@inproceedings{BraunMottokMiedletal., author = {Braun, J{\"u}rgen and Mottok, J{\"u}rgen and Miedl, Christian and Geyer, Dirk and Minas, Mark}, title = {Increasing the reliability of single and multicore systems with software rejuvenation and coded processing}, series = {Automotive Safety \& Security 2012, Sicherheit und Zuverl{\"a}ssigkeit f{\"u}r automobile Informationstechnik, 14.-15. Nov. 2012, Karlsruhe}, booktitle = {Automotive Safety \& Security 2012, Sicherheit und Zuverl{\"a}ssigkeit f{\"u}r automobile Informationstechnik, 14.-15. Nov. 2012, Karlsruhe}, pages = {163 -- 178}, abstract = {The safety of electric vehicles has the highest priority because it helps contribute to customer confidence and thereby ensures further growth of the electromobility market. Therefore in series production redundant hardware concepts like dual core microcontrollers running in lock-step-mode are used to reach ASIL D safety requirements given from the ISO 26262. Coded processing is capable of reducing redundancy in hardware by adding diverse redundancy in software, e.g. by specific coding of data and instructions. A system with two coded processing channels is considered. One channel is active and one is in cold standby. When the active channel fails, the service is switched from the active channel to the standby channel. It is imaginable that the two channels with implemented coded processing are running with time redundancy on a single core or on a multi core system where for example different ASIL levels are partitioned on different cores. In this paper a redundant concept based on coded processing and software rejuvenation will be taken into account.}, language = {en} } @inproceedings{KraemerRaabMottok, author = {Kr{\"a}mer, Stefan and Raab, Peter and Mottok, J{\"u}rgen}, title = {Simulationsbasierte Reliability-Analyse - Einfl{\"u}sse von zuf{\"a}lligen Fehlern auf das Echtzeit-Scheduling}, series = {Tagungsband 5th Embedded Software Engineering Kongress, 3. bis 7. Dezember 2012, Sindelfingen}, booktitle = {Tagungsband 5th Embedded Software Engineering Kongress, 3. bis 7. Dezember 2012, Sindelfingen}, pages = {613 -- 622}, language = {de} } @inproceedings{AlfransederMottok, author = {Alfranseder, Martin and Mottok, J{\"u}rgen}, title = {Kommunikationsmechanismen f{\"u}r sicherheitskritische multi-core Echtzeit-Systeme}, series = {5th Automotive Summerschool, Regensburg, September 2012}, booktitle = {5th Automotive Summerschool, Regensburg, September 2012}, language = {de} } @techreport{PfallerMottok, type = {Working Paper}, author = {Pfaller, M. and Mottok, J{\"u}rgen}, title = {Developing the e-learning class 'practical training in c'}, language = {en} } @article{FrommeldHaugCurrleetal., author = {Frommeld, Debora and Haug, Sonja and Currle, Edda and Weber, Karsten}, title = {Telepr{\"a}senzroboter in der Schlaganfallrehabilitation. Bericht {\"u}ber eine empirische Studie zu Robotern in Pflege und Therapie}, series = {CAREkonkret}, volume = {25}, journal = {CAREkonkret}, number = {19}, publisher = {Vincentz}, address = {Hannover}, pages = {5 -- 5}, abstract = {Die Studie untersucht, wie Telepr{\"a}senzroboter nach einem Schlaganfall die Rehabilitation unterst{\"u}tzen k{\"o}nnen.}, language = {de} } @inproceedings{AltenbuchnerMueckeHaug, author = {Altenbuchner, Amelie and M{\"u}cke, Vanessa and Haug, Sonja}, title = {Comparing monitoring results of two motion trackers for geriatric patients}, series = {dHealth 2020: biomedical informatics for health and care, proceedings of the 14th Health Informatics Meets Digital Health Conference}, booktitle = {dHealth 2020: biomedical informatics for health and care, proceedings of the 14th Health Informatics Meets Digital Health Conference}, editor = {Schreier, G{\"u}nter}, publisher = {IOS Press}, address = {Amsterdam}, isbn = {978-1-64368-085-9}, doi = {10.3233/SHTI200078}, pages = {77 -- 84}, abstract = {Background: Fitbit and Garmin motion tracker devices are highly used in research. The validity and reliability of these devices is proven for healthy adults between 18 and 64. Objectives: Comparing data output of two devices. Methods: Observational case study on a test track and in the domestic environment of a 80- year-old female multimorbide geriatric patient. Results: High significant correlation of the devices on the test track [r=.776, p≤.001, Bca-CI-95\% (.618;.874), N=33], but significant different in the domestic environment over time (z=4.840, p≤.001). Conclusion: The dominant/non-dominant body side and further sources of error may play a role in monitoring steps with these devices.