@inproceedings{GruberWolffMottoketal., author = {Gruber, Hans and Wolff, Christian and Mottok, J{\"u}rgen and Bazo, Alexander and Hauser, Florian and Schreistetter, Stefan}, title = {Tutorial on Software Engineering Education in Co-Located Multi-User Eye-Tracking-Environments}, series = {Proceedings of the 32nd IEEE Conference on Software Engineering Education and Training: Munich, November 2020}, booktitle = {Proceedings of the 32nd IEEE Conference on Software Engineering Education and Training: Munich, November 2020}, doi = {10.1109/CSEET49119.2020.9206170}, abstract = {We briefly describe a tutorial on the application of Eye-Tracking technology for Software Engineering Education. We will showcase our setup of a large-scale Eye-Tracking-Classroom and its usage for real-time improvement of traditional learning scenarios in Software Engineering Education. We will focus on the integration of gaze data into modern integrated development environments (IDEs) and demonstrate a complete workflow for its usage in co-located multi-user Eye-Tracking-Environments.}, language = {en} } @inproceedings{ReuterStarkSedelmaieretal., author = {Reuter, Rebecca and Stark, Theresa and Sedelmaier, Yvonne and Landes, Dieter and Mottok, J{\"u}rgen and Wolff, Christian}, title = {Insights in Students' Problems during UML Modeling}, series = {2020 IEEE Global Engineering Education Conference (EDUCON): Proceedings}, booktitle = {2020 IEEE Global Engineering Education Conference (EDUCON): Proceedings}, doi = {10.1109/EDUCON45650.2020.9125110}, pages = {592 -- 600}, abstract = {UML (Unified Modeling Language) is the current de facto as well as de jure standard (ISO/IEC 19505:2012) notation to visualize models in software development. UML provides essential guidelines and rules to visualize and understand complex software systems. This is the reason why it has become part of curricula for software engineering courses at many universities worldwide. It is well known, however, that UML is hard to grasp for novices, mainly due to its complexity. In order to tackle the problem of teaching UML to novice students appropriately, it is inevitable to understand their needs and problems much better than we do now. This paper presents empirical insights into students' problems when developing common UML diagrams. Identified problems are generalized, giving rise to a problem catalogue that is derived from our empirical findings, thus establishing a basis for addressing these problems through focused learning arrangements.}, language = {en} } @inproceedings{RennerPozzobonMottok, author = {Renner, Sebastian and Pozzobon, Enrico and Mottok, J{\"u}rgen}, title = {A Hardware in the Loop Benchmark Suite to Evaluate NIST LWC Ciphers on Microcontrollers}, series = {Information and Communications Security: 22nd International Conference, ICICS 2020, Copenhagen, Denmark, August 24-26, 2020, Proceedings}, booktitle = {Information and Communications Security: 22nd International Conference, ICICS 2020, Copenhagen, Denmark, August 24-26, 2020, Proceedings}, editor = {Meng, Weizhi}, publisher = {Springer}, address = {Cham}, doi = {10.1007/978-3-030-61078-4_28}, pages = {495 -- 509}, abstract = {The National Institute of Standards and Technology (NIST) started the standardization process for lightweight cryptography algorithms in 2018. By the end of the first round, 32 submissions have been selected as 2nd round candidates. NIST allowed designers of 2nd round submissions to provide small updates on both their specifications and implementation packages. In this work, we introduce a benchmarking framework for evaluating the performance of NIST Lightweight Cryptography (LWC) candidates on embedded platforms. We show the features and application of the framework and explain its design rationale. Moreover, we provide information on how we aim to present up-to-date performance figures throughout the NIST LWC competition. In this paper, we present an excerpt of our software benchmarking results regarding speed and memory requirements of selected ciphers. All up-to-date results, including benchmarking different test cases for multiple variants of each 2nd round algorithm on five different microcontrollers, are periodically published to a public website. While initially only the reference implementations were available, the ability of automatically testing the performance of the candidate algorithms on multiple platforms becomes especially relevant as more optimized implementations are developed. Finally, we show how the framework can be extended in different directions: support for more target platforms can be easily added, different kinds of algorithms can be tested, and other test metrics can be acquired. The focus of this paper should rather lay on the framework design and testing methodology than on the current results, especially for reference code.