@inproceedings{ThelenEderMelzeretal., author = {Thelen, Simon and Eder, Friedrich and Melzer, Matthias and Nunes, Danilo Weber and Stadler, Michael and Rechenauer, Christian and Obergrießer, Mathias and Jubeh, Ruben and Volbert, Klaus and D{\"u}nnweber, Jan}, title = {A Slim Digital Twin For A Smart City And Its Residents}, series = {SOICT '23: Proceedings of the 12th International Symposium on Information and Communication Technology, 2023, Hi Chi Minh, Vietnam}, booktitle = {SOICT '23: Proceedings of the 12th International Symposium on Information and Communication Technology, 2023, Hi Chi Minh, Vietnam}, publisher = {ACM}, isbn = {979-8-4007-0891-6}, doi = {10.1145/3628797.3628936}, pages = {8 -- 15}, abstract = {In the engineering domain, representing real-world objects using a body of data, called a digital twin, which is frequently updated by "live" measurements, has shown various advantages over tradi- tional modelling and simulation techniques. Consequently, urban planners have a strong interest in digital twin technology, since it provides them with a laboratory for experimenting with data before making far-reaching decisions. Realizing these decisions involves the work of professionals in the architecture, engineering and construction (AEC) domain who nowadays collaborate via the methodology of building information modeling (BIM). At the same time, the citizen plays an integral role both in the data acquisition phase, while also being a beneficiary of the improved resource management strategies. In this paper, we present a prototype for a "digital energy twin" platform we designed in cooperation with the city of Regensburg. We show how our extensible platform de- sign can satisfy the various requirements of multiple user groups through a series of data processing solutions and visualizations, in- dicating valuable design and implementation guidelines for future projects. In particular, we focus on two example use cases concern- ing building electricity monitoring and BIM. By implementing a flexible data processing architecture we can involve citizens in the data acquisition process, meeting the demands of modern users regarding maximum transparency in the handling of their data.}, language = {en} } @book{ScheidVogl, author = {Scheid, Sandro and Vogl, Stefanie}, title = {Data Science: Grundlagen, Methode und Modelle der Statistik}, publisher = {Hanser}, isbn = {978-3-446-46663-0}, doi = {10.3139/9783446470019}, pages = {359}, subject = {Big Data}, language = {de} } @article{KratzerWestnerStrahringer, author = {Kratzer, Simon and Westner, Markus and Strahringer, Susanne}, title = {Traction with fraction: Strategic IS management in SMEs through Fractional CIOs}, series = {International Journal of Information Systems and Project Management}, volume = {12}, journal = {International Journal of Information Systems and Project Management}, number = {1}, issn = {2182-7788}, doi = {10.12821/ijispm120101}, pages = {5 -- 16}, abstract = {Small and medium-sized enterprises (SMEs) increasingly need to manage nformation technology (IT) effectively in order to remain competitive. However, compared to larger organizations, SMEs often face challenges in terms of resources and employer attractiveness, and regularly do not have the need to employ a Chief Information Officer (CIO) on a full-time basis. To address this issue, a growing number of global experts have begun to provide CIO services on a part-time basis for multiple clients simultaneously. This approach allows SMEs to tap into the expertise of experienced IT leaders at a fraction of the cost and without committing to long-term arrangements. While these professionals, known as "Fractional CIOs", have proven their value in the field, there has been a lack of academic research on this emerging trend. Therefore, we carried out a comprehensive research project between 2020 and 2023, involving 62 Fractional CIOs from 10 countries. The research produced a definition, different types of engagements, and success factors for Fractional CIOs and their engagements. This paper summarizes these findings for a wider audience of academics and practitioners.