@misc{Raptis, author = {Raptis, Georgios}, title = {Vernetzung und ubiquit{\"a}re Informationsverarbeitung - technisch-organisatorischer Datenschutz in der Arztpraxis}, series = {2. Fachtagung der Gesellschaft f{\"u}r Datenschutz und Datensicherheit e.V. (GDD), Berlin, 13.05.2014, zertifiziert von der {\"A}rztekammer Berlin}, journal = {2. Fachtagung der Gesellschaft f{\"u}r Datenschutz und Datensicherheit e.V. (GDD), Berlin, 13.05.2014, zertifiziert von der {\"A}rztekammer Berlin}, subject = {Arztpraxis}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Sichere Gesundheitsdaten in der Cloud? Technische Voraussetzungen und Regelungen}, series = {8. Rhein-Main Zukunftskongress Krankenhaus \& Partner 2014, Offenbach, 21.2.2014}, journal = {8. Rhein-Main Zukunftskongress Krankenhaus \& Partner 2014, Offenbach, 21.2.2014}, subject = {Cloud Computing}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Datenschutz und IT-Sicherheit: Empfehlungen von B{\"A}K und KBV f{\"u}r {\"A}rzte}, series = {AK-Sicherheit des eco-Verband der deutschen Internetwirtschaft e.V., K{\"o}ln, 06.05.2009}, journal = {AK-Sicherheit des eco-Verband der deutschen Internetwirtschaft e.V., K{\"o}ln, 06.05.2009}, subject = {Arztpraxis}, language = {de} } @inproceedings{Raptis, author = {Raptis, Georgios}, title = {Empfehlungen der B{\"A}K zum Datenschutz im Praxisalltag, Darstellung unter technischen Aspekten}, series = {conhIT 2009, Berlin, 22.04.2009}, booktitle = {conhIT 2009, Berlin, 22.04.2009}, subject = {Arztpraxis}, language = {de} } @article{Raptis, author = {Raptis, Georgios}, title = {App statt Arzt ist kein gutes Motto}, series = {medizin \& technik}, journal = {medizin \& technik}, number = {2}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Papierlose Praxis \& Digitalisierung}, series = {6. BMVZ-Praktikerkongress des Bundesverbands Medizinische Versorgungszentren - Gesundheitszentren - Integrierte Versorgung e.V, 12.09.2012 Berlin, zertifiziert von der {\"A}rztekammer Berlin}, journal = {6. BMVZ-Praktikerkongress des Bundesverbands Medizinische Versorgungszentren - Gesundheitszentren - Integrierte Versorgung e.V, 12.09.2012 Berlin, zertifiziert von der {\"A}rztekammer Berlin}, subject = {Arztpraxis}, language = {de} } @inproceedings{Raptis, author = {Raptis, Georgios}, title = {Health Professional eIDs vis-{\´a}-vis a Single Market Perspective}, series = {European Health Telematics Association, Berlin, 25.10.2011}, booktitle = {European Health Telematics Association, Berlin, 25.10.2011}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Mobile Szenarien f{\"u}r Anwendungen der eGK}, series = {CAST-Workshop Smartcards, Darmstadt, 25.09.2014}, journal = {CAST-Workshop Smartcards, Darmstadt, 25.09.2014}, subject = {Elektronische Gesundheitskarte}, language = {de} } @inproceedings{RushSchmidRaptis, author = {Rush, Logan and Schmid, Marina and Raptis, Georgios}, title = {Privacy Challenges in Genomic Data: A Scoping Review of Risks, Mitigation Strategies, and Research Gaps.}, series = {Information and Communication Technology: 13th International Symposium, SOICT 2024, Danang, Vietnam, December 13-15, 2024, Proceedings, Part II}, booktitle = {Information and Communication Technology: 13th International Symposium, SOICT 2024, Danang, Vietnam, December 13-15, 2024, Proceedings, Part II}, publisher = {Springer}, address = {Singapore}, doi = {10.1007/978-981-96-4285-4_34}, pages = {416 -- 430}, abstract = {Advances in genomic research have created new privacy challenges. This scoping review analyzes the risks associated with the processing, storage, and sharing of genomic data including epigenetics, and examines current privacy protection strategies. It also attempts to identify research gaps in this area. Using the PRISMA methodology, 37 relevant studies were identified and analyzed. The results of the risk assessment can be grouped into four main themes: Risks posed by processing of functional genomic data, sharing of genomic data, patient (re-)identification, and dividuality, i.e. the extending of privacy risks to blood relatives. The identified risk mitigation strategies were systematically categorized into five classes: pre-release measures, governance, secure data processing and exchange, access restriction and transparency, anonymization and masking. However, there are some important research gaps that still need to be addressed. The current literature neglects to assess the likelihood of potential breaches and tends to focus only on assessing possible scenarios of privacy risks. It also mainly fails to assess the role of contextualized data and the effectiveness of policies and governance systems with respect to privacy risks.