TY - CHAP A1 - Vermeegen, Kai A1 - Herder, Jens ED - Herder, Jens ED - Geiger, Christian ED - Dörner, Ralf ED - Grimm, Paul T1 - A Lighthouse-based Camera Tracking System for Professional Virtual Studios T2 - Workshop Proceedings / Tagungsband: Virtuelle und Erweiterte Realität – 15. Workshop der GI-Fachgruppe VR/AR N2 - This article describes the possibilities and problems that occur using the SteamVR tracking 2.0 system as a camera tracking system in a virtual studio and explains an approach for implementation and calibration within a professional studio environment. The tracking system allows for cost effective deployment. Relevant application fields are also mixed reality recording and streaming of AR and VR experiences. KW - Camera Tracking KW - SteamVR KW - HMD KW - Virtual (TV) Studio KW - Augmented Virtuality Y1 - 2018 UR - http://vsvr.medien.hs-duesseldorf.de/publications/gi-vrar2018-lighthouse-vs/ SN - 978-3-8440-6215-1 U6 - https://doi.org/10.2370/9783844062151 N1 - Zugriff auf den Titel über die angegebene URL. Publication access via URL. SP - 19 EP - 26 PB - Shaker Verlag CY - Herzogenrath ER - TY - GEN T1 - Übersicht aller Amtliche Mitteilungen - Verkündungsblätter der Hochschule Düsseldorf (ehemals Fachhochschule Düsseldorf) N2 - Die Amtlichen Mitteilungen - Verkündungsblätter der Hochschule Düsseldorf gehören zur Hochschulbibliogafie der HSD. T3 - Amtliche Mitteilungen : Verkündungsblatt der Hochschule Düsseldorf - 1000 KW - Amtliche Mitteilungen KW - FHD Y1 - UR - https://opus4.kobv.de/opus4-hs-duesseldorf/solrsearch/index/search/searchtype/series/id/12/start/0/rows/10 CY - Düsseldorf ER - TY - CHAP A1 - Simsch, Jonathan A1 - Herder, Jens ED - Chisik, Yoram T1 - SpiderFeedback - Visual Feedback for Orientation in Virtual TV Studios T2 - ACE'14, 11th Advances in Computer Entertainment Technology Conference, ACM, Funchal, Portugal N2 - A visual and spatial feedback system for orientation in virtual sets of virtual TV studios was developed and evaluated. It is based on a green proxy object, which moves around in the acting space by way of four transparent wires. A separate unit controls four winches and is connected to an engine, which renders the virtual set. A new developed plugin registers a virtual object’s position with the proxy object which imitates the virtual object’s movement on stage. This will allow actors to establish important eye contact with a virtual object and feel more comfortable in a virtual set. Furthermore, interaction with the virtual object and its proxy can be realised through a markerless actor tracking system. Several possible scenarios for user application were recorded and presented to experts in the broadcast industry, who evaluated the potential of SpiderFeedback in interviews and by questionnaires. KW - Mixed reality KW - visual feedback KW - stage flight system KW - presentation assistance KW - VSVR KW - Virtual (TV) Studio Y1 - 2014 UR - https://dl.acm.org/citation.cfm?doid=2663806.2663830 SN - 978-1-4503-2945-3 U6 - https://doi.org/10.1145/2663806.2663830 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. PB - ACM CY - New York ER - TY - CHAP A1 - Fiedler, Jannik A1 - Rilling, Stefan A1 - Bogen, Manfred A1 - Herder, Jens ED - Braz, José T1 - Multimodal interaction techniques in scientific data visualization: An analytical survey T2 - In Proceedings of the 10th International Conference on Computer Graphics Theory and Applications (GRAPP-2015) N2 - The interpretation process of complex data sets makes the integration of effective interaction techniques crucial. Recent work in the field of human-computer interaction has shown that there is strong evidence that multimodal user interaction, i.e. the integration of various input modalities and interaction techniques into one comprehensive user interface, can improve human performance when interacting with complex data sets. However, it is still unclear which factors make these user interfaces superior to unimodal user interfaces. The contribution of this work is an analytical comparison of a multimodal and a unimodal user interface for a scientific visualization application. We show that multimodal user interaction with simultaneously integrated speech and gesture input improves user performance regarding efficiency and ease of use. KW - Interaction KW - Mulitmodal KW - Interaction Techniques KW - 3-D Interaction KW - Immersive Environments KW - VSVR Y1 - 2015 SN - 978-989-758-087-1 U6 - https://doi.org/10.5220/0005296404310437 SP - 431 EP - 437 PB - SCITEPRESS CY - s. l. ER - TY - CHAP A1 - Herder, Jens A1 - Daemen, Jeff A1 - Haufs-Brusberg, Peter A1 - Abdel Aziz, Isis ED - Brunnett, Guido ED - Coquillart, Sabine ED - van Liere, Robert ED - Welch, Gregory ED - Váša, Libor T1 - Four Metamorphosis States in a Distributed Virtual (TV) Studio: Human, Cyborg, Avatar, and Bot - Markerless Tracking and Feedback for Realtime Animation Control T2 - Virtual Realities: International Dagstuhl Seminar, Dagstuhl