}, language = {en} } @incollection{Weber, author = {Weber, Karsten}, title = {Technik in der Pflege: Bestandsaufnahme, Entwicklungsm{\"o}glichkeiten und normative Bewertung}, series = {Neue Technologien f{\"u}r die Pflege ; grundlegende Reflexionen und pragmatische Befunde}, booktitle = {Neue Technologien f{\"u}r die Pflege ; grundlegende Reflexionen und pragmatische Befunde}, number = {174}, editor = {H{\"u}lsken-Gießler, M. and Kreutzer, Susanne and D{\"u}tthorn, Nadin}, publisher = {Vandenhoeck \& Ruprecht}, address = {G{\"o}ttingen}, isbn = {978-3-7370-1202-7}, doi = {10.14220/9783737012027.153}, language = {de} } @inproceedings{WeberHaugSchlegletal., author = {Weber, Karsten and Haug, Sonja and Schlegl, Thomas and Pohlt, Clemens and H{\"o}cherl, Johannes}, title = {Kollaborative Robotik als Beispiel der Mensch-Maschine-Interaktion}, series = {Tagung Technikfolgenabsch{\"a}tzung, 19.06.2017, Akademie der Wissenschaften Wien}, booktitle = {Tagung Technikfolgenabsch{\"a}tzung, 19.06.2017, Akademie der Wissenschaften Wien}, language = {de} } @article{SonarWeber, author = {Sonar, Arne and Weber, Karsten}, title = {KI gestern und heute : Einsichten aus der Fr{\"u}hgeschichte der KI f{\"u}r aktuelle ethische {\"U}berlegungen zum Einsatz von KI in der Medizin}, series = {Arbeit}, volume = {29}, journal = {Arbeit}, number = {2}, doi = {10.1515/arbeit-2020-0009}, pages = {105 -- 122}, abstract = {Der Einzug K{\"u}nstlicher Intelligenz (KI) in die Medizin scheint angesichts der Nutzenpotenziale unvermeidlich. Durch den Agentencharakter KI-basierter Systeme ergeben sich teils neuartige normative An- und Herausforderungen. F{\"u}r den hochgradig sensiblen Anwendungsbereich der Medizin erscheint es daher notwendig, den KI-Einsatz mit ethischen Leitlinien einzuhegen. Dies wirft die Frage auf, auf welche Erfahrungsbasis eine ethische Fundierung des Einsatzes KI-basierter Technik gestellt werden k{\"o}nnte. Damit ist kein Schluss vom Sein auf das Sollen gemeint, sondern die Ber{\"u}cksichtigung bereits gef{\"u}hrter normativer Debatten. Eine M{\"o}glichkeit, sich der normativen Landschaft der KI anzun{\"a}hern, liegt in der Auseinandersetzung mit der Entwicklungsgeschichte der KI und den damit verbundenen Debatten um ethische und soziale Aspekte. Mit diesem explorativen Ansatz k{\"o}nnen relevante Problemfelder identifiziert, vorl{\"a}ufige Gestaltungs- und Einsatzempfehlungen f{\"u}r KI-Systeme in der Praxis formuliert und Vorschl{\"a}ge zu deren Einbettung in existierende Organisationsstrukturen generiert werden.}, language = {de} } @inproceedings{StoerlMuellerTekleabetal., author = {St{\"o}rl, Uta and M{\"u}ller, Daniel and Tekleab, Alexander and Tolale, Stephane and Stenzel, Julian and Klettke, Meike and Scherzinger, Stefanie and Storl, Uta and Muller, Daniel}, title = {Curating Variational Data in Application Development}, series = {2018 IEEE 34th International Conference on Data Engineering, 16-19 April 2018, Paris, France}, booktitle = {2018 IEEE 34th International Conference on Data Engineering, 16-19 April 2018, Paris, France}, publisher = {IEEE}, doi = {10.1109/ICDE.2018.00187}, pages = {1605 -- 1608}, abstract = {Building applications for processing data lakes is a software engineering challenge. We present Darwin, a middleware for applications that operate on variational data. This concerns data with heterogeneous structure, usually stored within a schema-flexible NoSQL database. Darwin assists application developers in essential data and schema curation tasks: Upon request, Darwin extracts a schema description, discovers the history of schema versions, and proposes mappings between these versions. Users of Darwin may interactively choose which mappings are most realistic. Darwin is further capable of rewriting queries at runtime, to ensure that queries also comply with legacy data. Alternatively, Darwin can migrate legacy data to reduce the structural heterogeneity. Using Darwin, developers may thus evolve their data in sync with their code. In our hands-on demo, we curate synthetic as well as real-life datasets.}, language = {en} } @inproceedings{MauererScherzinger, author = {Mauerer, Wolfgang and Scherzinger, Stefanie}, title = {Nullius in Verba: Reproducibility for Database Systems Research, Revisited}, series = {2021 IEEE 37th International Conference on Data Engineering (ICDE 2021): 19-22 April 2021, Chania, Greece}, booktitle = {2021 IEEE 37th International Conference on Data Engineering (ICDE 2021): 19-22 April 2021, Chania, Greece}, editor = {Ailamaki, Anastasia}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-7281-9184-3}, doi = {10.1109/ICDE51399.2021.00270}, pages = {2377 -- 2380}, abstract = {Over the last decade, reproducibility of experimental results has been a prime focus in database systems research, and many high-profile conferences award results that can be independently verified. Since database