}, language = {en} } @article{DahmenWeiklBogenberger, author = {Dahmen, Victoria and Weikl, Simone and Bogenberger, Klaus}, title = {Interpretable Machine Learning for Mode Choice Modeling on Tracking-Based Revealed Preference Data}, series = {Transportation Research Record: Journal of the Transportation Research Board}, volume = {2678}, journal = {Transportation Research Record: Journal of the Transportation Research Board}, number = {11}, publisher = {SAGE Publications}, issn = {0361-1981}, doi = {10.1177/03611981241246973}, pages = {2075 -- 2091}, abstract = {Mode choice modeling is imperative for predicting and understanding travel behavior. For this purpose, machine learning (ML) models have increasingly been applied to stated preference and traditional self-recorded revealed preference data with promising results, particularly for extreme gradient boosting (XGBoost) and random forest (RF) models. Because of the rise in the use of tracking-based smartphone applications for recording travel behavior, we address the important and unprecedented task of testing these ML models for mode choice modeling on such data. Furthermore, as ML approaches are still criticized for leading to results that are hard to understand, we consider it essential to provide an in-depth interpretability analysis of the best-performing model. Our results show that the XGBoost and RF models far outperform a conventional multinomial logit model, both overall and for each mode. The interpretability analysis using the Shapley additive explanations approach reveals that the XGBoost model can be explained well at the overall and mode level. In addition, we demonstrate how to analyze individual predictions. Lastly, a sensitivity analysis gives insight into the relative importance of different data sources, sample size, and user involvement. We conclude that the XGBoost model performs best, while also being explainable. Insights generated by such models can be used, for instance, to predict mode choice decisions for arbitrary origin-destination pairs to see which impacts infrastructural changes would have on the mode share.}, language = {en} } @article{BrosigGraeubigStrahringeretal., author = {Brosig, Christoph and Gr{\"a}ubig, Dix M. and Strahringer, Susanne and Westner, Markus}, title = {Prerequisites and Causal Recipes for Manufacturers' IT-Enabled Service Innovation Success}, series = {Communications of the Association for Information Systems}, volume = {55}, journal = {Communications of the Association for Information Systems}, publisher = {Association for Information Systems, AIS}, issn = {1529-3181}, doi = {10.17705/1CAIS.05509}, pages = {205 -- 256}, abstract = {For manufacturing firms, success in innovating IT-enabled services is a critical antecedent to benefit from digital servitization of their business models. Digital servitization literature has explored mechanisms for success in innovating IT-enabled services, indicating that the phenomenon is multifaceted and needs to be explained from multiple theoretical perspectives. We derive a conceptual model for success in innovating IT-enabled services covering its multifaceted nature by referring to knowledge-based and organizational control theory. We test this model using qualitative cases of IT-enabled service innovation initiatives in manufacturing firms and use set-theoretic analyses to account for the multifaceted nature of the phenomenon. The necessary condition analysis yields that a certain degree of service innovation capabilities is a prerequisite for success. With the results of a qualitative comparative analysis, we obtain five solution terms as causal recipes for success in innovating IT-enabled services. Our results contribute to research by offering a theory-based approach that explains the multiplicity of success in IT-enabled service innovation. Practitioners benefit from our results by understanding prerequisites and causal recipes for success while learning from unsuccessful initiatives in innovating IT-enabled services of manufacturing firms. Our study is also an example of how to rigorously calibrate qualitative data using a structured approach.