}, language = {en} } @article{SteinhauserRaptis, author = {Steinhauser, Stefanie and Raptis, Georgios}, title = {Design propositions for nudging in healthcare: Adoption of national electronic health recordsystems}, series = {Digital Health}, volume = {9}, journal = {Digital Health}, publisher = {Sage}, issn = {2055-2076}, doi = {10.1177/20552076231181208}, pages = {1 -- 12}, abstract = {Objectives: Electronic health records (EHRs) are considered important for improving efficiency and reducing costs of ahealthcare system. However, the adoption of EHR systems differs among countries and so does the way the decision to par-ticipate in EHRs is presented. Nudging is a concept that deals with influencing human behaviour within the research streamof behavioural economics. In this paper, we focus on the effects of the choice architecture on the decision for the adoption ofnational EHRs. Our study aims to link influences on human behaviour through nudging with the adoption of EHRs to inves-tigate how choice architects can facilitate the adoption of national information systems. Methods: We employ a qualitative explorative research design, namely the case study method. Using theoretical sampling,we selected four cases (i.e., countries) for our study: Estonia, Austria, the Netherlands, and Germany. We collected and ana-lyzed data from various primary and secondary sources: ethnographic observation, interviews, scientific papers, homepages,press releases, newspaper articles, technical specifications, publications from governmental bodies, and formal studies. Results: The findings from our European case studies show that designing for EHR adoption should encompass choice archi-tecture elements (i.e., defaults), technical elements (i.e., choice granularity and access transparency), and institutional ele-ments (i.e., regulations for data protection, information campaigns, and financial incentives) in combination. Conclusions: Our findings provide insights on the design of the adoption environments of large-scale, national EHR systems.Future research could estimate the magnitude of effects of the determinants.}, language = {en} } @article{Raptis, author = {Raptis, Georgios}, title = {Technischer Datenschutz in der telemedizinischen Versorgung}, series = {Der Krankenhaus-JUSTITIAR}, volume = {7}, journal = {Der Krankenhaus-JUSTITIAR}, number = {4}, pages = {105 -- 107}, abstract = {Die fortschreitende Digitalisierung des Gesundheitswesens ebnet auch den Weg einer st{\"a}rkeren Verbreitung der telemedizinischen Versorgung in Deutschland. Die Politik erleichtert diesen Weg, z.B. mit dem eHealth-Gesetz oder mit der Lockerung des "Fernbehandlungsverbots" durch den Deutschen {\"A}rztetag. Dabei wird schon aus der Definition (siehe z.B. die unten stehende Definition der AG Telemedizin) klar, dass Telemedizin keine neue medizinische Disziplin begr{\"u}ndet. Bei Telemedizin handelt es sich nur um ein technisches Werkzeug in Kombination mit geeigneten klinischen Prozessen, damit bestehende medizinische Expertise unter Einsatz von Informations- und Kommunikationstechnologien r{\"a}umliche Entfernungen oder einen zeitlichen Versatz {\"u}berbr{\"u}cken kann. Patientinnen und Patienten k{\"o}nnen also behandelt werden, auch wenn sie vom Arzt r{\"a}umlich entfernt sind.}, subject = {Telemedizin}, language = {de} } @techreport{DeglmannRitthalerRaptis, author = {Deglmann, Markus and Ritthaler, Markus and Raptis, Georgios}, title = {Leitfaden f{\"u}r die Umsetzung des Reha-Konsils mittels HL7 FHIR}, doi = {10.13140/RG.2.2.25217.33120}, pages = {30}, abstract = {Im Rahmen eines Forschungsprojektes soll eine Plattform f{\"u}r die Vermittlung von Telekonsilen und die Bereitstellung einer Konsilakte an die Telematik-Infrastruktur (TI) angeschlossen werden. Um sowohl eine bestm{\"o}gliche Skalierbarkeit als auch eine optimale Integrierbarkeit in bestehende Systeme und Anwendungen zu erreichen, wurde HL7 FHIR als syntaktischer Standard f{\"u}r das Reha-Konsil festgelegt. Dieses Dokument liefert einen systematischen {\"U}berblick {\"u}ber die notwendigen Schritte und Voraussetzungen, um diesen Anschluss zu bewerkstelligen.}, language = {de} } @incollection{HaugRaptisWeber, author = {Haug, Sonja and Raptis, Georgios and Weber, Karsten}, title = {Einstellung zu Datenschutz und Wahrnehmung von Datensicherheit im Gesundheitsbereich}, series = {Digitale Technik f{\"u}r ambulante Pflege und Therapie III : Nutzung Akzeptanz Wirkung und Lebensqualit{\"a}t}, booktitle = {Digitale Technik f{\"u}r ambulante Pflege und Therapie III : Nutzung Akzeptanz Wirkung und Lebensqualit{\"a}t}, editor = {Weber, Karsten and Haug, Sonja and Lauer, Norina and Mohr, Christa}, publisher = {transcript}, address = {Bielefeld}, isbn = {978-3-8376-6728-8}, doi = {10.14361/9783839467282-003}, pages = {13 -- 28}, language = {de} } @techreport{WolterRaptis, type = {Working Paper}, author = {Wolter, Jennifer and Raptis, Georgios}, title = {Leitfaden zur Anbindung einer Reha-Einrichtung an die Telematikinfrastruktur}, address = {Regensburg}, doi = {10.13140/RG.2.2.32767.07842}, pages = {16}, abstract = {Der Leitfaden beschreibt wie Rehabilitationseinrichtungen an die Telematik-Infrastruktur angebunden werden sollen.