systems research involves complex software stacks that non-trivially interact with hardware, sharing experimental setups is anything but trivial: Building a working reproduction package goes far beyond providing a DOI to some repository hosting data, code, and setup instructions.This tutorial revisits reproducible engineering in the face of state-of-the-art technology, and best practices gained in other computer science research communities. In particular, in the hands-on part, we demonstrate how to package entire system software stacks for dissemination. To ascertain long-term reproducibility over decades (or ideally, forever), we discuss why relying on open source technologies massively employed in industry has essential advantages over approaches crafted specifically for research. Supplementary material shows how version control systems that allow for non-linearly rewriting recorded history can document the structured genesis behind experimental setups in a way that is substantially easier to understand, without involvement of the original authors, compared to detour-ridden, strictly historic evolution.}, language = {en} } @inproceedings{WinterDuennweber, author = {Winter, Christoph and D{\"u}nnweber, Jan}, title = {Model-Driven Development of GPU Applications}, series = {Parallel Computing: On the Road to Exascale}, booktitle = {Parallel Computing: On the Road to Exascale}, publisher = {IOS Press}, address = {Amsterdam, Netherlands}, isbn = {978-1-61499-621-7}, doi = {10.3233/978-1-61499-621-7-227}, pages = {227 -- 236}, abstract = {Programming GPUs with low-level libraries like CUDA and OpenCL is a tedious and error-prone task. Fortunately, algorithmic skeletons can shield developers from the complexity of parallel programming by encapsulating common parallel computing patterns. However, this simplification typically constrains programmers to write their applications using the GPU library employed by the skeleton implementation. In this work, we combine skeletal programming with modeldriven software development (MDSD) to increase the freedom of choice regarding the employed GPU library instead of leaving all technical decisions to the skeleton implementation. We present a code-generator that transforms models comprising skeletons, their input data and input functions to parallel C++ code while taking care of data-offset calculations. The generator has been tested using different GPU and multi-GPU communication libraries such as Thrust and CUDA-MPI. We demonstrate our novel approach to GPU programming with two example applications: affinity propagation and n-body simulation.}, language = {en} } @inproceedings{RudolphVogetMottok, author = {Rudolph, Alexander and Voget, Stefan and Mottok, J{\"u}rgen}, title = {A consistent safety case argumentation for artificial intelligence in safety related automotive systems - An Evaluation of a New Conceptual Functional Safety Approach}, series = {Embedded Real-Time Software and Systems Conference (ERST²), Jan 2018, Toulouse/France}, booktitle = {Embedded Real-Time Software and Systems Conference (ERST²), Jan 2018, Toulouse/France}, abstract = {Regarding the actual automotive safety norms the use of artificial intelligence (AI) in safety critical environments like autonomous driving is not possible. This paper introduces a new conceptual safety modelling approach and a safety argumentation to certify AI algorithms in a safety related context. Therefore, a model of an AI-system is presented first. Afterwards, methods and safety argumentation are applied to the model, whereas it is limited to a specific subset of AI-systems, i.e. off-board learning deterministic neural networks in this case. Other cases are left over for future research. The result is a consistent safety analysis approach that applies state of the art safety argumentations from other domains to the automotive domain. This will enforce the adaptation of the functional safety norm ISO26262 to enable general AI methods in safety critical systems in future.}, language = {en} } @article{Linner, author = {Linner, Thomas}, title = {Special issue ISARC 2021}, series = {Construction Robotics}, volume = {Vol. 6}, journal = {Construction Robotics}, number = {Issue 2}, editor = {Linner, Thomas}, publisher = {Springer Nature}, doi = {10.1007/s41693-022-00079-y}, pages = {58 -- 68}, abstract = {The research filed of construction robotics broadens increasingly in terms of complexity, approaches, technologies used, active stakeholders, and application areas. Worldwide labour and resource shortages, the need to increase circularity and resource efficiency, new materials and the increasing utilisation of digital construction tools in the planning and construction industry massively spur the