Castle, Germany, June 9-14, 2013, Revised Selected Papers KW - Markeless tracking KW - virtual studio KW - Avatars KW - virtual characters KW - Interaction feedback KW - VSVR KW - Virtual (TV) Studio Y1 - 2015 UR - https://link.springer.com/chapter/10.1007/978-3-319-17043-5_2 SN - 978-3-319-17042-8 U6 - https://doi.org/10.1007/978-3-319-17043-5_2 VL - LNCS, 8844 SP - 16 EP - 32 PB - Springer CY - Cham ER - TY - CHAP A1 - Dahm, Markus T1 - MP3ergo - Usability of MP3 players T2 - proc. 10th intl conf Humans and Computers, Duesseldorf N2 - Listening to music played by small MP3-players is almost as ubiquituous as talking over mobile phones. In this paper we analyse interaction elements and usabilty of current MP3-players. To determine the usability, an empirical study based on a website that presented three simulated MP3-players was performed with over 1000 participants. The results show that, despite most marketing claims, some interaction devices are not as intuitive and really suitable for the task as they schould be. Also we found some surprising results concerning erroneous usage of navigation keys. KW - MP3 KW - usability Y1 - 2007 SP - 123 EP - 128 CY - Düsseldorf ER - TY - CHAP A1 - Dahm, Markus T1 - Broad study on the usability of mobile phones T2 - Conf. Proc. Humans and Computers HuC 2005, Aizu, Japan N2 - A mobile phone the size of a candy bar offers dozens of complex functions, a masterpiece of engineering. Unfortunately, the more functions are available, the less they are accessible to the average user. The design of the user interface suffers from a lack of suitability for the tasks, does not conform to user expectations and a suboptimal self-descriptiveness. The usability of modern mobile phones was tested in a broad survey with over 1300 participants. An internet based simulation offered tasks and an online evaluation. It could be pointed out that mobile phones are not only hard to access for novices but also those who consider themselves experts have difficulties when confronted with unknown functions or another brand of phone. Approaches to increase the usability are discussed. KW - User Interface Design KW - Usability Study KW - Mobile Phone KW - Inclusive Design Y1 - 2005 SP - 249 EP - 254 CY - Aizu ER - TY - JOUR A1 - Dahm, Markus A1 - Thiel, Christoph T1 - Gibt es die barrierefreie Brandmauer? JF - i-com: Journal of Interactive Media N2 - Es scheint so zu sein, dass sich die beiden Ziele Gebrauchstauglichkeit und Sicherheit sehr häufig in der Umsetzung gegenseitig ausschließen: Eine sehr sichere Anwendung ist meistens eher aufwändiger zu benutzen und zu warten, eine einfach zu benutzende Anwendung vernachlässigt häufig die Sicherheit. Als Lösung kann (wieder einmal) darauf hingewiesen werden, dass "gute" Software mehr ist als lediglich funktionierende Software. Im gesamten Entwicklungsprozess müssen vielfältige funktionale und nicht-funktionale Anforderungen, wie die der Sicherheit und Gebrauchstauglichkeit, berücksichtigt werden, um allen, auch sich zunächst widersprechenden, Anforderungen gerecht zu werden. KW - usability KW - security Y1 - 2008 UR - https://www.degruyter.com/view/j/icom.2008.7.issue-3/icom.2008.0029/icom.2008.0029.xml U6 - https://doi.org/10.1524/icom.2008.0029 SN - 1618-162X VL - 3 IS - 7 SP - 14 EP - 18 ER - TY - RPRT A1 - Strauß, Friedrich A1 - Beck, Astrid A1 - Dahm, Markus A1 - Hamborg, Kai-Christoph A1 - Heers, Rainer A1 - Heinecke, Andreas M. T1 - Curriculum für ein Basismodul zur Mensch-Computer- Interaktion: GI-Empfehlungen N2 - Das Gebiet Mensch-Computer-Interaktion umfasst die Analyse, Gestaltung und Bewertung menschen- und aufgabengerechter Computeranwendungen. Alle Personen die Software definieren, gestalten und erstellen sollen ein Mindestverständnis für die Anforderungen an die Gebrauchstauglichkeit (Usability) von interaktiven Systemen besitzen. Das vorliegende Curriculum beschreibt ein Basismodul für die Vermittlung des hierfür erforderlichen Wissens. Es ist ein Ziel der Gesellschaft für Informatik, dass die jeweilige Ausbildung der oben genannten Personen solch ein Basismodul enthält. KW - Empfehlung KW - Mensch-Computer-Kommunikation Y1 - 2006 PB - Gesellschaft für Informatik e.V. (GI) CY - Bonn ER - TY - BOOK A1 - Dahm, Markus T1 - Grundlagen der Mensch-Computer-Interaktion N2 - Die Interaktion zwischen Mensch und Computer ist ein sehr interessanter und immer wichtiger werdender Aspekt bei der Entwicklung von Software. In diesem Buch erfahren Sie daher - Wie Menschen und Computer kommunizieren, handeln und reagieren - Welche Interaktionsformen es für die Kommunikation mit dem Computer gibt - Wie Sie diese Kenntnisse nutzen können, um Programme zu entwickeln, die der Anwender erfolgreich nutzen kann KW - Mensch-Maschine-Kommunikation Y1 - 2006 SN - 978-3-8273-7175-1 PB - Pearson Studium CY - München ; Boston [u.a.] ER - TY - JOUR A1 - Dahm, Markus A1 - Barnjak, Frano A1 - Heilemann, Moritz T1 - 5Code – An Integrated Programming