@inproceedings{TaoLiuMottoketal., author = {Tao, Ye and Liu, Guozhu and Mottok, J{\"u}rgen and Hackenberg, Rudolf and Hagel, Georg and Mottok, J{\"u}rgen}, title = {Just-in-Time Teaching in software engineering: A Chinese-German empirical case study}, series = {2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey}, booktitle = {2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey}, publisher = {IEEE}, doi = {10.1109/EDUCON.2014.6826220}, pages = {983 -- 986}, abstract = {Learning centered teaching becomes an important factor in a global perspective of learning software engineering. The Just-in-Time Teaching approach is used in a Chinese-German empirical case study. In a one year terminated project we will analyze the performance of our students in an active learning scenario with Just-in-Time Teaching and Peer Instruction. We will contribute an inter-cultural comparison of achieved competencies by student's self-assessment and teacher's observation.}, language = {en} } @inproceedings{StudtWeissMottoketal., author = {Studt, Reimer and Weiß, Florian and Mottok, J{\"u}rgen and Weiss, Florian and Mottok, J{\"u}rgen}, title = {An engineering approach to developing lecture material for new study courses}, series = {2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey}, booktitle = {2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey}, publisher = {IEEE}, doi = {10.1109/EDUCON.2014.6826153}, pages = {592 -- 597}, abstract = {Professional software development is a complex task with many inputs and a complex output. In order to handle complex topics as software or complex engineering projects, structured processes as the V-model or iterative development processes exist. Similarly, the development of a software engineering lecture is a task with many inputs, and a complex output. A structured and methodological approach to the development of a lecture is presented, which applies the same principles as used in the development of software.}, language = {en} } @inproceedings{KraemerSimsekBraunetal., author = {Kr{\"a}mer, Stefan and Simsek, Erol and Braun, J{\"u}rgen and Deubzer, Michael and Stingl, Armin and Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Mut zu Fehlern, um die Qualit{\"a}t zu steigern - Fault-Injection zur Steigerung der Zuverl{\"a}ssigkeit}, series = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, booktitle = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, isbn = {978-3-8343-2408-5}, pages = {577 -- 585}, language = {de} } @inproceedings{BraunMottokMiedletal., author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen and Miedl, Christian and Greyer, D. and Minas, Mark}, title = {Fail-Safe und Fault-Tolerant Mechanismen}, series = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, booktitle = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, pages = {378 -- 386}, language = {en} } @inproceedings{BraunMottokMiedletal., author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen and Miedl, Christian and Geyer, Dirk and Minas, Mark}, title = {Overview and Evaluation of Fail-Safe and Fault-Tolerant Mechanisms for the Electromobility according to ISO26262}, series = {1st International Electromobility Congress, 12. - 13. 5. 2011, Prague}, booktitle = {1st International Electromobility Congress, 12. - 13. 5. 2011, Prague}, pages = {5}, language = {en} } @inproceedings{BraunMottok, author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen}, title = {Fail-Safe and Fail-Operational Systems safeguarded with Coded Processing}, series = {2013 IEEE EUROCON - International Conference on Computer as a Tool, Zagreb, Croatia, July 1-4, 2013}, booktitle = {2013 IEEE EUROCON - International Conference on Computer as a Tool, Zagreb, Croatia, July 1-4, 2013}, isbn = {978-1-4673-2231-7}, doi = {10.1109/EUROCON.2013.6625234}, pages = {1878 -- 1885}, abstract = {Safety has the highest priority because it helps contribute to customer confidence and thereby ensures further growth of the new markets, like electromobility. Therefore in series production redundant hardware concepts like dual core microcontrollers running in lock-step-mode are used to reach for example ASIL D safety requirements given from the ISO 26262. Coded processing is capable of reducing redundancy in hardware by adding diverse redundancy in software, e.g. by specific coding of data and instructions. A system with two coded processing channels is considered. Both channels are active. When one channel fails, the service can be continued with the other channel. It is imaginable that the two channels with implemented coded processing are running with time redundancy on a single core or on a multi core system where for example different ASIL levels are partitioned on different cores. In this paper a redundancy concept based on coded processing will be taken into account. The improvement of the Mean Time To Failure by safeguarding the system with coded processing will be computed for fail-safe as well as for fail-operational systems. The use of the coded processing approach in safeguarding failsafe systems is proved.