}, language = {de} } @article{Raptis, author = {Raptis, Georgios}, title = {Windows 10 und Datenschutz in der Arztpraxis}, series = {Bayerisches {\"A}rzteblatt}, journal = {Bayerisches {\"A}rzteblatt}, number = {7/8}, pages = {364}, subject = {Windows 10}, language = {de} } @inproceedings{Raptis, author = {Raptis, Georgios}, title = {Ein Verfahren zur L{\"o}sung des Problems der kryptographischen Langzeitsicherheit medizinischer Daten, die in einer Infrastruktur gespeichert werden}, series = {BIOSIG-Konferenz 2007, Darmstadt}, booktitle = {BIOSIG-Konferenz 2007, Darmstadt}, abstract = {Medizinische Daten, die - wie derzeit f{\"u}r die Telematik-Infrastruktur nach \S291a SGB V spe-zifiziert - auch außerhalb der physischen Kontrolle der Eigent{\"u}mer oder Ersteller (also z.B. außerhalb von Arztpraxen oder Klinken) auf Servern kryptographisch verschl{\"u}sselt gespeichert werden, m{\"u}ssen sehr lange vertraulich bleiben. Insbesondere darf der technische Betreiber des Servers, der die Daten speichert, keinen Zugriff erlangen. Es kann jedoch keine verl{\"a}ssliche Aussage dahingehend getroffen werden, ob die heute eingesetzten kryp-tographischen Algorithmen in 30 oder 40 Jahren die Vertraulichkeit der medizinischen Daten weiterhin gew{\"a}hrleisten. Es wird ein Verfahren vorgestellt, welches das Problem der langfristigen Sicherheit von verschl{\"u}sselt gespeicherten medizinischen Daten aus kryptographischer Sicht l{\"o}st. Die Anwendung des Verfahrens wird am Beispiel einer nach den derzeit bekannten gematik-Spezifikationen definierten Infrastruktur veranschaulicht. Es wird von einer getrennten Speicherung von verschl{\"u}sselten medizinischen Daten und Schl{\"u}sselmaterial ausgegangen. Die Daten werden an der Datenquelle (Konnektor, z.B. eines Arztes) mit einem Einmalblock (One Time Pad, OTP) verschl{\"u}sselt. Sie sind damit beweisbar sicher verschl{\"u}sselt, weil das One-Time-Pad-Verschl{\"u}sselungsverfahren beweisbar „perfekt geheim" ist. Der OTP-Schl{\"u}ssel wird mit einem symmetrischen Schl{\"u}ssel verschl{\"u}sselt, der wiederum mit den asymmetrischen Schl{\"u}sseln aller Zugriffsberechtigten verschl{\"u}sselt wird. Die kryptographische, technische und organisatorische Sicherheit des Verfahrens sowie seine Voraussetzungen und Kosten werden analysiert.}, subject = {Gesundheitsinformationssystem}, language = {de} } @inproceedings{Raptis, author = {Raptis, Georgios}, title = {Die Konzepte und Mechanismen der elektronischen Gesundheitskarte und des Heilberufsausweises aus der Sicht der Datensicherheit / des Datenschutzes}, series = {Forschungsseminar med. Informatik an der Universit{\"a}t Heidelberg, 22.06.2006}, booktitle = {Forschungsseminar med. Informatik an der Universit{\"a}t Heidelberg, 22.06.2006}, subject = {Elektronische Gesundheitskarte}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Ist die Sicherheit der medizinischen Daten in der Telematik-Infrastruktur zu gew{\"a}hrleisten?}, series = {Kolloquium Wissenschaftlichkeit in der Medizin, Universit{\"a}t Heidelberg, 10.05.2007}, journal = {Kolloquium Wissenschaftlichkeit in der Medizin, Universit{\"a}t Heidelberg, 10.05.2007}, subject = {Telemedizin}, language = {de} } @incollection{Raptis, author = {Raptis, Georgios}, title = {Privacy and Data Protection: Mission Impossible?}, series = {Consumer Health Informatics}, booktitle = {Consumer Health Informatics}, editor = {Wetter, Thomas}, publisher = {Springer International Publishing}, isbn = {978-3-319-19589-6}, doi = {10.1007/978-3-319-19590-2}, pages = {273 -- 280}, abstract = {Medical confidentiality is very important because it builds the fundament of trust between doctors and patients. In modern health services data protection is essential. But there are also other important security objectives, such as integrity and authenticity of medical data and health services, as their breach can potentially lead to life threatening conditions. State of the art security mechanisms are necessary to protect medical data and services and prevent attacks known as "hacking". They should include in particular cryptography, as you can usually rely on mathematics, more than in software security and access control mechanisms. As patients normally cannot assess the security of a service, security audits or certifications of health services should be provided to generate trust and confidence.}, subject = {Gesundheitswesen}, language = {en} } @incollection{Raptis, author = {Raptis, Georgios}, title = {Gew{\"a}hrleistung der IT-Sicherheit bei vernetzten Implantaten}, series = {Biomedizinische Technik: Vernetzte und intelligente Implantate}, booktitle = {Biomedizinische Technik: Vernetzte und intelligente Implantate}, editor = {Marschner, Uwe and Clasbrummel, Bernhard and Dehm, Johannes}, publisher = {Walter de Gruyter}, isbn = {978-3-11-034927-6}, pages = {182 -- 192}, subject = {Implantat}, language = {de} } @article{SchenkelAlbertRaptisetal., author = {Schenkel, Johannes and Albert, J{\"u}rgen and Raptis, Georgios and Butz, Norbert}, title = {Notfalldatensatz: Bessere Unterst{\"u}tzung f{\"u}r den Arzt}, series = {Deutsches {\"A}rzteblatt}, volume = {108}, journal = {Deutsches {\"A}rzteblatt}, number = {19}, pages = {A-1046, B-864, C-864}, subject = {Elektronische Gesundheitskarte}, language = {de} } @article{SchenkelAlbertRaptisetal., author = {Schenkel, Johannes and Albert, J{\"u}rgen and Raptis, Georgios and Butz, Norbert}, title = {Notfalldatenmanagement auf der elektronischen Gesundheitskarte}, series = {e-Health}, journal = {e-Health}, editor = {Duesberg, Felix}, publisher = {medical future verlag}, address = {Solingen}, pages = {64 -- 67}, subject = {Elektronische Gesundheitskarte}, language = {de} } @inproceedings{Raptis, author = {Raptis, Georgios}, title = {Notfalldaten und Datenerhalt mit der elektronischen Gesundheitskarte.