Environment for Beginners JF - i-com: Journal of Interactive Media N2 - Based on experience in teaching programming, we developed the integrated development environment (IDE) 5Code especially to support beginners. As a first step, a simple, understandable formula was developed how to advance from the problem to the program in 5 operative steps: read it → get it → think it → note it → code it. In order to reduce the cognitive load of the learners effectively, 5Code was designed such that all 5 steps are permanently presented, accessible and executable. Thus, learners are provided with the entire programming context from presentation of the task via own notes and annotations to the code area. Learners can mark and annotate any part of the given task’s text; these annotations can be edited as notes with own comments. Furthermore, the notes can be dragged into the code area, where they are shown as comments in the coding language. Any modifications in the comments are synchronized between notes and code. 5Code is implemented as a web-application. It is used in university introductory courses on object oriented programming. KW - Programming KW - Software Development KW - Web-Application KW - Learning Y1 - 2016 U6 - https://doi.org/10.1515/icom-2016-0002 SN - 2196-6826 VL - 15 IS - 1 SP - 79 EP - 92 ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Security Engineering Process based on Patterns T2 - 18th International Workshop on Database and Expert Systems Applications (DEXA 2007) N2 - We present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. We describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Further, we introduce a new frame that focuses on the privacy requirement anonymity. KW - security engineering process KW - pattern system KW - data privacy KW - software development Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4312991 SN - 978-0-7695-2932-5 U6 - https://doi.org/10.1109/DEXA.2007.36 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 734 EP - 738 PB - IEEE CY - Regensburg ER - TY - CHAP A1 - Côté, Isabelle A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Wentzlaff, Ina T1 - A Systematic Account of Problem Frames T2 - Proceedings of the 12th European Conference on Pattern Languages of Programs (EuroPLoP '2007), Irsee, Germany, July 4-8, 2007. N2 - We give an enumeration of possible problem frames, based on domain characteristics, and comment on the usefulness of the obtained frames. In particular, we investigate problem domains and their characteristics in detail. This leads to fine-grained criteria for describing problem domains. As a result, we identify a new type of problem domain and come up with integrity conditions for developing useful problem frames. Taking a complete enumeration of possible problem frames (with at most three problem domains, of which only one is constrained) as a basis, we find 8 new problem frames, 7 of which we consider as useful in practical software development. KW - problem frames KW - systematic account Y1 - 2008 SP - 749 EP - 767 PB - Universitätsverlag Konstanz CY - Konstanz ER - TY - CHAP A1 - Schmidt, Holger A1 - Wentzlaff, Ina ED - Gruhn, Volker ED - Oquendo, Flavio T1 - Preserving Software Quality Characteristics from Requirements Analysis to Architectural Design T2 - Software Architecture: Third European Workshop, EWSA 2006, Nantes, France, September 4-5, 2006, Revised Selected Papers Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11966104_14 SN - 978-3-540-69271-3 U6 - https://doi.org/10.1007/11966104_14 VL - LNCS, 4344 SP - 189 EP - 203 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Müller, Günter T1 - Security Engineering Using Problem Frames T2 - Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding KW - security requirement KW - problem frames KW - security problem KW - security engineering KW - sequence diagram Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11766155_17 SN - 978-3-540-34640-1 U6 - https://doi.org/10.1007/11766155_17 VL - LNCS, 3995 SP - 238 EP - 253 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Pattern System for Security Requirements Engineering T2 - The Second International Conference on Availability, Reliability and Security (ARES'07) N2 - We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem. KW - pattern system KW - system security KW - security KW - software development KW - computer security Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4159824 SN - 0-7695-2775-2 U6 - https://doi.org/10.1109/ARES.2007.12 PB - IEEE CY - Vienna ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Czarnecki, Krzysztof ED - Ober, Ileana ED - Bruel, Jean-Michel ED - Uhl, Axel ED - Völter, Markus T1 - A Formal Metamodel for Problem Frames T2 - Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings N2 - Problem frames are patterns for analyzing, structuring, and characterizing software development problems. This paper presents a formal metamodel for problem frames expressed