}, language = {en} } @inproceedings{DentgenRennerMottok, author = {Dentgen, Manuel and Renner, Sebastian and Mottok, J{\"u}rgen}, title = {Equally Distributed Bus-Communication Access Rights for Inter MCU Communication Using Multimaster SPI}, series = {Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, booktitle = {Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, editor = {Brinkmann, Andr{\´e} and Karl, Wolfgang and Lankes, Stefan and Tomforde, Sven and Pionteck, Thilo and Trinitis, Carsten}, doi = {10.1007/978-3-030-52794-5_15}, pages = {200 -- 212}, abstract = {With the rising complexity and processing power of modern computer systems, the amount of MCU on a single PCB also rises. These microcontrollers often need to communicate with each other to exchange payload and control information in a bidirectional manner. Today's well-established communication protocols in MCUs either do not fit modern transmission speed requirements or do have an inappropriate master-slave attribute, which does not allow the communication partners to have equal bus access rights. Therefore, this paper introduces an extension of the Serial Peripheral Interface (SPI) to allow an equally distributed access right for the communication interface between two microcontrollers. It simultaneously does fit modern transmission speed requirements of a common network interface, so that the message transmission does not constitute a bottleneck in data processing. Besides the protocol design, we do also provide a first prototype implementation, which constitutes a proof of concept.}, language = {en} } @inproceedings{KloppGoldVeerkampAbkeetal., author = {Klopp, Marco and Gold-Veerkamp, Carolin and Abke, J{\"o}rg and Borgeest, Kai and Reuter, Rebecca and Jahn, Sabrina and Mottok, J{\"u}rgen and Sedelmaier, Yvonne and Lehmann, Alexander and Landes, Dieter}, title = {Totally Different and yet so Alike: Three Concepts to Use Scrum in Higher Education}, series = {Proceedings of the 4th European Conference on Software Engineering Education (ECSEE '20): June 2020, Seeon/Bavaria, Germany}, booktitle = {Proceedings of the 4th European Conference on Software Engineering Education (ECSEE '20): June 2020, Seeon/Bavaria, Germany}, doi = {10.1145/3396802.3396817}, pages = {12 -- 21}, abstract = {Software process models are important in software projects in order to give the work of a project guidelines or a framework. However, teaching process models in higher education seems to be quite challenging. This has to do with the fact that undergraduates have no experience with projects in which process models are used. The theoretical mediation of process models is initially on a very abstract level. For this reason, we chose to combine two didactic approaches, namely problem-based learning and project work. Various traditional plan-driven process models have been expanded in courses in Software Engineering with agile process models. The Scrum Framework is the focus of consideration of this paper. Three Universities of Applied Sciences which cooperate in the EVELIN project focused on Scrum as a process model and integrated it into their teaching. Since the respective concepts of implementation differ, they should be presented and compared in this article to presents some practice approaches. The goal of this presentation of is a uniform evaluation in order to obtain insights from different perspectives. This comparison can draw conclusions for possible necessary improvements of the respective concepts.}, language = {en} } @inproceedings{SeebauerJahnMottok, author = {Seebauer, Stefan and Jahn, Sabrina and Mottok, J{\"u}rgen}, title = {Learning from Escape Rooms? A Study Design Concept Measuring the Effect of a Cryptography Educational Escape Room}, series = {2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal}, booktitle = {2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal}, doi = {10.1109/EDUCON45650.2020.9125333}, pages = {1684 -- 1685}, abstract = {Experts predict that more IT-Security specialists will be needed in the coming years, but in current higher education in engineering disciplines, this topic is hardly addressed. Newer learning methods such as game-based learning (GBL) are enjoying an increasing popularity as their improvement in the education of subject specific topics can be proven by a variety of studies. We chose Educational Escape Rooms (EduER) as a GBL-tool to impart IT-Security in higher education of engineers. In our Escape Room (ER), the students try to solve puzzles and riddles with learned knowledge on the emphasis of cryptography. This paper first deals with a brief introduction to GBL and EduERs, followed by the design of our ER concept, containing different tasks with focus on the topic of cryptography. The tasks cover different cryptographic methods and hash algorithms, e.g. AES, RSA, SHA3. Afterwards the experimental study is presented. The study of the EduER was carried out with students from the bachelor's program in Electrical Engineering and Information Technology at the OTH Regensburg. The participants were divided into three groups of 5 to 8 persons each. They received a briefing with important information, followed by the ER execution, a debriefing afterwards and an exam-like evaluation sheet to test their learned knowledge. Finally, first basic results are presented.