}, language = {en} } @inproceedings{BraunMottokMiedletal., author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen and Miedl, Christian and Geyer, Dirk and Minas, Mark}, title = {Increasing the reliability of single and multicore systems with software rejuvenation and coded processing}, series = {Automotive Safety \& Security 2012, Sicherheit und Zuverl{\"a}ssigkeit f{\"u}r automobile Informationstechnik, 14.-15. Nov. 2012, Karlsruhe}, booktitle = {Automotive Safety \& Security 2012, Sicherheit und Zuverl{\"a}ssigkeit f{\"u}r automobile Informationstechnik, 14.-15. Nov. 2012, Karlsruhe}, pages = {163 -- 178}, abstract = {The safety of electric vehicles has the highest priority because it helps contribute to customer confidence and thereby ensures further growth of the electromobility market. Therefore in series production redundant hardware concepts like dual core microcontrollers running in lock-step-mode are used to reach ASIL D safety requirements given from the ISO 26262. Coded processing is capable of reducing redundancy in hardware by adding diverse redundancy in software, e.g. by specific coding of data and instructions. A system with two coded processing channels is considered. One channel is active and one is in cold standby. When the active channel fails, the service is switched from the active channel to the standby channel. It is imaginable that the two channels with implemented coded processing are running with time redundancy on a single core or on a multi core system where for example different ASIL levels are partitioned on different cores. In this paper a redundant concept based on coded processing and software rejuvenation will be taken into account.}, language = {en} } @inproceedings{BraunMottok, author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen}, title = {The Myths of Coded Processing}, series = {IEEE International Conference on High Performance Computing and Communications (HPCC-ICESS-CSS 2015), 24-26 Aug. 2015, New York, USA}, booktitle = {IEEE International Conference on High Performance Computing and Communications (HPCC-ICESS-CSS 2015), 24-26 Aug. 2015, New York, USA}, doi = {10.1109/HPCC-CSS-ICESS.2015.24}, pages = {1637 -- 1644}, abstract = {Safety of embedded systems has the highest priority because it helps contribute to customer confidence and thereby ensures growth of the new markets, like electromobility. In series production fail-safe systems as well as fault-tolerant systems are realized with redundant hardware concepts like dual core microcontrollers running in lock-step-mode to reach highest safety requirements given by standards, like ISO 26262 or IEC 61508. In contrast to the hardware redundancy approach, there are also approaches available with information-, time-and/or software-redundancy since several years. One of them is known as coded processing or AN-codes. Coded processing is capable of reducing redundancy in hardware by adding diverse redundancy in software. But the breakthrough of coded processing never took place. One reason for this seem to be the myths which are widely propagated on this subject and the hereby associated uncertainties. In this paper some myths are busted, like the usage of prime numbers as transformation factor A, the myth that greater transformation factors are better or the myth about the residual error probability defined as 1/A. Some of them have been propagated since 1989. The aim of this paper is to provide more clarity and understanding for this technique, perhaps to pave the way for further functional safety concepts based on coded processing approaches.}, language = {en} } @inproceedings{BraunMottokMiedletal., author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen and Miedl, Christian and Geyer, Dirk and Minas, Mark}, title = {Capability of single hardware channel for automotive safety applications according to ISO 26262}, series = {2012 International Conference on Applied Electronics (AE 2012), Pilsen, Czech Republic, 5 - 7 September 2012}, booktitle = {2012 International Conference on Applied Electronics (AE 2012), Pilsen, Czech Republic, 5 - 7 September 2012}, isbn = {978-80-261-0038-6}, pages = {41 -- 45}, language = {en} } @article{BraunGeyerMottok, author = {Braun, J{\"u}rgen and Geyer, Dirk and Mottok, J{\"u}rgen}, title = {Alternative measure for safety related software}, series = {ATZelektronik}, journal = {ATZelektronik}, number = {04}, issn = {1862-1791}, pages = {40 -- 43}, abstract = {Wie kann die funktionale Sicherheit in Fahrzeugen zukunftssicher und effektiv gew{\"a}hrleistet werden? Und wie kann dies speziell in elektrifizierten Antrieben gelingen? Mit dieser Aufgabenstellung haben sich AVL in Kooperation mit dem LaS³ und der Universit{\"a}t der Bundeswehr M{\"u}nchen in einem Forschungsprojekt besch{\"a}ftigt. Die Antwort lautet: Die automatischen Speichertests in Zusammenspiel mit der Programmfluss-{\"U}berwachung und redundanter Hardware k{\"o}nnen besonders effektiv durch die „Codierte Verarbeitung" ersetzt werden. Denn hier wird die Diversit{\"a}t in Software erh{\"o}ht, um die aufwendigere und kostspielige Redundanz von Hardware zu reduzieren.