LNCS, 5301}, booktitle = {Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings}, editor = {Czarnecki, Krzysztof and Ober, Ileana and Bruel, Jean-Michel and Uhl, Axel and V{\"o}lter, Markus}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-540-87874-2}, doi = {10.1007/978-3-540-87875-9_5}, pages = {58 -- 82}, year = {2008}, abstract = {Problem frames are patterns for analyzing, structuring, and characterizing software development problems. This paper presents a formal metamodel for problem frames expressed in UML class diagrams and using the formal specification notation OCL. That metamodel clarifies the nature of the different syntactical elements of problem frames, as well as the relations between them. It provides a framework for syntactical analysis and semantic validation of newly defined problem frames, and it prepares the ground for tool support for the problem frame approach.}, language = {de} } @inproceedings{HateburHeiselSchmidt2007, author = {Hatebur, Denis and Heisel, Maritta and Schmidt, Holger}, title = {A Pattern System for Security Requirements Engineering}, series = {The Second International Conference on Availability, Reliability and Security (ARES'07)}, booktitle = {The Second International Conference on Availability, Reliability and Security (ARES'07)}, publisher = {IEEE}, address = {Vienna}, isbn = {0-7695-2775-2}, doi = {10.1109/ARES.2007.12}, pages = {10}, year = {2007}, abstract = {We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem.}, language = {en} } @inproceedings{HateburHeiselSchmidt2006, author = {Hatebur, Denis and Heisel, Maritta and Schmidt, Holger}, title = {Security Engineering Using Problem Frames}, series = {Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding}, volume = {LNCS, 3995}, booktitle = {Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding}, editor = {M{\"u}ller, G{\"u}nter}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-540-34640-1}, doi = {10.1007/11766155_17}, pages = {238 -- 253}, year = {2006}, language = {en} } @inproceedings{RyskeldievIgarashiZhangetal.2018, author = {Ryskeldiev, Bektur and Igarashi, Toshiharu and Zhang, Junjian and Ochiai, Yoichi and Cohen, Michael and Herder, Jens}, title = {Spotility: Crowdsourced Telepresence for Social and Collaborative Experiences in Mobile Mixed Reality}, series = {ACM Conference on Computer Supported Cooperative Work and Social Computing (CSCW '18)}, booktitle = {ACM Conference on Computer Supported Cooperative Work and Social Computing (CSCW '18)}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-6018-0}, doi = {10.1145/3272973.3274100}, pages = {373 -- 376}, year = {2018}, abstract = {Live video streaming is becoming increasingly popular as a form of interaction in social applications. One of its main advantages is an ability to immediately create and connect a community of remote users on the spot. In this paper we discuss how this feature can be used for crowdsourced completion of simple visual search tasks (such as finding specific objects in libraries and stores, or navigating around live events) and social interactions through mobile mixed reality telepresence interfaces. We present a prototype application that allows users to create a mixed reality space with a photospherical imagery as a background and interact with other connected users through viewpoint, audio, and video sharing, as well as realtime annotations in mixed reality space. Believing in the novelty of our system, we conducted a short series of interviews with industry professionals on the possible applications of our system. We discuss proposed use-cases for user evaluation, as well as outline future extensions of our system.}, language = {en} }