}, language = {en} } @inproceedings{JahnMottok, author = {Jahn, Sabrina and Mottok, J{\"u}rgen}, title = {Work in Progress: Towards an Academic Secure Software Engineering Curriculum for Engineers}, series = {2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal}, booktitle = {2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal}, doi = {10.1109/EDUCON45650.2020.9125210}, pages = {1713 -- 1717}, abstract = {In the age of the Internet of Things, it is becoming increasingly important to integrate knowledge about the development of secure systems (Secure Software Engineering) into academic teaching. However, teaching IT Security and Secure Software Engineering to non-computer scientists is rare. Therefore, we focus our research on the integration of IT Security into software engineering education of non-computer scientists, particularly electrical engineers, by means of inductive teaching- and learning-arrangements. After collecting students' preconceptions of IT Security and Secure Software Engineering in prior work, this paper now contributes with a first mapping of these preconceptions with corresponding learning content as well as suitable inductive teaching methods to be able to create new lecture and exercise units and improve academic learning and teaching in both areas.}, language = {en} } @inproceedings{FrauenschlaegerRennerMottok, author = {Frauenschl{\"a}ger, Tobias and Renner, Sebastian and Mottok, J{\"u}rgen}, title = {Security Improvements by Separating the Cryptographic Protocol from the Network Stack onto a Multi-MCU Architecture}, series = {Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, booktitle = {Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, publisher = {Springer International Publishing}, doi = {10.1007/978-3-030-52794-5_14}, pages = {185 -- 199}, abstract = {The number of IoT devices in SCADA and ICS systems is rising quickly, especially in the domain of critical infrastructures. But these kinds of systems are performing mission critical tasks like controlling devices in industrial facilities or substations in the smart grid. Therefore, they are subject to a lot of regulatory standards. Yet, to provide remote access over the internet, special architectures are developed to integrate a network interface into these devices without inferring with the actual functionality. However, these architectures either lack security measures against cyber-attacks or do not offer the necessary performance for time-critical communication interfaces. To solve that, an architecture consisting of three units is introduced in this paper to provide a network interface with extensive security measures and a high performance. The main feature is the isolation of the cryptographic functionality onto an additional MCU. After proposing the basic concept, the paper presents many implementation details. Based on the current state of implementation, a concept validation of the realized architecture is described.}, language = {en} } @inproceedings{FrauenschlaegerDentgenMottok, author = {Frauenschl{\"a}ger, Tobias and Dentgen, Manuel and Mottok, J{\"u}rgen}, title = {Systemarchitektur eines Sicherheitsmoduls im Energiesektor}, series = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, booktitle = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, address = {Landshut}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:860-opus4-2092}, pages = {29 -- 38}, abstract = {Aufgrund der immer weiter anwachsenden Vernetzung der Stromnetze wird die Kommunikation zwischen der Leitstelle des Energieversorgers und den Infrastrukturkomponenten innerhalb eines Umspannwerks immer bedeutsamer. Dabei werden sowohl Steuerbefehle als auch Daten f{\"u}r {\"U}berwachungsfunktionen {\"u}bertragen. In den aktuellen Netzwerkarchitekturen findet diese Kommunikation ohne eine kryptografische Absicherung statt, was einen Angriffspunkt f{\"u}r gezielte Attacken und damit eine potenzielle Gef{\"a}hrdung der Energieversorgung darstellt. Um solchen Angriffen in Zukunft entgegenzuwirken, wird das ES³M-Sicherheitsmodul entwickelt. Dieses soll in das Netzwerk zwischen den beiden Kommunikationspartnern eingesetzt werden und so den Datenverkehr absichern. Mithilfe einer Bedrohungsanalyse wurden Anforderungen abgeleitet, die neben kryptografischen Maßnahmen auch Themen wie funktionale Sicherheit und Langlebigkeit umfassen. Um diese zu erf{\"u}llen, wurde eine spezielle Systemarchitektur auf Basis einer Aufgabenteilung entworfen. Diese Architektur und korrespondierende Designentscheidungen werden pr{\"a}sentiert.