@inproceedings{WeissRennerMottoketal., author = {Weiss, Nils and Renner, Sebastian and Mottok, J{\"u}rgen and Matoušek, V{\´a}clav}, title = {Automated Threat Evaluation of Automotive Diagnostic Protocols}, series = {ESCAR USA, 2021, Virtual}, booktitle = {ESCAR USA, 2021, Virtual}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-29882}, pages = {20}, abstract = {Diagnostic protocols in automotive systems can offer a huge attack surface with devastating impacts if vulnerabilities are present. This paper shows the application of active automata learning techniques for reverse engineering system state machines of automotive systems. The developed black-box testing strategy is based on diagnostic protocol communication. Through this approach, it is possible to automatically investigate a highly increased attack surface. Based on a new metric, introduced in this paper, we are able to rate the possible attack surface of an entire vehicle or a single Electronic Control Unit (ECU). A novel attack surface metric allows comparisons of different ECUs from different Original Equipment Manufacturers (OEMs), even between different diagnostic protocols. Additionally, we demonstrate the analysis capabilities of our graph-based model to evaluate an ECUs possible attack surface over a lifetime.}, language = {en} } @misc{RennerPozzobonMottok, author = {Renner, Sebastian and Pozzobon, Enrico and Mottok, J{\"u}rgen}, title = {Current and Future Efforts in Benchmarking NIST LWC Ciphers}, series = {4th Lightweight Cryptography Workshop 2020 at NIST, Gaithersburg, USA}, journal = {4th Lightweight Cryptography Workshop 2020 at NIST, Gaithersburg, USA}, language = {en} } @misc{BaerwaldMottok, author = {B{\"a}rwald, Andreas and Mottok, J{\"u}rgen}, title = {Zertifizierung von Werkzeugen und Werkzeugketten}, series = {Software im Automobil, Stuttgart, 04./05. Mai 2010}, journal = {Software im Automobil, Stuttgart, 04./05. Mai 2010}, language = {de} } @misc{DeubzerMottokFlugetal., author = {Deubzer, Michael and Mottok, J{\"u}rgen and Flug, Christian and Zeitler, Thomas}, title = {A method of performance analysis for embedded system architectures}, series = {8. Tag der Technik am 13. Juni 2008 an der Hochschule Regensburg}, journal = {8. Tag der Technik am 13. Juni 2008 an der Hochschule Regensburg}, language = {en} } @misc{HobelsbergerMottokDumke, author = {Hobelsberger, Martin and Mottok, J{\"u}rgen and Dumke, Reiner}, title = {A model based safety analysis approach for embedded system architectures}, series = {Tag der Technik 2008}, journal = {Tag der Technik 2008}, language = {en} } @misc{AlfransederSchmidhuberMuchaetal., author = {Alfranseder, Martin and Schmidhuber, Stefan and Mucha, Matthias and Sailer, Andreas and Mottok, J{\"u}rgen}, title = {How to improve the reactiveness and efficiency of embedded multicore systems by use of probabilistic simulation and optimization techniques: A case study}, series = {Advanced Research Workshop: Improving Disaster Resilience and Mitigation - New Means and Tools, Trends, Iasi}, journal = {Advanced Research Workshop: Improving Disaster Resilience and Mitigation - New Means and Tools, Trends, Iasi}, language = {en} } @inproceedings{FrauenschlaegerDentgenMottok, author = {Frauenschl{\"a}ger, Tobias and Dentgen, Manuel and Mottok, J{\"u}rgen}, title = {Systemarchitektur eines Sicherheitsmoduls im Energiesektor}, series = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, booktitle = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, address = {Landshut}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:860-opus4-2092}, pages = {29 -- 38}, abstract = {Aufgrund der immer weiter anwachsenden Vernetzung der Stromnetze wird die Kommunikation zwischen der Leitstelle des Energieversorgers und den Infrastrukturkomponenten innerhalb eines Umspannwerks immer bedeutsamer. Dabei werden sowohl Steuerbefehle als auch Daten f{\"u}r {\"U}berwachungsfunktionen {\"u}bertragen. In den aktuellen Netzwerkarchitekturen findet diese Kommunikation ohne eine kryptografische Absicherung statt, was einen Angriffspunkt f{\"u}r gezielte Attacken und damit eine potenzielle Gef{\"a}hrdung der Energieversorgung darstellt. Um solchen Angriffen in Zukunft entgegenzuwirken, wird das ES³M-Sicherheitsmodul entwickelt. Dieses soll in das Netzwerk zwischen den beiden Kommunikationspartnern eingesetzt werden und so den Datenverkehr absichern. Mithilfe einer Bedrohungsanalyse wurden Anforderungen abgeleitet, die neben kryptografischen Maßnahmen auch Themen wie funktionale Sicherheit und Langlebigkeit umfassen. Um diese zu erf{\"u}llen, wurde eine spezielle Systemarchitektur auf Basis einer Aufgabenteilung entworfen. Diese Architektur und korrespondierende Designentscheidungen werden pr{\"a}sentiert.