}, language = {en} } @inproceedings{WeissRennerMottoketal., author = {Weiss, Nils and Renner, Sebastian and Mottok, J{\"u}rgen and Matoušek, V{\´a}clav}, title = {Automated Threat Evaluation of Automotive Diagnostic Protocols}, series = {ESCAR USA, 2021, Virtual}, booktitle = {ESCAR USA, 2021, Virtual}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-29882}, pages = {20}, abstract = {Diagnostic protocols in automotive systems can offer a huge attack surface with devastating impacts if vulnerabilities are present. This paper shows the application of active automata learning techniques for reverse engineering system state machines of automotive systems. The developed black-box testing strategy is based on diagnostic protocol communication. Through this approach, it is possible to automatically investigate a highly increased attack surface. Based on a new metric, introduced in this paper, we are able to rate the possible attack surface of an entire vehicle or a single Electronic Control Unit (ECU). A novel attack surface metric allows comparisons of different ECUs from different Original Equipment Manufacturers (OEMs), even between different diagnostic protocols. Additionally, we demonstrate the analysis capabilities of our graph-based model to evaluate an ECUs possible attack surface over a lifetime.}, language = {en} } @misc{RennerPozzobonMottok, author = {Renner, Sebastian and Pozzobon, Enrico and Mottok, J{\"u}rgen}, title = {Current and Future Efforts in Benchmarking NIST LWC Ciphers}, series = {4th Lightweight Cryptography Workshop 2020 at NIST, Gaithersburg, USA}, journal = {4th Lightweight Cryptography Workshop 2020 at NIST, Gaithersburg, USA}, language = {en} } @misc{BaerwaldMottok, author = {B{\"a}rwald, Andreas and Mottok, J{\"u}rgen}, title = {Zertifizierung von Werkzeugen und Werkzeugketten}, series = {Software im Automobil, Stuttgart, 04./05. Mai 2010}, journal = {Software im Automobil, Stuttgart, 04./05. Mai 2010}, language = {de} } @misc{DeubzerMottokFlugetal., author = {Deubzer, Michael and Mottok, J{\"u}rgen and Flug, Christian and Zeitler, Thomas}, title = {A method of performance analysis for embedded system architectures}, series = {8. Tag der Technik am 13. Juni 2008 an der Hochschule Regensburg}, journal = {8. Tag der Technik am 13. Juni 2008 an der Hochschule Regensburg}, language = {en} } @misc{HobelsbergerMottokDumke, author = {Hobelsberger, Martin and Mottok, J{\"u}rgen and Dumke, Reiner}, title = {A model based safety analysis approach for embedded system architectures}, series = {Tag der Technik 2008}, journal = {Tag der Technik 2008}, language = {en} } @misc{AlfransederSchmidhuberMuchaetal., author = {Alfranseder, Martin and Schmidhuber, Stefan and Mucha, Matthias and Sailer, Andreas and Mottok, J{\"u}rgen}, title = {How to improve the reactiveness and efficiency of embedded multicore systems by use of probabilistic simulation and optimization techniques: A case study}, series = {Advanced Research Workshop: Improving Disaster Resilience and Mitigation - New Means and Tools, Trends, Iasi}, journal = {Advanced Research Workshop: Improving Disaster Resilience and Mitigation - New Means and Tools, Trends, Iasi}, language = {en} } @inproceedings{FrauenschlaegerDentgenMottok, author = {Frauenschl{\"a}ger, Tobias and Dentgen, Manuel and Mottok, J{\"u}rgen}, title = {Systemarchitektur eines Sicherheitsmoduls im Energiesektor}, series = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, booktitle = {Tagungsband 2. Symposium Elektronik und Systemintegration ESI 2020: "Intelligente Systeme und ihre Komponenten: Forschung und industrielle Anwendung"}, address = {Landshut}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:860-opus4-2092}, pages = {29 -- 38}, abstract = {Aufgrund der immer weiter anwachsenden Vernetzung der Stromnetze wird die Kommunikation zwischen der Leitstelle des Energieversorgers und den Infrastrukturkomponenten innerhalb eines Umspannwerks immer bedeutsamer. Dabei werden sowohl Steuerbefehle als auch Daten f{\"u}r {\"U}berwachungsfunktionen {\"u}bertragen. In den aktuellen Netzwerkarchitekturen findet