}, language = {de} } @inproceedings{SchmailzlHierl, author = {Schmailzl, Anton and Hierl, Stefan}, title = {Online-process monitoring of laser transmission welding for polymers}, series = {Applied Research Conference 2013, ARC 2013 ; 17th and 18th October 2013, Deggendorf}, booktitle = {Applied Research Conference 2013, ARC 2013 ; 17th and 18th October 2013, Deggendorf}, editor = {Ziemann, Olaf and Bogner, Werner and Mottok, J{\"u}rgen}, publisher = {Shaker}, address = {Aachen}, pages = {374 -- 378}, language = {en} } @article{WeiglWittmannRuecketal., author = {Weigl, Stefan and Wittmann, Elisabeth and R{\"u}ck, Thomas and Bierl, Rudolf and Matysik, Frank-Michael}, title = {Effects of ambient parameters and cross-sensitivities from O2, CO2 and H2O on the photoacoustic detection of acetone in the UV region}, series = {Sensors Actuators B Chemical}, journal = {Sensors Actuators B Chemical}, number = {328}, publisher = {Elsevier}, issn = {0925-4005}, doi = {10.1016/j.snb.2020.129001}, abstract = {We present a sensitive UV LED photoacoustic setup for the detection of gaseous acetone and discuss its applicability towards breath analysis. We investigated the performance of the sensor for low acetone concentrations down to 0.1 parts per million (ppmV). The influences of temperature, flow, pressure, optical power and LED duty cycle on the measured signal have been examined. To gain a better understanding of the different effects on the photoacoustic signal, correlation analysis was applied and feature importance was determined using a large measured dataset. Furthermore, the cross-sensitivities towards O2, CO2 and H2O have been studied extensively. Finally, the sensor's performance to detect acetone between 0.1-1 ppmV within gas mixtures simulating breath exhale conditions has been investigated, too. With a limit of detection (LoD) of 12.5 parts per billion (ppbV) (3σ) measured under typical breath exhale gas mixture conditions, the sensor demonstrated a high potential for the application of acetone detection in human breath analysis.}, language = {en} } @inproceedings{InderwiesMottok, author = {Inderwies, Tom and Mottok, J{\"u}rgen}, title = {Secure Software Update of a Secure Module in the Power Grid}, series = {Proceedings of the Regensburg Applied Research Conference 2020 (RARC 2020), July 31st}, booktitle = {Proceedings of the Regensburg Applied Research Conference 2020 (RARC 2020), July 31st}, pages = {25 -- 31}, language = {en} } @inproceedings{WeissRennerMottoketal., author = {Weiss, Nils and Renner, Sebastian and Mottok, J{\"u}rgen and Matoušek, V{\´a}clav}, title = {Transport Layer Scanning for Attack Surface Detection in Vehicular Networks}, series = {CSCS '20: Computer Science in Cars Symposium}, booktitle = {CSCS '20: Computer Science in Cars Symposium}, number = {7}, address = {Feldkirchen}, doi = {10.1145/3385958.3430476}, pages = {1 -- 8}, abstract = {In the beginning of every security analysis or penetration test of a system, information about the target has to be gathered. On IT-Systems a port scan is usually performed as a first step of an investigation. Since the communication protocols differ in automotive systems, generic port scanning tools can't be used for a security analysis of CANs. More complex protocols have a higher likelihood of implementation errors and bugs. On CAN networks, such payloads are transferred through International Standard Transport Protocol (ISO-TP) communication. We designed a new methodology to identify ISO-TP endpoints in automotive networks. Every of these endpoints can provide exploitable application layer protocols and therefor has to be considered during penetration testing and security analysis. We contribute a new scan approach for the automated evaluation of possible attack surfaces in automotive CAN networks which has a higher coverage and multiple advantages than state of the art approaches.}, language = {en} } @inproceedings{FritzSchmidMottok, author = {Fritz, Florian and Schmid, Michael and Mottok, J{\"u}rgen}, title = {Accelerating Real-Time Applications with Predictable Work-Stealing}, series = {Architecture of computing systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, booktitle = {Architecture of computing systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings}, editor = {Brinkmann, Andr{\´e}}, doi = {10.1007/978-3-030-52794-5_18}, pages = {241 -- 255}, abstract = {Modern compute architectures often consist of multiple CPU cores to achieve their performance, as physical properties put a limit on the execution speed of a single processor. This trend is also visible in the embedded and real-time domain, where programmers are forced to parallelize their software to keep deadlines. Additionally, embedded systems rely increasingly on modular applications, that can easily be adapted to different system loads and hardware configurations. To parallelize applications under these dynamic conditions, often dispatching frameworks