}, series = {Tagungsband 22. Smartcard-Workshop 2012}, booktitle = {Tagungsband 22. Smartcard-Workshop 2012}, publisher = {Fraunhofer-Verlag}, pages = {166}, subject = {Elektronische Gesundheitskarte}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Biometrie - Anwendungen und Datenschutz. Welche Zusatzinformationen liefert der IRIS-Pf{\"o}rtner? Nebennutzen in einem biometrischen Zugangskontrollsystem. Medizinische Hintergr{\"u}nde. Symposium des Bundesamtes f{\"u}r Sicherheit in der Informationstechnik, Vortrag, Darmstadt 23. Mai 2002}, series = {Symposium des Bundesamtes f{\"u}r Sicherheit in der Informationstechnik}, journal = {Symposium des Bundesamtes f{\"u}r Sicherheit in der Informationstechnik}, language = {de} } @techreport{SchenkelAlbertRaptis, type = {Working Paper}, author = {Schenkel, Johannes and Albert, J{\"u}rgen and Raptis, Georgios}, title = {Arbeitskonzept Notfalldatenmanagement}, subject = {Elektronische Gesundheitskarte}, language = {de} } @phdthesis{Raptis, author = {Raptis, Georgios}, title = {Vertraulichkeit von medizinischen Daten in der Telematik-Infrastruktur - Sicherheitsanalyse unter Ber{\"u}cksichtigung von Aspekten der langfristigen Sicherheit}, address = {Heidelberg}, subject = {Medizinische Dokumentation}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Mechanismen und Einsatzkonzepte von Heilberufsausweis und elektronischer Gesundheitskarte}, series = {Oberseminar im Fachbereich Informatik, Kryptographie und Computeralgebra der TU-Darmstadt, 28.11.2006}, journal = {Oberseminar im Fachbereich Informatik, Kryptographie und Computeralgebra der TU-Darmstadt, 28.11.2006}, subject = {Elektronische Gesundheitskarte}, language = {de} } @misc{Raptis, author = {Raptis, Georgios}, title = {Einsatzm{\"o}glichkeiten des elektronischen Heilberufsausweises}, series = {CAST-Forums, Fraunhofer IGD, 14.09.2006}, journal = {CAST-Forums, Fraunhofer IGD, 14.09.2006}, subject = {Heilberuf}, language = {de} } @article{WoltmannVolkDinzingeretal., author = {Woltmann, Lucas and Volk, Peter and Dinzinger, Michael and Gr{\"a}f, Lukas and Strasser, Sebastian and Schildgen, Johannes and Hartmann, Claudio and Lehner, Wolfgang}, title = {Data Science Meets High-Tech Manufacturing - The BTW 2021 Data Science Challenge}, series = {Datenbank-Spektrum}, volume = {45}, journal = {Datenbank-Spektrum}, publisher = {Springer Nature}, doi = {10.1007/s13222-021-00398-4}, pages = {5 -- 10}, abstract = {For its third installment, the Data Science Challenge of the 19th symposium "Database Systems for Business, Technology and Web" (BTW) of the Gesellschaft f{\"u}r Informatik (GI) tackled the problem of predictive energy management in large production facilities. For the first time, this year's challenge was organized as a cooperation between Technische Universit{\"a}t Dresden, GlobalFoundries, and ScaDS.AI Dresden/Leipzig. The Challenge's participants were given real-world production and energy data from the semiconductor manufacturer GlobalFoundries and had to solve the problem of predicting the energy consumption for production equipment. The usage of real-world data gave the participants a hands-on experience of challenges in Big Data integration and analysis. After a leaderboard-based preselection round, the accepted participants presented their approach to an expert jury and audience in a hybrid format. In this article, we give an overview of the main points of the Data Science Challenge, like organization and problem description. Additionally, the winning team presents its solution.}, language = {en} } @article{SchreierKohlert, author = {Schreier, Franz and Kohlert, Dieter}, title = {Optimized implementations of rational approximations-a case study on the Voigt and complex error function}, series = {Computer Physics Communications : an international journal for computational physics and physical chemistry}, volume = {179}, journal = {Computer Physics Communications : an international journal for computational physics and physical chemistry}, number = {7}, publisher = {Elsevier}, address = {Amsterdam}, issn = {0010-4655}, doi = {10.1016/j.cpc.2008.04.012}, pages = {457 -- 465}, abstract = {Rational functions are frequently used as efficient yet accurate numerical approximations for real and complex valued special functions. For the complex error function , whose real part is the Voigt function , the rational approximation developed by Hui, Armstrong, and Wray [Rapid computation of the Voigt and complex error functions, J. Quant. Spectrosc. Radiat. Transfer 19 (1978) 509-516] is investigated. Various optimizations for the algorithm are discussed. In many applications, where these functions have to be calculated for a large x grid with constant y, an implementation using real arithmetic and factorization of invariant terms is especially efficient.