in UML class diagrams and using the formal specification notation OCL. That metamodel clarifies the nature of the different syntactical elements of problem frames, as well as the relations between them. It provides a framework for syntactical analysis and semantic validation of newly defined problem frames, and it prepares the ground for tool support for the problem frame approach. KW - object constraint language KW - problem frames KW - causal domain KW - eclipse modeling framework Y1 - 2008 UR - https://link.springer.com/chapter/10.1007/978-3-540-87875-9_5 SN - 978-3-540-87874-2 U6 - https://doi.org/10.1007/978-3-540-87875-9_5 VL - LNCS, 5301 SP - 58 EP - 82 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Analysis and Component-based Realization of Security Requirements T2 - 2008 Third International Conference on Availability, Reliability and Security N2 - We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example. KW - security requirement KW - requirements engineering KW - data security KW - computer science Y1 - 2008 UR - https://ieeexplore.ieee.org/document/4529338 SN - 978-0-7695-3102-1 U6 - https://doi.org/10.1109/ARES.2008.27 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 195 EP - 203 PB - IEEE CY - Barcelona ER - TY - CHAP A1 - Schmidt, Holger T1 - Threat- and Risk-Analysis During Early Security Requirements Engineering T2 - 2010 International Conference on Availability, Reliability and Security N2 - We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements. KW - risk analysis KW - data security KW - security requirements engineering KW - software engineering Y1 - 2010 UR - https://ieeexplore.ieee.org/document/5438095 SN - 978-1-4244-5880-6 U6 - https://doi.org/10.1109/ARES.2010.14 SP - 188 EP - 195 PB - IEEE CY - Krakow ER - TY - CHAP A1 - Schmidt, Holger ED - Massacci, Fabio ED - Redwine Jr., Samuel T. ED - Zannone, Nicola T1 - Pattern-Based Confidentiality-Preserving Refinement T2 - Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings KW - data transmission KW - security requirement KW - problem frame KW - adversary model KW - security requirement engineering Y1 - 2009 UR - https://link.springer.com/chapter/10.1007%2F978-3-642-00199-4_5 SN - 978-3-642-00198-7 U6 - https://doi.org/10.1007/978-3-642-00199-4_5 VL - LNCS, 5429 SP - 43 EP - 59 PB - Springer CY - Berlin, Heidelberg ER - TY - JOUR A1 - Fabian, Benjamin A1 - Gürses, Seda A1 - Heisel, Maritta A1 - Santen, Thomas A1 - Schmidt, Holger T1 - A comparison of security requirements engineering methods JF - Requirements Engineering N2 - This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another. KW - security requirement KW - security requirement engineering KW - comparison KW - security Y1 - 2010 UR - https://link.springer.com/article/10.1007/s00766-009-0092-x U6 - https://doi.org/10.1007/s00766-009-0092-x SN - 0947-3602 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - 15 IS - 1 SP - 7 EP - 40 PB - Springer CY - Wiesbaden ER - TY - CHAP A1 - Schwittek, Widura A1 - Schmidt, Holger A1 - Eicker, Stefan A1 - Heisel, Maritta ED - Filipe, Joaquim ED - Liu, Kecheng T1 - Towards a Common Body of Knowledge for Engineering Secure Software and Services T2 - Proceedings of the International Conference on Knowledge Management and Information Sharing N2 - Interdisciplinary communities involve people and knowledge from different disciplines in addressing a common challenge. Differing perspectives, processes, methods, tools, vocabularies, and standards are problems that arise in this context. We present an approach to support bringing together disciplines based on a common body of knowledge (CBK), in which knowledge from different disciplines is collected, integrated, and structured. The novelty of our approach is twofold: first, it introduces a CBK ontology, which allows one to semantically enrich contents in order to be able to query the CBK in a more elaborate way afterwards. Second, it heavily relies on user participation in building up a CBK, making use of the Semantic MediaWiki as a platform to support collaborative writing. The CBK ontology is backed by a conceptual framework, consisting of concepts to structure the knowledge, to provide access options to it, and to build up a common terminology. To ensure a high quality of the provided contents and to sustain the community’s commitment, we further present organizational means as part of our approach. We demonstrate our work using the example of a Network of Excellence EU project, which aims at bringing together researchers and practitioners from services computing, security and software engineering. KW - common body of knowledge KW - knowledge management KW - software engineering KW - security engineering KW - services computing Y1 - 2011 SP - 369 EP - 374 PB - SciTePress - Science and Technology Publications CY - Paris ER - TY - CHAP A1 - Côté, Isabelle A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Hatebur, Denis T1 - UML4PF — A tool for