}, language = {de} } @article{MaierSchlattlGuessetal., author = {Maier, Robert and Schlattl, Andreas and Guess, Thomas and Mottok, J{\"u}rgen}, title = {CausalOps - Towards an industrial lifecycle for causal probabilistic graphical models}, series = {Information and Software Technology}, journal = {Information and Software Technology}, publisher = {Elsevier}, issn = {0950-5849}, doi = {10.1016/j.infsof.2024.107520}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-73350}, abstract = {Context: Causal probabilistic graph-based models have gained widespread utility, enabling the modeling of cause-and-effect relationships across diverse domains. With their rising adoption in new areas, such as safety analysis of complex systems, software engineering, and machine learning, the need for an integrated lifecycle framework akin to DevOps and MLOps has emerged. Currently, such a reference for organizations interested in employing causal engineering is missing. This lack of guidance hinders the incorporation and maturation of causal methods in the context of real-life applications. Objective: This work contextualizes causal model usage across different stages and stakeholders and outlines a holistic view of creating and maintaining them within the process landscape of an organization. Method: A novel lifecycle framework for causal model development and application called CausalOps is proposed. By defining key entities, dependencies, and intermediate artifacts generated during causal engineering, a consistent vocabulary and workflow model to guide organizations in adopting causal methods are established. Results: Based on the early adoption of the discussed methodology to a real-life problem within the automotive domain, an experience report underlining the practicability and challenges of the proposed approach is discussed. Conclusion: It is concluded that besides current technical advancements in various aspects of causal engineering, an overarching lifecycle framework that integrates these methods into organizational practices is missing. Although diverse skills from adjacent disciplines are widely available, guidance on how to transfer these assets into causality-driven practices still need to be addressed in the published literature. CausalOps' aim is to set a baseline for the adoption of causal methods in practical applications within interested organizations and the causality community.}, language = {en} } @inproceedings{StauferHauserEzeretal., author = {Staufer, Susanne and Hauser, Florian and Ezer, Timur and Grabinger, Lisa and Nadimpalli, Vamsi Krishna and R{\"o}hrl, Simon and Bugert, Flemming and Bittner, Dominik and Mottok, J{\"u}rgen}, title = {EVALUATION OF THE LEARNING MANAGEMENT SYSTEM PYTHIA}, series = {EDULEARN Proceedings: 16th International Conference on Education and New Learning Technologies, Palma, Spain. 1-3 July, 2024}, booktitle = {EDULEARN Proceedings: 16th International Conference on Education and New Learning Technologies, Palma, Spain. 1-3 July, 2024}, publisher = {IATED}, issn = {2340-1117}, doi = {10.21125/edulearn.2024.2189}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-73474}, pages = {9089 -- 9098}, abstract = {Learning management systems gain importance due to the Corona pandemic. To personalize such a learning management system, a Moodle adaption named Pythia was created. Pythia is implemented as a Moodle plugin solution. The possibility of generating learning paths with various algorithms and the change of the graphical user interface is significant. Learning paths are generated with two different algorithms. Nestor algorithm generates learning paths with a Bayesian network, while Tyche algorithm uses a Markov model. The graphical user interface is adapted to the generated learning paths where learning element symbols are customized and the individual learning paths are depicted. This paper presents the results of a qualitative survey among German students with the aim of evaluating the first version of the learning management system Pythia. 25 students took the subject "Software Engineering for Safe and Secure Systems" in the winter term of 2023/24. The 68 asked questions focus on usage behavior, graphical user interface, usability, preferences, volume, and quality of learning elements, and learning paths. Our Moodle course for the lecture contains seven sections, each section has minimum one subsection on which the learning path is calculated. Last three sections are designed by presenting minimum one learning element of each learning element category except the collaboration tool. In a previous work, ten learning element categories were designed and evaluated comprising manuscript, brief overview, learning goal, quiz, exercise, summary, three types of additional material, and collaboration tool. The first sections are left as they are initially designed by the lecturer (normal section). The survey considers the difference between normal sections and diverse sections. Furthermore, the generated learning paths are evaluated. 13 students undertook Nestor learning paths, whereas 12 undertook Tyche learning paths. The results suggest that for the majority of students, the learning element symbols are well-chosen. Moreover, all students wish the elements relevant to the exam to be labelled. 23 students are overwhelmed by the number of learning elements in the last sections of the Moodle course. In the future, some suggestions will be implemented such as the labelling of exam relevant learning elements. To overcome the overload of learning elements, a strategy could be developed like hiding learning elements not preferred by the learning path algorithm.