}, language = {en} } @misc{HauserReuterGegenfurtneretal., author = {Hauser, Florian and Reuter, Rebecca and Gegenfurtner, Andreas and Gruber, Hans and Mottok, J{\"u}rgen and Hutzler, Ivonne}, title = {Heuristics in Software Modelling: An Eyetracking Study}, series = {Earli Book of Abstracts}, journal = {Earli Book of Abstracts}, publisher = {RWTH Aachen}, abstract = {To investigate the role of heuristics in the domain of software engineering, an eye tracking study was conducted in which experts and novices were compared. The study focused on one of the most challenging parts in this domain: the generation of an object model for a software product based on a requirements specification. During their training, software engineers are taught different techniques to solve this task. One of these techniques is the noun/verb analysis. However, it is still unclear to what extent novice and expert programmers are making use of it. Ideally, the noun/verb analysis works as a heuristic and helps programmers to make fast and accurate decisions. Participants in the study were 40 software programmers at four levels of expertise (novices, intermediates, experienced rogrammers, experts). They were presented with ten decision tasks. In each task, participants read a requirement specification and then had to choose one out of three presented class diagrams that they considered the best solution. During the task, their eye movements were recorded. Results show that all participants used the noun/verb analysis as a heuristic. Programmers with higher levels of expertise, however, outperformed programmers with lower levels of expertise. Interestingly, the more experienced programmers were not following the noun/verb analysis in a blindfolded way. They realised that the noun/verb analysis would produce diagrams, but a skilled software architect would not model them in this way. Instead they created their models in a way that they perceived as more logical and realistic}, language = {en} } @inproceedings{SoskaSchummJosephetal., author = {Soska, Alexander and Schumm, Michael and Joseph, Saskia and Reschke, Michael and Mottok, J{\"u}rgen and Niemetz, Michael and Schroll-Decker, Irmgard}, title = {Comparison of Frontal Lecture and Workshop Learning Arrangements in a Software Engineering Education Project}, series = {2014 IEEE Global Engineering Education Conference (EDUCON), Istanbul, Turkey}, booktitle = {2014 IEEE Global Engineering Education Conference (EDUCON), Istanbul, Turkey}, doi = {10.1109/EDUCON.2014.6826162}, pages = {653 -- 658}, abstract = {The increase in complexity of software and its creation over the last decades requires an increase in the quality of the education of software engineering professionals. The number of Universities which answer this call by replacing or extending lectures with simulated software projects is constantly rising. However, the question how to best transfer new technological knowledge needed to be successful within this projects to the students remains open. Therefore this paper will present a comparison between the classical frontal lecture and a modern workshop learning arrangement used within these projects. By the use of workshops not only the knowledge transfer but also the acquisition of personal and social competences will be facilitated. Furthermore positive experiences with workshops at university level will support life-long learning.}, language = {en} } @incollection{HaugSchmidbauer, author = {Haug, Sonja and Schmidbauer, Simon}, title = {Integrationskonzepte und Messung von Integration auf kommunaler Ebene}, series = {Integration - Teilhabe und Zusammenleben in der Migrationsgesellschaft}, booktitle = {Integration - Teilhabe und Zusammenleben in der Migrationsgesellschaft}, editor = {Spieker, Michael and Hofmann, Christian}, publisher = {Nomos}, address = {Baden-Baden}, isbn = {9783748910558}, pages = {69 -- 84}, subject = {Soziale Integration}, language = {de} } @article{ThorScherzingerSpecht, author = {Thor, Andreas and Scherzinger, Stefanie and Specht, G{\"u}nther}, title = {Editorial}, series = {Datenbank-Spektrum}, volume = {14}, journal = {Datenbank-Spektrum}, number = {2}, publisher = {Springer}, doi = {10.1007/s13222-014-0162-1}, pages = {81 -- 84}, language = {de} } @inproceedings{RamsauerLohmannMauerer, author = {Ramsauer, Ralf and Lohmann, Daniel and Mauerer, Wolfgang}, title = {The List is the Process: Reliable Pre-Integration Tracking of Commits on Mailing Lists}, series = {2019 IEEE/ACM 41st International Conference on Software Engineering (ICSE), 25-31 May 2019, Montreal, QC, Canada}, booktitle = {2019 IEEE/ACM 41st International Conference on Software Engineering (ICSE), 25-31 May 2019, Montreal, QC, Canada}, publisher = {IEEE}, doi = {10.1109/ICSE.2019.00088}, pages = {807 -- 818}, abstract = {A considerable corpus of research on software evolution focuses on mining changes in software repositories, but omits their pre-integration history. We present a novel method for tracking this otherwise invisible evolution of software changes on mailing lists by connecting all early revisions of changes to their final version in repositories. Since artefact modifications on mailing lists are communicated by updates to fragments (i.e., patches) only, identifying semantically similar changes is a non-trivial task that our approach solves in a language-independent way. We evaluate our method on high-profile open source software (OSS) projects like the Linux kernel, and validate its high accuracy using an elaborately created ground truth. Our approach can be used to quantify properties of OSS development processes, which is an essential requirement for using OSS in reliable or safety-critical industrial products, where certifiability and conformance to processes are crucial. The high accuracy of our technique allows, to the best of our knowledge, for the first time to quantitatively determine if an open development process effectively aligns with given formal process requirements.