like Threading Building Blocks (TBB) are used in the desktop and server segment. More recently, Embedded Multicore Building Blocks (EMB2) was developed as a task-based programming solution designed with the constraints of embedded systems in mind. In this paper, we discuss how task-based programming fits such systems by analyzing scheduler implementation variants, with a focus on classic work-stealing and the libraries TBB and EMB2. Based on the state of the art we introduce a novel resource-trading concept that allows static memory allocation in a work-stealing runtime holding strict space and time bounds. We conduct benchmarks between an early prototype of the concept, TBB and EMB2, showing that resource-trading does not introduce additional runtime overheads, while unfortunately also not improving on execution time variances.}, language = {en} } @article{SchmailzlHierlSiebenetal., author = {Schmailzl, Anton and Hierl, Stefan and Sieben, Manuel and Brunnecker, Frank}, title = {Optimierung der Spanndruckverteilung beim Laserdurchstrahlschweißen komplexer Bauteile mittels FE-Berechnung}, series = {JOINING PLASTICS}, volume = {7}, journal = {JOINING PLASTICS}, number = {1}, pages = {30 -- 34}, language = {de} } @incollection{SchmailzlHuentelmannLooseetal., author = {Schmailzl, Anton and H{\"u}ntelmann, Sven and Loose, Tobias and K{\"a}sbauer, Johannes and Maiwald, Frederik and Hierl, Stefan}, title = {Potentials of the ALE-Method for Modeling Plastics Welding Processes, in Particular for the Quasi-Simultaneous Laser Transmission Welding}, series = {Mathematical Modelling of Weld Phenomena 12}, booktitle = {Mathematical Modelling of Weld Phenomena 12}, editor = {Sommitsch, Christof and Enzinger, Norbert and Mayr, Peter}, publisher = {Verlag der Technischen Universit{\"a}t Graz}, address = {Graz}, doi = {10.3217/978-3-85125-615-4-51}, pages = {965 -- 975}, abstract = {The Arbitrary-Lagrangian-Eulerian-Method (ALE-Method) offers the possibility to model the quasi-simultaneous laser transmission welding of plastics, in which a squeeze-flow of molten plastic occurs. It is of great interest to get a deeper understanding of the fluid-structure-interactions in the welding zone, since the occurring squeeze-flow transports heated material out of the joining zone, causinga temperature decrease inside.In addition, the numerical modelling offers the possibility to investigate the flow conditions in the joining zone. The aim of this article is to show the potentials of the ALE-Method to simulatethe quasi-simultaneous laser transmission welding with the commercially available software LS-DYNA. The central challenge is to realize a bi-directionalthermo-mechanically coupled simulation,which considers the comparatively high thermal expansion and calculates the interactions of solid and melted plastic correctly. Finally, the potentials of the ALE element formulations for the mathematical description of welding processesare shown, especially for those with a squeeze-flow.}, language = {en} } @incollection{SchmailzlHierl, author = {Schmailzl, Anton and Hierl, Stefan}, title = {Online-Prozess{\"u}berwachung beim Quasi-Simultanen Laser-Durchstrahlschweißen von Kunststoffen}, series = {Young Professionals - Jugend forscht und schweisst}, booktitle = {Young Professionals - Jugend forscht und schweisst}, editor = {GSI Niederlassung SLV M{\"u}nchen,}, pages = {1 -- 7}, language = {de} } @inproceedings{SchmailzlHierl, author = {Schmailzl, Anton and Hierl, Stefan}, title = {Thermo-mechanische Struktursimulation mit ANSYS Workbench 14.0 am Beispiel des Laser-Durchstrahlschweißens}, series = {ANSYS Conference \& 31st CADFEM Users' Meeting - ACUM, June 19-21, Mannheim}, booktitle = {ANSYS Conference \& 31st CADFEM Users' Meeting - ACUM, June 19-21, Mannheim}, editor = {CADFEM GmbH, and ANSYS Germany GmbH,}, address = {Grafing bei M{\"u}nchen, Darmstadt}, pages = {1 -- 16}, language = {de} } @misc{SchmailzlHierl, author = {Schmailzl, Anton and Hierl, Stefan}, title = {FE-Modellbildung der Strahl-Stoff-Wechselwirkung beim Laser-Durchstrahlschweißen in ANSYS 14.0}, series = {ANSYS Conference \& 32th CADFEM Users' Meeting 2014, 04.-06. Juni, N{\"u}rnberg}, journal = {ANSYS Conference \& 32th CADFEM Users' Meeting 2014, 04.-06. Juni, N{\"u}rnberg}, editor = {CADFEM GmbH, and ANSYS Germany GmbH,}, address = {Grafing bei M{\"u}nchen}, pages = {1 -- 15}, language = {de} } @inproceedings{PreischlSchmailzlHierl, author = {Preischl, Antonius and Schmailzl, Anton and Hierl, Stefan}, title = {Experimental study to evaluate the process window for laser transmission welding of plastics}, series = {Applied Research Conference 2014 - ARC 2014, 5th July 2014, Ingolstadt}, booktitle = {Applied Research Conference 2014 - ARC 2014, 5th July 2014, Ingolstadt}, editor = {Ziemann, Olaf and Mottok, J{\"u}rgen and Pforr, Johannes}, publisher = {Shaker}, address = {Aachen}, pages = {517 -- 522}, language = {en} }