}, language = {en} } @inproceedings{GrabingerMottok, author = {Grabinger, Lisa and Mottok, J{\"u}rgen}, title = {On selecting hypothesis tests for group differences}, series = {ICERI2024 Proceedings: 17th Annual International Conference of Education, Research and Innovation, 11th-13th November 2024, Seville, Spain}, booktitle = {ICERI2024 Proceedings: 17th Annual International Conference of Education, Research and Innovation, 11th-13th November 2024, Seville, Spain}, publisher = {IATED}, doi = {10.21125/iceri.2024.0272}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-78200}, pages = {702 -- 712}, abstract = {Deciding on the right method of analyzing empirical research data can be difficult - especially when it comes to choosing specific methods of inferential statistics, where there is often not one right way, but a variety of valid options (e.g., using an ANOVA or its non-parametric alternative for data that is not perfectly normally distributed). Novice researchers not only lack the experience to know when a particular hypothesis test is appropriate, but struggle to find suitable literature to familiarize themselves (i.e., literature that is not too superficial, yet comprehensible). With the present article we provide a remedy following the didactic method of scaffolding: We present a systematization of the most elementary inferential statistical methods, namely hypothesis tests for group differences. We start by explaining basic terms (e.g., independent variable) and then give step-by-step instructions for choosing a proper hypothesis test based on data properties, implementing it from scratch, and reporting or interpreting its results. With these practical cookbook-like guidelines, this article serves as a concise starting point for young researchers entering the field of empirical research, as a valuable resource for their instructors, and as a basis for automating statistical procedures in a software system.}, language = {en} } @article{GrabingerHauserMottok, author = {Grabinger, Lisa and Hauser, Florian and Mottok, J{\"u}rgen}, title = {On the perception of graph layouts}, series = {Journal of Software: Evolution and Process}, journal = {Journal of Software: Evolution and Process}, publisher = {Wiley}, doi = {10.1002/smr.2599}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-62973}, abstract = {In the field of software engineering, graph-based models are used for a variety of applications. Usually, the layout of those graphs is determined at the discretion of the user. This article empirically investigates whether different layouts affect the comprehensibility or popularity of a graph and whether one can predict the perception of certain aspects in the graph using basic graphical laws from psychology (i.e., Gestalt principles). Data on three distinct layouts of one causal graph is collected from 29 subjects using eye tracking and a print questionnaire. The evaluation of the collected data suggests that the layout of a graph does matter and that the Gestalt principles are a valuable tool for assessing partial aspects of a layout.}, language = {en} } @inproceedings{SailerSchmidhuberDeubzeretal., author = {Sailer, Andreas and Schmidhuber, Stefan and Deubzer, Michael and Mottok, J{\"u}rgen}, title = {Amalthea - Plattform f{\"u}r kontinuierliche, modellbasierte Entwicklung}, series = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, booktitle = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, pages = {538 -- 544}, language = {de} } @misc{HauserReuterGegenfurtneretal., author = {Hauser, Florian and Reuter, Rebecca and Gegenfurtner, Andreas and Gruber, Hans and Mottok, J{\"u}rgen and Hutzler, Ivonne}, title = {Heuristics in Software Modelling: An Eyetracking Study}, series = {Earli Book of Abstracts}, journal = {Earli Book of Abstracts}, publisher = {RWTH Aachen}, abstract = {To investigate the role of heuristics in the domain of software engineering, an eye tracking study was conducted in which experts and novices were compared. The study focused on one of the most challenging parts in this domain: the generation of an object model for a software product based on a requirements specification. During their training, software engineers are taught different techniques to solve this task. One of these techniques is the noun/verb analysis. However, it is still unclear to what extent novice and expert programmers are making use of it. Ideally, the noun/verb analysis works as a heuristic and helps programmers to make fast and accurate decisions. Participants in the study were 40 software programmers at four levels of expertise (novices, intermediates, experienced rogrammers, experts). They were presented with ten decision tasks. In each task, participants read a requirement specification and then had to choose one out of three presented class diagrams that they considered the best solution. During the task, their eye movements were recorded. Results show that all participants used the noun/verb analysis as a heuristic. Programmers with higher levels of expertise, however, outperformed programmers with lower levels of expertise. Interestingly, the more experienced programmers were