}, language = {en} } @inproceedings{DeubzerHobelsbergerMottoketal., author = {Deubzer, Michael and Hobelsberger, Martin and Mottok, J{\"u}rgen and Schiller, Frank and Dumke, Reiner and Siegle, Markus and Margull, Ulrich and Niemetz, Michael and Wirrer, Gerhard}, title = {Modeling and Simulation of Embedded Real-Time Multi-Core Systems}, series = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, booktitle = {Proceedings of the 3rd Embedded Software Engineering Congress, 7. bis 9. Dezember 2010, Sindelfingen}, language = {en} } @inproceedings{HobelsbergerDumkeMottoketal., author = {Hobelsberger, Martin and Dumke, Reiner and Mottok, J{\"u}rgen and Niemetz, Michael and Wirrer, Gerhard}, title = {An Experience-Based Repository of Reusable Components for an Component-Based Automotive Software System}, series = {Applied Software Measurement, proceedings of the joined International Conferences on Software Measurement IWSM/MetriKon/Mensura 2010, 10.-12. November 2010, Stuttgart, Germany}, booktitle = {Applied Software Measurement, proceedings of the joined International Conferences on Software Measurement IWSM/MetriKon/Mensura 2010, 10.-12. November 2010, Stuttgart, Germany}, pages = {218 -- 240}, language = {en} } @inproceedings{MottokKraemerDeubzeretal., author = {Mottok, J{\"u}rgen and Kr{\"a}mer, Stefan and Deubzer, Michael and Hobelsberger, Martin and Martin, Felix}, title = {Hardware Based Tracing of Embedded Multi-Core Systems}, series = {4th Applied Research Conference, 5th July 2014, Ingolstadt}, booktitle = {4th Applied Research Conference, 5th July 2014, Ingolstadt}, isbn = {978-3-8440-2875-1}, language = {en} } @inproceedings{HobelsbergerMottok, author = {Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Software Qualit{\"a}t - eine Glaubensfrage? Ein {\"U}berblick {\"u}ber Modelle der Softwarezuverl{\"a}ssigkeit}, series = {Proceedings of the 2nd Embedded Software Engineering Congress, 8. bis 10. Dezember 2009, Sindelfingen}, booktitle = {Proceedings of the 2nd Embedded Software Engineering Congress, 8. bis 10. Dezember 2009, Sindelfingen}, pages = {134 -- 148}, language = {de} } @article{DeubzerMottokHobelsberger, author = {Deubzer, Michael and Mottok, J{\"u}rgen and Hobelsberger, Martin}, title = {Profiling in Embedded Real-Time Software Systemen}, series = {Jahresr{\"u}ckblick 2008 des Bayerischen IT-Sicherheitsclusters}, journal = {Jahresr{\"u}ckblick 2008 des Bayerischen IT-Sicherheitsclusters}, pages = {13}, language = {en} } @article{KoenningWestnerStrahringer, author = {K{\"o}nning, Michael and Westner, Markus and Strahringer, Susanne}, title = {A Systematic Review of Recent Developments in IT Outsourcing Research}, series = {Information Systems Management}, volume = {36}, journal = {Information Systems Management}, number = {1}, publisher = {Taylor \& Francis}, pages = {78 -- 96}, abstract = {Incomplete conceptualization of the information technology outsourcing (ITO) literature represents a challenge for navigating extant research and engaging into purposeful academic discourse. We extend the analysis of empirical findings on determinants of ITO decisions, outcomes, and governance. We identify increasing levels of research maturity, analyze effects of 38 new independent variables, highlight contradictory findings, and observe increasing interest in emerging topics such as innovation through ITO and multisourcing.}, subject = {Outsourcing}, language = {en} } @inproceedings{KraemerSimsekBraunetal., author = {Kr{\"a}mer, Stefan and Simsek, Erol and Braun, J{\"u}rgen and Deubzer, Michael and Stingl, Armin and Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Mut zu Fehlern, um die Qualit{\"a}t zu steigern - Fault-Injection zur Steigerung der Zuverl{\"a}ssigkeit}, series = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, booktitle = {Tagungsband, 6th Embedded Software Engineering, Kongress 2013, 2. bis 6. Dezember 2013, Sindelfingen}, isbn = {978-3-8343-2408-5}, pages = {577 -- 585}, language = {de} } @inproceedings{SailerSchmidhuberDeubzeretal., author = {Sailer, Andreas and Schmidhuber, Stefan and Deubzer, Michael and Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Requirements engineering for a continuous design flow and methodology}, series = {2nd Applied Research Conference 2012 (ARC 2012) 25./26. June 2012, Nuremberg}, booktitle = {2nd Applied Research Conference 2012 (ARC 2012) 25./26. June 2012, Nuremberg}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8440-1093-0}, pages = {76 -- 79}, language = {en} } @inproceedings{SchmidhuberSailerDeubzeretal., author = {Schmidhuber, Stefan and Sailer, Andreas and Deubzer, Michael and Hobelsberger, Martin and Mottok, J{\"u}rgen}, title = {Overview