}, language = {en} } @inproceedings{LeglerJajjaVolbert, author = {Legler, Katharina and Jajja, Muhammad Sheheryar and Volbert, Klaus}, title = {Analysis and Design of Smart Components in Digital Energy Twins}, series = {Proceedings of the 10th International Conference on Internet of Things, Big Data and Security., Porto, Portugal April 6-8, 2025}, booktitle = {Proceedings of the 10th International Conference on Internet of Things, Big Data and Security., Porto, Portugal April 6-8, 2025}, publisher = {SciTePress - Science and Technology Publications}, address = {Set{\´u}bal, Portugal}, isbn = {978-989-758-750-4}, doi = {10.5220/0013289900003944}, pages = {263 -- 272}, abstract = {The energy crisis, energy demand growth, and dependence on fossil fuels worldwide have made urgent action necessary for us to seek sustainability in energy production and use. Digital technologies, especially Digital Energy Twins, have immense potential to reduce energy consumption, thereby reducing environmental impacts, particularly in the building sector. This paper presents the development of a digital energy twin that supports sustainable energy consumption analysis and optimization. Our study begins with a comprehensive analysis of the energy consumption data, the weather data, and the building plans as a solid basis for the analysis. We identify key energy consumption trends and patterns across different timescales and device-specific details that could be optimized, such as base load consumption and device-specific inefficiencies. A key part of our work is forecasting energy consumption using time series models, such as the ARIMA model, which promises to be useful in identify ing patterns for improving energy efficiency. Overall, our study provides valuable insights into energy optimization and could form the base for further advances in digital energy twins at OTH Regensburg, helping to contribute to its sustainable development goals and smart campus initiatives.}, language = {en} } @inproceedings{SchildgenHeinz, author = {Schildgen, Johannes and Heinz, Florian}, title = {A Showcase of LLMs in Action: SQL Generation from Natural Language (Demo Paper)}, series = {Datenbanksysteme f{\"u}r Business, Technologie und Web - Workshopband (BTW 2025)}, booktitle = {Datenbanksysteme f{\"u}r Business, Technologie und Web - Workshopband (BTW 2025)}, publisher = {Gesellschaft f{\"u}r Informatik}, address = {Bonn}, doi = {10.18420/BTW2025-47}, pages = {819 -- 825}, abstract = {Today, large language models are a very efficient tool for human-computer interaction using natural language. Chatbots like ChatGPT and their corresponding APIs can be used to solve a large variety of tasks that are provided in human-comprehensible sentences, for example generating SQL queries. Executing spoken SQL queries in a database system poses a challenge, because the various syntactical details of SQL are usually not provided verbally. Here, the LLM can help to augment the recognized raw query with the syntax elements needed for successful execution. Furthermore, the correct spelling of table and column names can be derived from the database schema provided in the LLM prompt. This work showcases four use cases in which LLMs assist in querying database systems: (1) A plugin for phpMyAdmin for voice-query input in natural language, (2) a chart generator, (3) an Alexa skill, and (4) a speech-controlled action game SQL Invaders.}, language = {en} } @inproceedings{HeinzSchildgen, author = {Heinz, Florian and Schildgen, Johannes}, title = {SQLinked - A Hybrid Approach for Local and Database-Remote Program Execution}, series = {Datenbanksysteme f{\"u}r Business, Technologie und Web - Workshopband (BTW 2025)}, booktitle = {Datenbanksysteme f{\"u}r Business, Technologie und Web - Workshopband (BTW 2025)}, publisher = {Gesellschaft f{\"u}r Informatik}, address = {Bonn}, doi = {10.18420/BTW2025-128}, pages = {257 -- 263}, abstract = {When working with today's relational databases, there is usually a clear boundary between the database server and the application, that interfaces with the database system using the query language SQL. The concept of stored procedures allows to move complex parts of the business logic into the database server for various reasons, as, for instance, to reduce the latency of ELT processes that involve several database queries building on each other like distributing records into tables according to their attribute values. Creating and maintaining such stored procedures can be a challenging task, however. The idea pursued in this paper is to create a programming language, as well as a compilation and execution environment that allows the user to mark parts of the application code for being automatically compiled to and later be executed as a stored procedure in the database instead of the execution environment of the actual application. This blurs the border between database and application and provides a natural and maintenance-friendly way for offloading latency sensitive parts of the code to the database system.