not following the noun/verb analysis in a blindfolded way. They realised that the noun/verb analysis would produce diagrams, but a skilled software architect would not model them in this way. Instead they created their models in a way that they perceived as more logical and realistic}, language = {en} } @inproceedings{SoskaSchummJosephetal., author = {Soska, Alexander and Schumm, Michael and Joseph, Saskia and Reschke, Michael and Mottok, J{\"u}rgen and Niemetz, Michael and Schroll-Decker, Irmgard}, title = {Comparison of Frontal Lecture and Workshop Learning Arrangements in a Software Engineering Education Project}, series = {2014 IEEE Global Engineering Education Conference (EDUCON), Istanbul, Turkey}, booktitle = {2014 IEEE Global Engineering Education Conference (EDUCON), Istanbul, Turkey}, doi = {10.1109/EDUCON.2014.6826162}, pages = {653 -- 658}, abstract = {The increase in complexity of software and its creation over the last decades requires an increase in the quality of the education of software engineering professionals. The number of Universities which answer this call by replacing or extending lectures with simulated software projects is constantly rising. However, the question how to best transfer new technological knowledge needed to be successful within this projects to the students remains open. Therefore this paper will present a comparison between the classical frontal lecture and a modern workshop learning arrangement used within these projects. By the use of workshops not only the knowledge transfer but also the acquisition of personal and social competences will be facilitated. Furthermore positive experiences with workshops at university level will support life-long learning.}, language = {en} } @inproceedings{MuenchFrauenschlaegerMottok, author = {M{\"u}nch, Andreas and Frauenschl{\"a}ger, Tobias and Mottok, J{\"u}rgen}, title = {Integration of a Security Gateway for Critical Infrastructure into Existing PKI Systems}, series = {3. Symposium Elektronik und Systemintegration (ESI 2022), Tagungsband: 06. April 2022, Hochschule Landshut, Deutschland}, booktitle = {3. Symposium Elektronik und Systemintegration (ESI 2022), Tagungsband: 06. April 2022, Hochschule Landshut, Deutschland}, publisher = {Hochschule Landshut}, address = {Landshut}, isbn = {978-3-9818439-7-2}, pages = {88 -- 97}, language = {en} } @inproceedings{DeubzerHobelsbergerMottoketal., author = {Deubzer, Michael and Hobelsberger, Martin and Mottok, J{\"u}rgen and Schiller, Frank and Dumke, Reiner and Siegle, Markus and Margull, Ulrich and Niemetz, Michael and Wirrer, Gerhard}, title = {Modeling and Simulation of Embedded Real-Time Multi-Core Systems}, series = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, booktitle = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, language = {en} } @inproceedings{HobelsbergerDumkeMottoketal., author = {Hobelsberger, Martin and Dumke, Reiner and Mottok, J{\"u}rgen and Niemetz, Michael and Wirrer, Gerhard}, title = {An Experience-Based Repository of Reusable Components for an Component-Based Automotive Software System}, series = {Applied Software Measurement, proceedings of the joined International Conferences on Software Measurement IWSM/MetriKon/Mensura 2010, 10.-12. November 2010, Stuttgart, Germany}, booktitle = {Applied Software Measurement, proceedings of the joined International Conferences on Software Measurement IWSM/MetriKon/Mensura 2010, 10.-12. November 2010, Stuttgart, Germany}, pages = {218 -- 240}, language = {en} } @inproceedings{MottokKraemerDeubzeretal., author = {Mottok, J{\"u}rgen and Kr{\"a}mer, Stefan and Deubzer, Michael and Hobelsberger, Martin and Martin, Felix}, title = {Hardware Based Tracing of Embedded Multi-Core Systems}, series = {4th Applied Research Conference, 5th July 2014, Ingolstadt}, booktitle = {4th Applied Research Conference, 5th July 2014, Ingolstadt}, isbn = {978-3-8440-2875-1}, language = {en} } @inproceedings{HobelsbergerMottok, author = {Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Software Qualit{\"a}t - eine Glaubensfrage? Ein {\"U}berblick {\"u}ber Modelle der Softwarezuverl{\"a}ssigkeit}, series = {Proceedings of the 2nd Embedded Software Engineering Congress, 8. bis 10. Dezember 2009, Sindelfingen}, booktitle = {Proceedings of the 2nd Embedded Software Engineering Congress, 8. bis 10. Dezember 2009, Sindelfingen}, pages = {134 -- 148}, language = {de} } @inproceedings{HobelsbergerMottokDumke, author = {Hobelsberger, Martin and Mottok, J{\"u}rgen and Dumke, Reiner}, title = {Modellbasierte Sicherheitsanalysen von Software-Architekturen}, series = {Embedded Software Engineering Kongress, Tagungsband ; 8. bis 10. Dezember 2008, Sindelfingen}, booktitle = {Embedded Software Engineering Kongress, Tagungsband ; 8. bis 10. Dezember 2008, Sindelfingen}, pages = {436 -- 443}, language = {de} } @article{DeubzerMottokHobelsberger, author = {Deubzer, Michael and Mottok, J{\"u}rgen and Hobelsberger, Martin}, title = {Profiling in Embedded Real-Time Software Systemen}, series = {Jahresr{\"u}ckblick 2008 des Bayerischen IT-Sicherheitsclusters}, journal = {Jahresr{\"u}ckblick 2008 des Bayerischen IT-Sicherheitsclusters}, pages = {13}, language = {en} }