of the itea2-project amalthea}, series = {2nd Applied Research Conference 2012 (ARC 2012) 25./26. June 2012, Nuremberg}, booktitle = {2nd Applied Research Conference 2012 (ARC 2012) 25./26. June 2012, Nuremberg}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8440-1093-0}, pages = {60 -- 62}, language = {en} } @article{KobusWestnerStrahringer, author = {Kobus, J{\"o}rn and Westner, Markus and Strahringer, Susanne}, title = {Enabling digitization by implementing Lean IT}, series = {The TQM Journal}, volume = {30}, journal = {The TQM Journal}, number = {6}, publisher = {Emerald insight}, pages = {764 -- 778}, abstract = {Purpose With the rise of digitization, IT organizations are challenged to provide efficient service delivery and offer innovative digital solutions while maintaining a constant resource capacity. To address this challenge, some IT organizations have adopted Lean Management (LM). Although LM is a standard production mode in manufacturing, it is less familiar to IT organizations. The purpose of this paper is to identify 12 lessons learned from companies who implemented LM in their IT organization (Lean IT) to free up their IT resource capacity from existing day-to-day operations so they could use it to enable their digitization strategy. Design/methodology/approach A case study of two major international companies from different industries. Data were collected from 25 structured interviews. Findings The lessons learned provide insights into how these companies implemented Lean IT, the potential outcomes they aimed for, what they did to achieve those outcomes, how they facilitated the implementation of Lean IT, and restrictions they encountered during the implementation. Research limitations/implications The findings are based on a limited range of IT organizations. Practical implications The lessons learned inform those implementing Lean IT because they explain how companies have implemented Lean IT to facilitate digitization and the benefits and pitfalls they encountered. A comparison of Lean IT and Lean Production shows that LM is transferable to IT organizations if domain specific requirements are respected. Originality/value This paper reports the unique experience of companies implementing Lean IT, which can inform other companies in a similar situation.}, subject = {Unternehmen}, language = {en} } @article{KopperWestnerStrahringer, author = {Kopper, Andreas and Westner, Markus and Strahringer, Susanne}, title = {Kontrollierte Nutzung von Schatten-IT}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {54}, journal = {HMD Praxis der Wirtschaftsinformatik}, publisher = {Springer}, doi = {10.1365/s40702-016-0286-x}, pages = {97 -- 110}, abstract = {Basierend auf einer systematischen und umfangreichen Analyse von Praxisbeitr{\"a}gen zum Thema Schatten-IT, die zwischen September 2015 und August 2016 erschienen sind, beschreibt der vorliegende Artikel Governance-Aspekte zu diesem Ph{\"a}nomen. Er erg{\"a}nzt damit vorhergehende akademische Studien. Es zeigt sich, dass unter Praktikern der Eindruck vorherrscht, dass IT-Abteilungen unter zunehmendem Druck stehen, schneller auf sich {\"a}ndernde Anforderungen aus den Fachbereichen reagieren zu m{\"u}ssen. K{\"o}nnen IT-Abteilungen diesen Erwartungen nicht entsprechen, beschaffen sich Fachbereiche und Nutzer selbst L{\"o}sungen in Form von Schatten-IT. Als m{\"o}gliche Antwort darauf kann sich die IT-Abteilung agiler organisieren und die IT-Architektur im Unternehmen modernisieren. Eine weitere M{\"o}glichkeit besteht darin, sich das innovative Potenzial von Schatten-IT zunutze zu machen und deren Umsetzung aktiv durch organisatorische und technische Maßnahmen zu unterst{\"u}tzen. IT-Sicherheitsmanagement und technische Schutzmechanismen k{\"o}nnen helfen, die so entstandenen L{\"o}sungen abzusichern und die Risiken zu minimieren. Nach vorherrschender Ansicht entwickelt sich die IT-Abteilung als Konsequenz aus all diesen Maßnahmen zu einem nutzerorientierten, internen Service-Provider und strategischen Partner f{\"u}r die Fachbereiche.}, subject = {IT-Abteilung}, language = {de} } @article{KobusWestnerStrahringer, author = {Kobus, J{\"o}rn and Westner, Markus and Strahringer, Susanne}, title = {Einf{\"u}hrung von Lean Management in IT-Organisationen}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {53}, journal = {HMD Praxis der Wirtschaftsinformatik}, number = {6}, pages = {879 -- 893}, abstract = {In der Produktion gilt „Lean Management" als einer der de-facto Standardmanagementans{\"a}tze. Lean Management in IT-Organisationen (Lean IT) ist dahingegen in der Praxis weniger verbreitet und in der Wissenschaft kaum erforscht. Dieser Beitrag aggregiert und erweitert die Ergebnisse mehrerer Forschungsarbeiten. Dabei werden vorrangig zwei Aspekte diskutiert: (1) Ein m{\"o}gliches Einf{\"u}hrungsmodell f{\"u}r Lean IT. Dieses verkn{\"u}pft f{\"u}nf Rollen (Sponsor, Programmleiter, Navigator, Linienf{\"u}hrungskraft und Linienexperte) mit vier Phasen (Vorbereitung, Analyse, Gestaltung und Implementierung). (2) Besondere Herausforderungen f{\"u}r Linienf{\"u}hrungskr{\"a}fte, die aufgrund der „bottom up"-Ausrichtung bei Lean-IT-Einf{\"u}hrungen stark gefordert werden. Neben einer klaren Vision f{\"u}r die Organisationseinheit und dem Verst{\"a}ndnis, an welcher Stelle Lean IT die Organisationseinheit konkret unterst{\"u}tzen kann, ben{\"o}tigen sie Offenheit, Ver{\"a}nderungswillen und die Bereitschaft Verantwortung an Mitarbeiter zu delegieren. Außerdem sollten sie {\"u}ber ein ausreichendes Zeitbudget f{\"u}r die Einf{\"u}hrung verf{\"u}gen, um ihrer gestaltenden und qualit{\"a}tssichernden Funktion nachkommen zu k{\"o}nnen.