}, language = {en} } @inproceedings{PenzkoferBaumann, author = {Penzkofer, Vinzent and Baumann, Timo}, title = {Evaluating and Fine-Tuning Retrieval-Augmented Language Models to Generate Text With Accurate Citations}, series = {Proceedings of the 20th Conference on Natural Language Processing (KONVENS 2024), September 10-13, 2024, Vienna, Austria}, booktitle = {Proceedings of the 20th Conference on Natural Language Processing (KONVENS 2024), September 10-13, 2024, Vienna, Austria}, publisher = {Association for Computational Linguistics}, organization = {Austrian Research Institute for Artificial Intelligence}, pages = {57 -- 64}, abstract = {Retrieval Augmented Generation (RAG) is becoming an essential tool for easily accessing large amounts of textual information. However, it is often challenging to determine whether the information in a given response originates from the retrieved context, the training, or is a result of hallucination. Our contribution in this area is twofold. Firstly, we demonstrate how existing datasets for information retrieval evaluation can be used to assess the ability of Large Language Models (LLMs) to correctly identify relevantsources. Our findings indicate that there are notable discrepancies in the performance of different current LLMs in this task. Secondly, we utilise the datasets and metrics for citation evaluation to enhance the citation quality of small open-weight LLMs through fine-tuning. We achieve significant performance gains in this task, matching the results of much larger models.}, language = {en} } @inproceedings{BaumannEllerGagarina, author = {Baumann, Timo and Eller, Korbinian and Gagarina, Natalia}, title = {BERT-based Annotation of Oral Texts Elicited via Multilingual Assessment Instrument for Narratives}, series = {Proceedings of the the 6th Workshop on Narrative Understanding (WNU), November 12th to November 16th 2024, Miami, Florida, USA}, booktitle = {Proceedings of the the 6th Workshop on Narrative Understanding (WNU), November 12th to November 16th 2024, Miami, Florida, USA}, editor = {Lal, Yash Kumar and Clark, Elizabeth and Iyyer, Mohit and Chaturvedi, Snigdha and Brei, Anneliese and Brahman, Faeze and Chandu, Khyathi Raghavi}, publisher = {Association for Computational Linguistics}, address = {Stroudsburg, PA, USA}, doi = {10.18653/v1/2024.wnu-1.16}, pages = {99 -- 104}, abstract = {We investigate how NLP can help annotate the structure and complexity of oral narrative texts elicited via the Multilingual Assessment Instrument for Narratives (MAIN). MAIN is a theory-based tool designed to evaluate the narrative abilities of children who are learning one or more languages from birth or early in their development. It provides a standardized way to measure how well children can comprehend and produce stories across different languages and referential norms for children between 3 and 12 years old. MAIN has been adapted to over ninety languages and is used in over 65 countries. The MAIN analysis focuses on story structure and story complexity which are typically evaluated manually based on scoring sheets. We here investigate the automation of this process using BERT-based classification which already yields promising results.}, language = {en} } @inproceedings{GrafNeubauerFischeretal., author = {Graf, Julian and Neubauer, Katrin and Fischer, Sebastian and Hackenberg, Rudolf}, title = {Architecture of an intelligent Intrusion Detection System for Smart Home}, series = {2020 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops): 2020, Austin, Texas, USA}, booktitle = {2020 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops): 2020, Austin, Texas, USA}, publisher = {IEEE}, isbn = {978-1-7281-4716-1}, doi = {10.1109/PerComWorkshops48775.2020.9156168}, pages = {1 -- 6}, abstract = {Increasing cyber-attacks on Internet of Things (IoT) environments are a growing problem of digitized households worldwide. The purpose of this study is to investigate how an intelligent Intrusion Detection System (iIDS) can provide more security in IoT networks with a novel architecture, combining multiple classical and machine learning approaches. By combining classical security analysis methods and modern concepts of artificial intelligence, we increase the quality of attack detection and can therefore conduct dedicated attack suppression. The architectural image of the iIDS consists of different layers, which in parts achieve self-sufficient results. The results of the different modules are calculated by means of statement variables and evaluation techniques adapted for the individual module elements and subsequently combined by limit value considerations. The architecture image combines approaches for the analysis and processing of IoT network traffic and evaluates it to an aggregated score. From this result it can be determined whether the analyzed data indicates device misuse or attempted break-ins into the network. This study answers the questions whether a connection between classical and modern concepts for monitoring and analyzing IoT network traffic can be implemented meaningfully within a reliable architecture of an iIDS.