uptake of robotic solutions for on-site construction. The initial boom of construction robots happened in the 1970s, driven by the Japanese construction industry. In the 1980s, a combination with parallel developments was supposed to achieve complete, integrated robotic on-site factories. From the mid-1980s onwards, the global interest in construction robots decreased gradually. Bulky and expensive systems, complex on-site navigation and logistics approaches, a narrow scope of tasks, inflexibility, incompatibility with on-site work organisation and professional qualification, low usability and insufficient inter-robot coordination capabilities revealed the immaturity of the systems. Only a few organisations predominantly situated in Asia such as Takenaka, Obayashi, Kajima Corporation, Nihon Bisho Co., Samsung, and Hitachi maintained development activities. However, since the mid-2010s, development activities are gaining traction again. On the application side, this is mainly driven by trends such as the need to upgrade the energy performance of buildings in Europe, a global necessity to remove asbestos from existing structures, and a demand for enormous quantities of high-rise buildings all over East Asia. On the system side, the renewed interest stems from major advances in physical-mechanical robot technology in other automation-driven industries such as the automotive industry. Robots became lighter, more flexible, their parts modular and interchangeable, more user friendly as well as significantly cheaper. On the digital side, the BIM-to-Robot pipeline was subject of intensive reserach and development. More and more methods and tools help to increase the usability of robots and facilitate the simulation and optimisation of robot-driven construction processes. In the last 4-5 years, the worldwide growing need and interest in construction robotics became highly evident. More than 200 robot systems are pushed by start-ups and spin-offs and their investors to the market. This is backed by an enormous number of activities and projects carried out in the academic area pushing to the boundaries of what is technologically possible. Major associations and their conferences increase significantly in popularity such as ISARC (International Association for Automation and Robotics in Construction), EC3 (European Council of Computing in Construction), and Robots in Architecture. Competency in digital construction, automation and robotics becomes a key for all stakeholders in the construction industry and many universities worldwide launch dedicated interdisciplinary programs. Powerful governments (China) and major funding programs such as Horizon Europe (Europe) massively request and fund the development of robotic solutions for construction such as drones, mobile robots, 3D-printing solutions, cable-driven robots, and exoskeletons. Regulators and standardisation organisation start to develop the first certification and standardisation schemes for construction robots and large software companies make attempts to allow to simulate and program robotic construction processes efficiently and robustly based on digital building and construction data. To showcase the diversity of cutting-edge research in the area, this special issue invited eight extended versions of selected papers from the ISARC 2021 conference. As such, this issue covers digital approaches to embed fabrication and robot information in BIM and IFC and program robots directly from digital building models. New robot systems spur novel robotic production processes, and machine learning enable novel logistics approaches for building components that may ultimately lead to robotic cranes and other robotic on-site logistics and handling solutions (including autonomous construction machines). In parallel, systematic evaluation and robot development methods are developed that allow to shed light on their performance in the construction process.}, language = {en} } @article{NgHallSchmailzletal., author = {Ng, Ming Shan and Hall, Daniel and Schmailzl, Marc and Linner, Thomas and Bock, Thomas}, title = {Identifying enabler and relational ontology networks in design for digital fabrication}, series = {Automation in construction}, volume = {144}, journal = {Automation in construction}, number = {December}, publisher = {Elsevier}, doi = {10.1016/j.autcon.2022.104592}, pages = {1 -- 20}, abstract = {As use of digital fabrication increases in architecture, engineering and construction, the industry seeks appropriate management and processes to enable the adoption during the design/planning phase. Many enablers have been identified across various studies; however, a comprehensive synthesis defining the enablers of design for digital fabrication