}, subject = {Betriebliches Informationssystem}, language = {de} } @article{StrasserWestner, author = {Strasser, Artur and Westner, Markus}, title = {Information systems offshoring}, series = {Journal of Information Technology Management}, volume = {26}, journal = {Journal of Information Technology Management}, number = {2}, pages = {70 -- 142}, abstract = {An increasing amount of IS offshoring research has been published during the last four years. This paper presents a comprehensive view of the field of study from a managerial point of view. It provides a consolidated view of the field of study between 2010 and 2013 based on a manual search comprising 69 selected journals and 9 conferences, as well as a search using 6 journal databases. The literature review ensures continuity of research by connecting to a comprehensive literature analysis covering the years 1999 to 2009. This way it consolidates and critically reflects the state of the research of the last 14 years. Overall, we compiled 95 relevant publications originating from leading IS journals and IS conference proceedings. The results indicate that IS offshoring research is largely non-theory based, using almost entirely empirical data and interpretive research methods and -to a smaller extent -positivist research designs. The ISO research of the last 14 years focuses on the implementation stages "how" and "outcome" while the pre-implementation-stages "why", "what", and "which" are comparatively sparsely researched. Future studies should apply a more theory-driven approach with a greater attention on pre-implementation aspects of information systems offshoring. In addition, future research should investigate the special nature of near- and onshoring, captive offshoring as well asagile (project) management techniques suitable for ISO.}, subject = {Betriebliches Informationssystem}, language = {en} } @article{BaryWestner, author = {Bary, Benedikt von and Westner, Markus}, title = {Information Systems Backsourcing}, series = {Journal of Information Technology Management}, volume = {29}, journal = {Journal of Information Technology Management}, number = {1}, publisher = {University of Tehran}, pages = {62 -- 78}, abstract = {Information systems backsourcing describes the transferof previously outsourced activities, assets, or personnel back to the originating companyto regain ownership and control. While there is much research on information systems outsourcing, the topic of backsourcing information systemsis still an emerging research area. Therefore, ourpaper aims to explore and synthesizethe existing literature on information systemsbacksourcing, since there is no exhaustiveliteraturereview of the state of the research to our knowledge available yet. In this paper, wecreate a framework to structure the existing research along the overallbacksourcing process. We identifydifferent motivators, such asexpectation gaps, orinternal and external organizational changes, leading towards a backsourcing decision, and factors positively or negatively influencing this decision. Additionally, we derive implementation success factors based on the existing literature to guide companies through the backsourcing process.We also differentiate the term backsourcing from related, sometimes synonymously used terms, by emphasizing the change of ownership back to the company of originas the main criterion.Additionally, we discuss opportunities for future research in the field of information systems backsourcing.}, subject = {Betriebliches Informationssystem}, language = {en} } @article{KobusWestnerStrahringer, author = {Kobus, J{\"o}rn and Westner, Markus and Strahringer, Susanne}, title = {Change management lessons learned for Lean IT implementations}, series = {International Journal of Information Systems and Project Management}, volume = {5}, journal = {International Journal of Information Systems and Project Management}, number = {1}, pages = {47 -- 60}, abstract = {Lean Management is a standard production mode that has been familiar to production organizations for several decades. To date, however, academic literature has presented surprisingly little information about the application of Lean Management in Information Technology (IT) organizations, or what is called Lean IT. Drawing upon an empirical qualitative case study of the IT departments of two multinational companies, in this paper we identify change management lessons learned for Lean IT implementations, as well as seven characteristics of a corresponding change management approach. As an extension of our work, researchers should validate and expand our initial findings, preferably in a quantitative setting.}, subject = {Betriebliches Informationssystem}, language = {en} }