}, language = {en} } @article{HinterbergerFischerWeberetal., author = {Hinterberger, Lukas and Fischer, Sebastian and Weber, Bernhard and Neubauer, Katrin and Hackenberg, Rudolf}, title = {Extended Definition of the Proposed Open Standard for IoT Device IdentificAtion and RecoGnition (IoTAG)}, series = {International Journal on Advances in Internet Technology}, volume = {13}, journal = {International Journal on Advances in Internet Technology}, number = {3 \& 4}, publisher = {IARIA}, pages = {110 -- 121}, abstract = {Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity. A lot of security issues concern IoT devices and the networks they are integrated. To help getting an overview of an IoT network, the devices and the security, we propose a scoring system to get a good impression of IT security. This system generates single scores for each device, using features like encryption, update behavior, etc. Furthermore, a summarized score for the whole network is calculated, to show the status of the network security in an easy way for the administrator. To enable the scoring system, a precise list of the existing devices and their operating status is necessary. To achieve this, we present an open standard for the IoT Device IdentificAtion and RecoGnition (short IoTAG), which requires that devices report, e.g., their name, an unique ID, the firmware version and the supported encryption. The proposed standard is described in detail and an implementation guideline is given in this paper. Additionally, information about how to realize the serialization, the integrity and the communication with IoTAG.}, language = {en} } @inproceedings{NeubauerFischerHackenberg, author = {Neubauer, Katrin and Fischer, Sebastian and Hackenberg, Rudolf}, title = {Work in Progress: Security Analysis for Safety-critical Systems}, series = {ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC}, booktitle = {ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC}, editor = {Trinitis, Carsten and Pionteck, Thilo}, publisher = {VDE Verlag GmbH}, address = {Berlin}, isbn = {978-3-8007-4957-7}, pages = {101 -- 106}, abstract = {Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. Currently in Germany, the SG is under construction. In order to use future innovative services, SG and IoT must be combined. For this, we connect the SG Infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). Open research question in this context are the security requirements architecture SG and IoT and the mechanism for authentication and authorisation in future application (SG and IoT). Due to the increasing networking of the systems (SG and IoT) new threats and attack vectors arise. The attacks to the architecture influence the target of authenticity, security and privacy. For the security analysis we focus on two communication points: the communication between the smart meter gateway, and the IoT device. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. With this two connections, new threats emerge. A security analysis over all the connections, including the vulnerability and the ability of an attacker, is developed in this paper. The analysis shows us challenges of the communication between IoT and SG. For this, we defined technical and organizational requirements for authentication and authorization. Current authentication and authorization mechanisms are no longer sufficient for the defined requirements. We present the Role-based trust model for Safety-critical Systems for these defined requirements. The new trust model is integrated into a role-based access control model. It defines data classes, which separate the sensitive and non-sensitive information.