problem-oriented requirements analysis T2 - 2011 IEEE 19th International Requirements Engineering Conference N2 - We present UML4PF, a tool for requirements analysis based on problem frames. It consists of a UML profile and an Eclipse-Plugin to model and analyze problem diagrams, derive specifications, and develop architectures. KW - Unified modeling language KW - problem frames KW - tool support KW - programming KW - generators Y1 - 2011 UR - https://ieeexplore.ieee.org/document/6051670 SN - 978-1-4577-0924-1 U6 - https://doi.org/10.1109/RE.2011.6051670 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 349 EP - 350 PB - IEEE CY - Trento ER - TY - CHAP A1 - Beckers, Kristian A1 - Schmidt, Holger A1 - Küster, Jan-Christoph A1 - Faßbender, Stephan T1 - Pattern-Based Support for Context Establishment and Asset Identification of the ISO 27000 in the Field of Cloud Computing T2 - 2011 Sixth International Conference on Availability, Reliability and Security N2 - The ISO 27000 is a well-established series of information security standards. The scope for applying these standards can be an organisation as a whole, single business processes or even an IT application or IT infrastructure. The context establishment and the asset identification are among the first steps to be performed. The quality of the results produced when performing these steps has a crucial influence on the subsequent steps such as identifying loss, vulnerabilities, possible attacks and defining countermeasures. Thus, a context analysis to gather all necessary information in the initial steps is important, but is not offered in the standard. In this paper, we focus on the scope of cloud computing systems and present a way to support the context establishment and the asset identification described in ISO 27005. A cloud system analysis pattern and different kinds of stakeholder templates serve to understand and describe a given cloud development problem, i.e. the envisaged IT systems and the relevant parts of the operational environment. We illustrate our support using an online banking cloud scenario. KW - security standards KW - IT infrastructure KW - ISO27005 KW - Cloud computing KW - risk management Y1 - 2011 UR - https://ieeexplore.ieee.org/document/6045958 SN - 978-1-4577-0979-1 U6 - https://doi.org/10.1109/ARES.2011.55 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 327 EP - 333 PB - IEEE CY - Vienna ER - TY - CHAP A1 - Schmidt, Holger A1 - Jürjens, Jan ED - Mouratidis, Haralambos ED - Rolland, Colette T1 - Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec T2 - Advanced Information Systems Engineering: 23rd International Conference, CAiSE 2011, London, UK, June 20-24, 2011. Proceedings KW - security requirement KW - secure design KW - architectual pattern Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21640-4_28 SN - 978-3-642-21639-8 U6 - https://doi.org/10.1007/978-3-642-21640-4_28 VL - LNCS, 6741 SP - 367 EP - 382 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Jürjens, Jan A1 - Marchal, Loïc A1 - Ochoa, Martín A1 - Schmidt, Holger ED - France, Robert B. ED - Kuester, Jochen M. ED - Bordbar, Behzad ED - Paige, Richard F. T1 - Incremental Security Verification for Evolving UMLsec models T2 - Modelling Foundations and Applications: 7th European Conference, ECMFA 2011, Birmingham, UK, June 6 - 9, 2011 Proceedings KW - model element KW - security requirement KW - class diagram KW - evolution path KW - security property Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21470-7_5 SN - 978-3-642-21469-1 U6 - https://doi.org/10.1007/978-3-642-21470-7_5 VL - LNCS, 6698 SP - 52 EP - 68 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Jürjens, Jan A1 - Schmidt, Holger ED - Giannakopoulou, Dimitra ED - Orejas, Fernando T1 - Systematic Development of UMLsec Design Models Based on Security Requirements T2 - Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings KW - security requirement KW - secquence diagram KW - eclipse modeling framework KW - patient monitoring system KW - security requirement engineering Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17 SN - 978-3-642-19810-6 U6 - https://doi.org/10.1007/978-3-642-19811-3_17 VL - LNCS, 6603 SP - 232 EP - 246 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Heyman, Thomas A1 - Yskout, Koen A1 - Scandariato, Riccardo A1 - Schmidt, Holger A1 - Yu, Yijun ED - Erlingsson, Úlfar ED - Wieringa, Roel ED - Zannone, Nicola T1 - The Security Twin Peaks T2 - Engineering Secure Software and Systems: Third International Symposium, ESSoS 2011, Madrid, Spain, February 9-10, 2011. Proceedings KW - security KW - software architecture KW - requirements KW - patterns Y1 - 2011 UR - https://link.springer.com/book/10.1007/978-3-642-19125-1 SN - 978-3-642-19124-4 U6 - https://doi.org/10.1007/978-3-642-19125-1_13 VL - LNCS IS - 6542 SP - 167 EP - 180 PB - Springer CY - Berlin, Heidelberg ER - TY - RPRT A1 - Schmidt, Holger A1 - Jürjens, Jan T1 - UMLsec4UML2 - Adopting