diese Kommunikation ohne eine kryptografische Absicherung statt, was einen Angriffspunkt f{\"u}r gezielte Attacken und damit eine potenzielle Gef{\"a}hrdung der Energieversorgung darstellt. Um solchen Angriffen in Zukunft entgegenzuwirken, wird das ES³M-Sicherheitsmodul entwickelt. Dieses soll in das Netzwerk zwischen den beiden Kommunikationspartnern eingesetzt werden und so den Datenverkehr absichern. Mithilfe einer Bedrohungsanalyse wurden Anforderungen abgeleitet, die neben kryptografischen Maßnahmen auch Themen wie funktionale Sicherheit und Langlebigkeit umfassen. Um diese zu erf{\"u}llen, wurde eine spezielle Systemarchitektur auf Basis einer Aufgabenteilung entworfen. Diese Architektur und korrespondierende Designentscheidungen werden pr{\"a}sentiert.}, language = {de} } @article{MaierSchlattlGuessetal., author = {Maier, Robert and Schlattl, Andreas and Guess, Thomas and Mottok, J{\"u}rgen}, title = {CausalOps - Towards an industrial lifecycle for causal probabilistic graphical models}, series = {Information and Software Technology}, journal = {Information and Software Technology}, publisher = {Elsevier}, issn = {0950-5849}, doi = {10.1016/j.infsof.2024.107520}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-73350}, abstract = {Context: Causal probabilistic graph-based models have gained widespread utility, enabling the modeling of cause-and-effect relationships across diverse domains. With their rising adoption in new areas, such as safety analysis of complex systems, software engineering, and machine learning, the need for an integrated lifecycle framework akin to DevOps and MLOps has emerged. Currently, such a reference for organizations interested in employing causal engineering is missing. This lack of guidance hinders the incorporation and maturation of causal methods in the context of real-life applications. Objective: This work contextualizes causal model usage across different stages and stakeholders and outlines a holistic view of creating and maintaining them within the process landscape of an organization. Method: A novel lifecycle framework for causal model development and application called CausalOps is proposed. By defining key entities, dependencies, and intermediate artifacts generated during causal engineering, a consistent vocabulary and workflow model to guide organizations in adopting causal methods are established. Results: Based on the early adoption of the discussed methodology to a real-life problem within the automotive domain, an experience report underlining the practicability and challenges of the proposed approach is discussed. Conclusion: It is concluded that besides current technical advancements in various aspects of causal engineering, an overarching lifecycle framework that integrates these methods into organizational practices is missing. Although diverse skills from adjacent disciplines are widely available, guidance on how to transfer these assets into causality-driven practices still need to be addressed in the published literature. CausalOps' aim is to set a baseline for the adoption of causal methods in practical applications within interested organizations and the causality community.}, language = {en} } @inproceedings{StauferHauserEzeretal., author = {Staufer, Susanne and Hauser, Florian and Ezer, Timur and Grabinger, Lisa and Nadimpalli, Vamsi Krishna and R{\"o}hrl, Simon and Bugert, Flemming and Bittner, Dominik and Mottok, J{\"u}rgen}, title = {EVALUATION OF THE LEARNING MANAGEMENT SYSTEM PYTHIA}, series = {EDULEARN Proceedings: 16th International Conference on Education and New Learning Technologies, Palma, Spain. 1-3 July, 2024}, booktitle = {EDULEARN Proceedings: 16th International Conference on Education and New Learning Technologies, Palma, Spain. 1-3 July, 2024}, publisher = {IATED}, issn = {2340-1117}, doi = {10.21125/edulearn.2024.2189}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-73474}, pages = {9089 -- 9098}, abstract = {Learning management systems gain importance due to the Corona pandemic. To personalize such a learning management system, a Moodle adaption named Pythia was created. Pythia is implemented as a Moodle plugin solution. The possibility of generating learning paths with various algorithms and the change of the graphical user interface is significant. Learning paths are generated with two different algorithms. Nestor algorithm generates learning paths with a Bayesian network, while Tyche algorithm uses a Markov model. The graphical user interface is adapted to the generated learning paths where learning element symbols are customized and the individual learning paths are depicted. This paper presents the results of a qualitative survey among German students with the aim of evaluating the first version of the learning management system Pythia. 