}, language = {en} } @inproceedings{GoertzFischerHackenberg, author = {G{\"o}rtz, Stefan and Fischer, Sebastian and Hackenberg, Rudolf}, title = {Generation of Distributed Denial of Service Network Data with Phyton and Scapy}, series = {CLOUD COMPUTING 2023 : The Fourteenth International Conference on Cloud Computing, GRIDs, and Virtualization, June 26 - 30, 2023, Nice, France}, booktitle = {CLOUD COMPUTING 2023 : The Fourteenth International Conference on Cloud Computing, GRIDs, and Virtualization, June 26 - 30, 2023, Nice, France}, publisher = {IARIA}, isbn = {978-1-68558-044-5}, pages = {8 -- 14}, abstract = {Distributed Denial of Service attacks are among the most common and widespread network attacks. Due to their nature, they are difficult to defend. Intrusion detection systems, based on machine learning, are a promising approach to counter this threat. But to train these systems, data sets with Distributed Denial of Service attacks are needed. An implemented Python program, which creates Denial of Services packets and simulates distributed sending by multithreading, is presented. Unlike synthetically generated data with the use of simulators, real network traffic is generated. This eliminates errors and offers a better basis of data, as machine learning algorithms need data that is as error-free as possible in order to learn efficiently.}, language = {en} } @inproceedings{VoglWeberGrafetal., author = {Vogl, Peter and Weber, Sergei and Graf, Julian and Neubauer, Katrin and Hackenberg, Rudolf}, title = {Design and Implementation of an Intelligent and Model-based Intrusion Detection System for Iot Networks}, series = {Cloud Computing 2022: The Thirteenth International Conference on Cloud Computing, GRIDs, and Virtualization, Special Track FAST-CSP, Barcelona, Spain, 24.-28.04.2022}, booktitle = {Cloud Computing 2022: The Thirteenth International Conference on Cloud Computing, GRIDs, and Virtualization, Special Track FAST-CSP, Barcelona, Spain, 24.-28.04.2022}, publisher = {IARIA}, address = {[Wilmington, DE, USA]}, isbn = {978-1-61208-948-5}, pages = {7 -- 12}, abstract = {The ongoing digitization and digitalization entails the increasing risk of privacy breaches through cyber attacks. Internet of Things (IoT) environments often contain devices monitoring sensitive data such as vital signs, movement or surveil-lance data. Unfortunately, many of these devices provide limited security features. The purpose of this paper is to investigate how artificial intelligence and static analysis can be implemented in practice-oriented intelligent Intrusion Detection Systems to monitor IoT networks. In addition, the question of how static and dynamic methods can be developed and combined to improve net-work attack detection is discussed. The implementation concept is based on a layer-based architecture with a modular deployment of classical security analysis and modern artificial intelligent methods. To extract important features from the IoT network data a time-based approach has been developed. Combined with network metadata these features enhance the performance of the artificial intelligence driven anomaly detection and attack classification. The paper demonstrates that artificial intelligence and static analysis methods can be combined in an intelligent Intrusion Detection System to improve the security of IoT environments.}, language = {en} } @inproceedings{HinterbergerWeberFischeretal., author = {Hinterberger, Lukas and Weber, Bernhard and Fischer, Sebastian and Neubauer, Katrin and Hackenberg, Rudolf}, title = {IoT Device IdentificAtion and RecoGnition (IoTAG)}, series = {CLOUD COMPUTING 2020, The Eleventh International Conference on Cloud Computing, GRIDs and Virtualization}, booktitle = {CLOUD COMPUTING 2020, The Eleventh International Conference on Cloud Computing, GRIDs and Virtualization}, publisher = {IARIA}, isbn = {978-1-61208-778-8}, pages = {17 -- 23}, abstract = {To ensure the secure operation of IoT devices in the future, they must be continuously monitored. This starts with an inventory of the devices, checking for a current software version and extends to the encryption algorithms and active services used. Based on this information, a security analysis and rating of the whole network is possible. To solve this challenge in the growing network environments, we present a proposal for a standard. With the IoT Device IdentificAtion and RecoGnition (IoTAG), each IoT device reports its current status to a central location as required and provides information on security. This information includes a unique ID, the exact device name, the current software version, active services, cryptographic methods used, etc. The information is signed to make misuse more difficult and to ensure that the device can always be uniquely identified. In this paper, we introduce IoTAG in detail and describe the necessary requirements.