UMLsec to Support UML2 T2 - LS 14 Software Engineering mit dem Schwerpunkt Entwicklung evolutionsfähiger Software und Systeme N2 - In this paper, we present an approach to adopt UMLsec, which is defined for UML 1.5, to support the current UML version 2.3. The new profile UMLsec4UML2 is technically constructed as a UML profile diagram, which is equipped with a number of integrity conditions expressed using OCL. Consequently, the UMLsec4UML2-profile can be loaded in any Eclipse-based EMF- and MDT-compatible UML editing tool to develop and analyze different kinds of security models. The OCL constraints replace the static checks of the tool support for the old UMLsec defined for UML 1.5. Thus, the UMLsec4UML2-profile not only provides the whole expresiveness of UML2.3 for security modeling, it also brings considerably more freedom in selecting a basic UML editing tool, and it integrates modeling and analyzing security models. Since UML2.3 comprises new diagram types, as well as new model elements and new semantics of diagram types already contained in UML1.5, we consider a number of these changes in detail. More specifically, we consider composite structure and sequence diagrams with respect to modeling security properties according to the original version of UMLsec. The goal is to use UMLsec4UML2 to specify architectural security patterns. KW - UMLsec KW - UML2 KW - OCL KW - security architecture KW - security pattern Y1 - 2011 UR - https://eldorado.tu-dortmund.de/handle/2003/27602?locale=de U6 - https://doi.org/10.17877/DE290R-990 N1 - Der Bericht kann über die angebenen URL aufgerufen werden. PB - Technische Hochschule Dortmund CY - Dortmund ER - TY - JOUR A1 - Schmidt, Holger T1 - Threat and Risk-Driven Security Requirements Engineering JF - International Journal of Mobile Computing and Multimedia Communications N2 - In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements. KW - security KW - security engineering Y1 - 2011 U6 - https://doi.org/10.4018/jmcmc.2011010103 SN - 1937-9412 VL - 3 IS - 1 SP - 35 EP - 50 PB - IGI Global ER - TY - CHAP A1 - Jürjens, Jan A1 - Ochoa, Martín A1 - Schmidt, Holger A1 - Marchal, Loïc A1 - Houmb, Siv Hilde A1 - Islam, Shareeful ED - Bernardo, Marco ED - Issarny, Valérie T1 - Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications T2 - Formal Methods for Eternal Networked Software Systems: 11th International School on Formal Methods for the Design of Computer, Communication and Software Systems, SFM 2011, Bertinoro, Italy, June 13-18, 2011. Advanced Lectures N2 - Developing security-critical systems is difficult, and there are many well-known examples of vulnerabilities exploited in practice. In fact, there has recently been a lot of work on methods, techniques, and tools to improve this situation already at the system specification and design. However, security-critical systems are increasingly long-living and undergo evolution throughout their lifetime. Therefore, a secure software development approach that supports maintaining the needed levels of security even through later software evolution is highly desirable. In this chapter, we recall the UMLsec approach to model-based security and discuss on tools and techniques to model and verify evolution of UMLsec models. KW - software evolution KW - UMLsec KW - UMLseCH KW - security Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21455-4_15 SN - 978-3-642-21455-4 U6 - https://doi.org/10.1007/978-3-642-21455-4_15 VL - LNCS, 6659 SP - 504 EP - 526 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Schmidt, Holger A1 - Hatebur, Denis A1 - Heisel, Maritta ED - Mouratidis, Haralambos T1 - A Pattern-Based Method to Develop Secure Software T2 - Software Engineering for Secure Systems: Industrial and Research Perspectives N2 - The authors present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. The authors describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Afterwards, the security problems and the solution approaches are formally modeled in detail. The formal models serve to prove that the solution approaches are correct solutions to the security problems. Furthermore, the formal models of the solution approaches constitute a formal specification of the software to be developed. Then, the specification is implemented by generic security components and generic security architectures, which constitute architectural patterns. Finally, the generic security components and the generic security architecture that composes them are refined and the result is a secure software product built from existing and/or tailor-made security components. KW - security KW - problems Y1 - 2011 SN - 978-1-61520-837-1 U6 - https://doi.org/10.4018/978-1-61520-837-1.ch003 SP - 32 EP - 74 PB - IGI Global CY - Hershey ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Schmidt, Holger T1 - An Integrated Method for Pattern-Based Elicitation of Legal Requirements Applied to a Cloud Computing Example