does not yet exist. This work conducts a systematic literature review of 59 journal articles published in the past decade and identifies 140 enablers under eight categories: actors, resources, conditions, attributes, processes, artefacts, values and risks. The enablers' frequency network is illustrated using an adjacency matrix. Through the lens of actor-network theory, the work creates a relational ontology to demonstrate the linkages between different enablers. Three examples are presented using onion diagrams: circular construction focus, business model focus and digital twin in industrialisation focus. Finally, this work discusses the intersection of relational ontology with process modelling to design future digital fabrication work routines.}, language = {en} } @article{GroegerHautmannLoescheletal., author = {Gr{\"o}ger, Christian and Hautmann, Matthias G. and L{\"o}schel, Rainer and Repp, Natalia and K{\"o}lbl, Oliver and Dobler, Barbara}, title = {Re-irradiation of spinal column metastases by IMRT: Impact of setup errors on the dose distribution}, series = {Radiation Oncology}, volume = {8}, journal = {Radiation Oncology}, number = {269}, publisher = {BMC, Part of Springer Nature}, doi = {10.1186/1748-717X-8-269}, abstract = {Background This study investigates the impact of an automated image guided patient setup correction on the dose distribution for ten patients with in-field IMRT re-irradiation of vertebral metastases. Methods 10 patients with spinal column metastases who had previously been treated with 3D-conformal radiotherapy (3D-CRT) were simulated to have an in-field recurrence. IMRT plans were generated for treatment of the vertebrae sparing the spinal cord. The dose distributions were compared for a patient setup based on skin marks only and a Cone Beam CT (CBCT) based setup with translational and rotational couch corrections using an automatic robotic image guided couch top (Elekta - HexaPOD™ IGuide® - system). The biological equivalent dose (BED) was calculated to evaluate and rank the effects of the automatic setup correction for the dose distribution of CTV and spinal cord. Results The mean absolute value (± standard deviation) over all patients and fractions of the translational error is 6.1 mm (±4 mm) and 2.7° (±1.1 mm) for the rotational error. The dose coverage of the 95\% isodose for the CTV is considerable decreased for the uncorrected table setup. This is associated with an increasing of the spinal cord dose above the tolerance dose. Conclusions An automatic image guided table correction ensures the delivery of accurate dose distribution and reduces the risk of radiation induced myelopathy.}, language = {en} } @inproceedings{SelgradLierDoerntleinetal., author = {Selgrad, Kai and Lier, Alexander and D{\"o}rntlein, Jan and Reiche, Oliver and Stamminger, Marc}, title = {A High-Performance Image Processing DSL for Heterogeneous Architectures}, series = {Proceedings of the 9th European Lisp Symposium (ELS 2016), Krakow, Poland}, booktitle = {Proceedings of the 9th European Lisp Symposium (ELS 2016), Krakow, Poland}, editor = {Durand, Ir{\`e}ne}, publisher = {ACM}, address = {New York, NY, USA}, isbn = {978-2-9557474-0-7}, pages = {39 -- 46}, abstract = {Over the last decade a number of high performance, domain-specific languages (DSLs) have started to grow and help tackle the problem of ever diversifying hard- and software employed in fields such as HPC (high performance computing), medical imaging, computer vision etc. Most of those approaches rely on frameworks such as LLVM for efficient code generation and, to reach a broader audience, take input in C-like form. In this paper we present a DSL for image processing that is on-par with competing methods, yet its design principles are in strong contrast to previous approaches. Our tool chain is much simpler, easing the burden on implementors and maintainers, while our output, C-family code, is both adaptable and shows high performance. We believe that our methodology provides a faster evaluation of language features and abstractions in the domains above.