}, language = {en} } @misc{OPUS4-5928, title = {SIMUL 2022 : the Fourteenth International Conference on Advances in System Simulation : October 16-20, 2022, Lisbon, Portugal}, editor = {Herrmann, Frank}, publisher = {IARIA}, isbn = {978-1-68558-001-8}, pages = {77}, language = {de} } @article{FuxenSchoenhaerlSchmidtetal., author = {Fuxen, Philipp and Sch{\"o}nh{\"a}rl, Stefan and Schmidt, Jonas and Gerstner, Mathias and Jahn, Sabrina and Graf, Julian and Hackenberg, Rudolf and Mottok, J{\"u}rgen}, title = {A Cybersecurity Education Platform for Automotive Penetration Testing}, series = {International Journal On Advances in Security}, volume = {15}, journal = {International Journal On Advances in Security}, number = {3\&4}, publisher = {IARIA}, issn = {1942-2636}, pages = {106 -- 118}, abstract = {The paper presents a penetration testing framework for automotive IT security education and evaluates its realization. The automotive sector is changing due to automated driving functions, connected vehicles, and electric vehicles. This development also creates new and more critical vulnerabilities. This paper addresses a possible countermeasure, automotive IT security education. Some existing solutions are evaluated and compared with the created Automotive Penetration Testing Education Platform (APTEP) framework. In addition, the APTEP architecture is described. It consists of three layers representing different attack points of a vehicle. The realization of the APTEP is a hardware case and a virtual platform referred to as the Automotive Network Security Case (ANSKo). The hardware case contains emulated control units and different communication protocols. The virtual platform uses Docker containers to provide a similar experience over the internet. Both offer two kinds of challenges. The first introduces users to a specific interface, while the second combines multiple interfaces, to a complex and realistic challenge. This concept is based on modern didactic theories, such as constructivism and problem-based/challenge-based learning. Computer Science students from the Ostbayerische Technische Hochschule (OTH) Regensburg experienced the challenges as part of a elective subject. In an online survey evaluated in this paper, they gave positive feedback. Also, a part of the evaluation is the mapping of the ANSKo and the maturity levels in the Software Assurance Maturity Model (SAMM) practice Education \& Guidance as well as the SAMM practice Security Testing. The scientific contribution of this paper is to present an APTEP, a corresponding learning concept and an evaluation method.}, language = {en} } @inproceedings{WeberHinterbergerFischeretal., author = {Weber, Bernhard and Hinterberger, Lukas and Fischer, Sebastian and Hackenberg, Rudolf}, title = {How to Prevent Misuse of IoTAG?}, series = {Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal}, booktitle = {Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal}, editor = {Duncan, Bob and Lee, Yong Woo and Popescu, Manuela}, publisher = {IARIA}, address = {Wilmington, DE, USA}, isbn = {978-1-61208-845-7}, issn = {2308-4294}, abstract = {Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.}, language = {en} } @inproceedings{StadlerCornetMazeasetal., author = {Stadler, Sebastian and Cornet, Henriette and Mazeas, Damien and Chardonnet, Jean-Remy and Frenkler, Fritz}, title = {IMPRO: IMMERSIVE PROTOTYPING IN VIRTUAL ENVIRONMENTS FOR INDUSTRIAL DESIGNERS}, series = {Proceedings of the Design Society: DESIGN Conference 2020}, booktitle = {Proceedings of the Design Society: DESIGN Conference 2020}, publisher = {Cambridge University Press}, doi = {10.1017/dsd.2020.81}, pages = {1375 -- 1384}, abstract = {Computer-Aided Design (CAD) constitutes an important tool for industrial designers. Similarly, Virtual Reality (VR) has the capability to revolutionize how designers work with its increased sense of scale and perspective. However, existing VR CAD applications are limited in terms of functionality and intuitive control. Based on a comparison of VR CAD applications, ImPro, a new application for immersive prototyping for industrial designers was developed. The user evaluations and comparisons show that ImPro offers increased usability, functionality, and suitability for industrial designers.}, language = {de} }