25 students took the subject "Software Engineering for Safe and Secure Systems" in the winter term of 2023/24. The 68 asked questions focus on usage behavior, graphical user interface, usability, preferences, volume, and quality of learning elements, and learning paths. Our Moodle course for the lecture contains seven sections, each section has minimum one subsection on which the learning path is calculated. Last three sections are designed by presenting minimum one learning element of each learning element category except the collaboration tool. In a previous work, ten learning element categories were designed and evaluated comprising manuscript, brief overview, learning goal, quiz, exercise, summary, three types of additional material, and collaboration tool. The first sections are left as they are initially designed by the lecturer (normal section). The survey considers the difference between normal sections and diverse sections. Furthermore, the generated learning paths are evaluated. 13 students undertook Nestor learning paths, whereas 12 undertook Tyche learning paths. The results suggest that for the majority of students, the learning element symbols are well-chosen. Moreover, all students wish the elements relevant to the exam to be labelled. 23 students are overwhelmed by the number of learning elements in the last sections of the Moodle course. In the future, some suggestions will be implemented such as the labelling of exam relevant learning elements. To overcome the overload of learning elements, a strategy could be developed like hiding learning elements not preferred by the learning path algorithm.}, language = {en} } @inproceedings{GrabingerMottok, author = {Grabinger, Lisa and Mottok, J{\"u}rgen}, title = {On selecting hypothesis tests for group differences}, series = {ICERI2024 Proceedings: 17th Annual International Conference of Education, Research and Innovation, 11th-13th November 2024, Seville, Spain}, booktitle = {ICERI2024 Proceedings: 17th Annual International Conference of Education, Research and Innovation, 11th-13th November 2024, Seville, Spain}, publisher = {IATED}, doi = {10.21125/iceri.2024.0272}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-78200}, pages = {702 -- 712}, abstract = {Deciding on the right method of analyzing empirical research data can be difficult - especially when it comes to choosing specific methods of inferential statistics, where there is often not one right way, but a variety of valid options (e.g., using an ANOVA or its non-parametric alternative for data that is not perfectly normally distributed). Novice researchers not only lack the experience to know when a particular hypothesis test is appropriate, but struggle to find suitable literature to familiarize themselves (i.e., literature that is not too superficial, yet comprehensible). With the present article we provide a remedy following the didactic method of scaffolding: We present a systematization of the most elementary inferential statistical methods, namely hypothesis tests for group differences. We start by explaining basic terms (e.g., independent variable) and then give step-by-step instructions for choosing a proper hypothesis test based on data properties, implementing it from scratch, and reporting or interpreting its results. With these practical cookbook-like guidelines, this article serves as a concise starting point for young researchers entering the field of empirical research, as a valuable resource for their instructors, and as a basis for automating statistical procedures in a software system.}, language = {en} } @article{GrabingerHauserMottok, author = {Grabinger, Lisa and Hauser, Florian and Mottok, J{\"u}rgen}, title = {On the perception of graph layouts}, series = {Journal of Software: Evolution and Process}, journal = {Journal of Software: Evolution and Process}, publisher = {Wiley}, doi = {10.1002/smr.2599}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:898-opus4-62973}, abstract = {In the field of software engineering, graph-based models are used for a variety of applications. Usually, the layout of those graphs is determined at the discretion of the user. This article empirically investigates whether different layouts affect the comprehensibility or popularity of a graph and whether one can predict the perception of certain aspects in the graph using basic graphical laws from psychology (i.e., Gestalt principles). Data on three distinct layouts of one causal graph is collected from 29 subjects using eye tracking and a print questionnaire. The evaluation of the collected data suggests that the layout of a graph does matter and that the Gestalt principles are a valuable tool for assessing partial aspects of a layout.}, language = {en} }