}, language = {en} } @inproceedings{MuchaMottokDeubzer, author = {Mucha, Matthias and Mottok, J{\"u}rgen and Deubzer, Michael}, title = {Probabilistic worst case response time estimation for multi-core real-time systems}, series = {2015 4th Mediterranean Conference on Embedded Computing (MECO), 14-18 June 2015, Budva, Montenegro}, booktitle = {2015 4th Mediterranean Conference on Embedded Computing (MECO), 14-18 June 2015, Budva, Montenegro}, pages = {31 -- 36}, abstract = {Traditional methods rely on Static Timing Analysis techniques to compute the Worst Case Response Time for tasks in real-time systems. Multi-Core real-time systems are faced up with concurrent task executions, semaphore accesses, and task migrations where it may be difficult to obtain the worst case upper bound. A new three staged probabilistic estimation concept is presented. Worst Case Response Times are estimated for tasksets which consist of tasks with multiple time bases. The concept involves data generation with sample classification and sample size equalization, model fit and Worst Case Response Time estimation on the basis of extreme value distribution models. A Generalized Pareto Distribution model fit method which includes threshold detection and parameter estimation is also presented. Sample classification in combination with the new Generalized Pareto Distribution model fit method allows to estimate Worst Case Response Times with low pessimism ranges compared to estimation methods that uses the Generalized Pareto or the Gumbel max distribution without sample classification.}, language = {en} } @inproceedings{KlettkeAwolinStoerletal., author = {Klettke, Meike and Awolin, Hannes and St{\"o}rl, Uta and M{\"u}ller, Daniel and Scherzinger, Stefanie and Storl, Uta and Muller, Daniel}, title = {Uncovering the evolution history of data lakes}, series = {2017 IEEE International Conference on Big Data (Big Data),,11-14 Dec. 2017, Boston, MA, USA}, booktitle = {2017 IEEE International Conference on Big Data (Big Data),,11-14 Dec. 2017, Boston, MA, USA}, publisher = {IEEE}, doi = {10.1109/BigData.2017.8258204}, pages = {2462 -- 2471}, abstract = {Data accumulating in data lakes can become inaccessible in the long run when its semantics are not available. The heterogeneity of data formats and the sheer volumes of data collections prohibit cleaning and unifying the data manually. Thus, tools for automated data lake analysis are of great interest. In this paper, we target the particular problem of reconstructing the schema evolution history from data lakes. Knowing how the data is structured, and how this structure has evolved over time, enables programmatic access to the lake. By deriving a sequence of schema versions, rather than a single schema, we take into account structural changes over time. Moreover, we address the challenge of detecting inclusion dependencies. This is a prerequisite for mapping between succeeding schema versions, and in particular, detecting nontrivial changes such as a property having been moved or copied. We evaluate our approach for detecting inclusion dependencies using the MovieLens dataset, as well an adaption of a dataset containing botanical descriptions, to cover specific edge cases.}, language = {en} } @inproceedings{HerboldReindlMeieretal., author = {Herbold, Florian and Reindl, Andrea and Meier, Hans and Niemetz, Michael and Kr{\"a}mer, Stefan}, title = {Secure Software Updates: Challenges and Solutions for Embedded IoT Systems}, series = {Proceedings of the 9th Embedded Systems Workshop: July 1-3, 2021 Horomerice, Czech Republic}, booktitle = {Proceedings of the 9th Embedded Systems Workshop: July 1-3, 2021 Horomerice, Czech Republic}, editor = {Kub{\´a}tov{\´a}, Hana and Fišer, Petr and Boreck{\´y}, Jaroslav}, isbn = {978-80-01-06858-8}, pages = {5 -- 13}, abstract = {The invention of the internet made the development of intelligent networking of millions of embedded systems possible. This enabled smart buildings, power grids and cities as well as applications in the fields of health, agriculture and industry. These systems frequently perform safety-critical applications and operations. This makes it urgent to protect these sensible systems as effectively as possible. Especially firmware updates are often the weak point in the systems. If unauthorised persons gain access to the system during the update, malware can be injected or sensitive data can be read and stolen. This paper describes the challenges of secure firmware updates. To protect an embedded system from potential attackers, the concepts integrity, authenticity and confidentiality have to be adhered during the update process. Otherwise, there is an increased risk of modifying or reverse engineering the firmware image. Likewise, inadequately protected software can enable the installation of third-party firmware as well as the installation of firmware on a third-party system. Threat prevention is presented with solutions derived from functional safety and IT security. Aspects of protection against errors in the transmission of updates and against attacks aiming to compromise the system are explained. Finally, a possible sequence of a secure update process is examined in detail for a real embedded system implementation. For this purpose, the preparation, transmission and installation of a firmware update in the bootloader are discussed}, language = {en} }