T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws. KW - law KW - security KW - requirements engineering KW - software architecture Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329218 SN - 978-0-7695-4775-6 U6 - https://doi.org/10.1109/ARES.2012.25 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 463 EP - 472 PB - IEEE CY - Prague ER - TY - CHAP A1 - Schwittek, Widura A1 - Schmidt, Holger A1 - Beckers, Kristian A1 - Eicker, Stefan A1 - Faßbender, Stephan A1 - Heisel, Maritta T1 - A Common Body of Knowledge for Engineering Secure Software and Services T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - The discipline of engineering secure software and services brings together researchers and practitioners from software, services, and security engineering. This interdisciplinary community is fairly new, it is still not well integrated and is therefore confronted with differing perspectives, processes, methods, tools, vocabularies, and standards. We present a Common Body of Knowledge (CBK) to overcome the aforementioned problems. We capture use cases from research and practice to derive requirements for the CBK. Our CBK collects, integrates, and structures knowledge from the different disciplines based on an ontology that allows one to semantically enrich content to be able to query the CBK. The CBK heavily relies on user participation, making use of the Semantic MediaWiki as a platform to support collaborative writing. The ontology is complemented by a conceptual framework, consisting of concepts to structure the knowledge and to provide access to it, and a means to build a common terminology. We also present organizational factors covering dissemination and quality assurance. KW - software engineering KW - security engineering KW - services computing KW - common body of knowledge KW - interdisciplinary Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329223 SN - 978-1-4673-2244-7 U6 - https://doi.org/10.1109/ARES.2012.31 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - NESSoS, ICT-2009.1.4 Trustworthy ICT, Grant No. 25698 SP - 499 EP - 506 PB - IEEE CY - Prague ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Regnell, Björn ED - Damian, Daniela T1 - A Pattern-Based Method for Identifying and Analyzing Laws T2 - Requirements Engineering: Foundation for Software Quality: 18th International Working Conference, REFSQ 2012, Essen, Germany, March 19-22, 2012. Proceedings KW - compliance KW - law Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28714-5_23 SN - 978-3-642-28713-8 U6 - https://doi.org/10.1007/978-3-642-28714-5_23 VL - LNCS, 7195 SP - 256 EP - 262 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Barthe, Gilles ED - Livshits, Benjamin ED - Scandariato, Riccardo T1 - Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches T2 - Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings KW - Security standards KW - requirements engineering KW - ISO27000 KW - ISO27001 KW - security Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28166-2_2 SN - 978-3-642-28165-5 U6 - https://doi.org/10.1007/978-3-642-28166-2_2 VL - LNCS, 7159 SP - 14 EP - 21 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Using Security Requirements Engineering Approaches to Support ISO 27001 Information Security Management Systems Development and Documentation T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - An ISO 27001 compliant information security management system is difficult to create, due to the the limited support for system development and documentation provided in the standard. We present a structured analysis of the documentation and development requirements in the ISO 27001 standard. Moreover, we investigate to what extent existing security requirements engineering approaches fulfill these requirements. We developed relations between these approaches and the ISO 27001 standard using a conceptual framework originally developed for comparing security requirements engineering methods. The relations include comparisons of important terms, techniques, and documentation artifacts. In addition, we show practical applications of our results. Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329189 SN - 978-1-4673-2244-7 U6 - https://doi.org/10.1109/ARES.2012.35 SP - 242 EP - 248 PB - IEEE CY - Prague ER - TY - CHAP A1 - Beckers, Kristian A1 - Eicker, Stefan A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Schwittek, Widura ED - Quirchmayr, Gerald ED - Basl, Josef ED - You, Ilsun ED - Xu, Lida ED - Weippl, Edgar T1 - Ontology-Based Identification of Research Gaps and Immature Research Areas T2 - Multidisciplinary Research and Practice for Information Systems: IFIP WG 8.4, 8.9/TC 5 International Cross-Domain Conference and Workshop on Availability, Reliability, and Security, CD-ARES 2012, Prague, Czech Republic, August 20-24, 2012. Proceedings KW - business applications KW - data encryption KW - recommender systems KW - software security KW - semantic web Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-32498-7_1 SN - 978-3-642-32497-0 U6 - https://doi.org/10.1007/978-3-642-32498-7_1 SN - 1611-3349 VL - LNCS, 7465 SP - 1 EP - 16 PB - Springer CY - Berlin, Heidelberg ER - TY - JFULL ED - Herder, Jens T1 - Journal of Virtual Reality and Broadcasting N2 - The “Journal of Virtual Reality and Broadcasting” is an open access E-journal covering advanced media technology for the integration of human computer interaction and modern information systems. The main focus is on the creation of synergies between such basic technologies as computer graphics and state-of-the-art broadcasting techniques. The main goals are to publish research results in the field of Virtual Reality and Broadcasting, to provoke discussions, and to promote the exchange of ideas and information. Developments in the area have a direct effect on society, therefore social aspects will also be considered. As an interdisciplinary field Virtual Reality requires multilateral collaboration in order to enable new applications. RB publishes articles consecutively and in electronic form only. All articles are peer-reviewed in a strict review process by at least three independent experts from the appropriate field of research and appear in the English language. The articles are organized in one volume per year with ten to twenty articles. Material that has been previously presented at conferences undergo a major revision and are extended and modified by the authors with at least 20% new material according to the Journal's policy for previously published articles. The Journal has been established in 2004. Currently, the submission and publication of articles is free of charge. No author fees are applied. N2 - Das Journal of Virtual Reality and Broadcasting ist ein open access E-Journal, welches den Fortschritt der Medientechnik zur Integration von Mensch-Computer-Interaktion und modernen Informationssystemen thematisiert. Der Schwerpunkt liegt dabei auf der Schaffung von Synergien zwischen Basistechnologien wie etwa der Computergrafik und modernster Studiotechnik. Das Hauptziel des Projektes ist die Publikation aktueller Forschungsergebnisse im Bereich der virtuellen Realität und der Studiotechnik, welche Diskussionen anregen und den Austausch von Ideen und Informationen fördern sollen. Die Entwicklungen im Bereich der virtuellen Realität und der Studiotechnik haben direkten Einfluß auf die Gesellschaft. Daher werden auch soziologische Aspekte dieses Themenbereichs bedacht. Als ein interdisziplinäres Feld benötigt Virtual Reality eine fächerübergreifende Zusammenarbeit um die Enwicklung neuer Anwendungen zu fördern. Das Journal erscheint kontinuierlich und in rein elektronischer Form. Alle Artikel durchlaufen einen strengen Peer-Review mit mindestens drei unabhängigen Gutachter aus dem zutreffenden Forschungsbereich und erscheinen in englischer Sprache. Die Artikel werden in Jahrgängen organisiert veröffentlicht. Jeder Jahrgang enthält durchschnittlich zwischen zehn und zwanzig Artikel. Material, welches zuvor auf einer Konferenz präsentiert worden ist, wird vor Einreichung einer Revision mit Änderungen und Erweiterungen durch die Autoren unterzogen. Die neue Version muss zu mindestens 20% neues Material beeinhalten, gemäß JVRBs der policy for previously published articles. Die Zeitschrift wurde im Jahr 2004 gegründet: Y1 - 2019 UR - https://www.jvrb.org/ SN - 1860-2037 PB - Hochschule Düsseldorf CY - Düsseldorf ER - TY - CHAP A1 - Herder, Jens T1 - Tools and widgets for spatial sound authoring T2 - CompuGraphics ' 97, Sixth International Conference on Computational Graphics and Visualization Techniques: Graphics in the Internet Age, Vilamoura, Portugal N2 - Broader use of virtual reality environments and sophisticated animations spawn a need for spatial sound. Until now, spatial sound design has been based very much on experience and trial and error. Most effects are hand-crafted, because good design tools for spatial sound do not exist. This paper discusses spatial sound authoring and its applications, including shared virtual reality environments based on VRML. New utilities introduced by this research are an inspector for sound sources, an interactive resource manager, and a visual soundscape manipulator. The tools are part of a sound spatialization framework and allow a designer/author of multimedia content to monitor and debug sound events. Resource constraints like limited sound spatialization channels can also be simulated. KW - spatial sound KW - virtual reality environments KW - multimedia KW - spatialization KW - spatial media KW - vizualization KW - user interface design KW - man-machine interfaces Y1 - 1997 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-896 UR - http://vsvr.medien.hs-duesseldorf.de/publications/cg97-tawfssa/welcome.html SN - 972-8342-02-0 N1 - Zugriff auf die Konferenzveröffentlichung über den angegebene URL conference paper available via URL SP - 87 EP - 95 CY - Portugal ER -