TY - CHAP A1 - Gschossmann, Andreas A1 - Jobst, Simon A1 - Mottok, Jürgen A1 - Bierl, Rudolf T1 - A Measure of Confidence of Artificial Neural Network Classifiers T2 - ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, 20-21 May 2019, Copenhagen, Denmark N2 - Confidence in results of an Artificial Neural Networks (ANNs) is increased by preferring to reject data, that is not trustful, instead of risking a misclassification. For this purpose a model is proposed that is able to recognize data, which differs significantly from the training data, during inference. The proposed model observes all activations of the hidden layers, as well as input and output layers of an ANN in a grey-box view. To make ANNs more robust in safety critical applications, this model can be used to reject flawed data, that is suspected to decrease the accuracy of the model. If this information is logged during inference, it can be used to improve the model, by training it specifically with the missing information. An experiment on the MNIST dataset is conducted and its results are discussed. Y1 - 2019 UR - https://ieeexplore.ieee.org/document/8836211 SP - 153 EP - 157 PB - VDE-Verlag CY - Berlin ER - TY - CHAP A1 - Hauser, Florian A1 - Stark, Theresa A1 - Mottok, Jürgen A1 - Gruber, Hans A1 - Reuter, Rebecca T1 - Deliberate Practice in Programming: How is it carried out by programmers? T2 - ECSEE '20: Proceedings of the 4th European Conference on Software Engineering Education, Seeon, Germany, June 2020 N2 - This work in progress study examines through which activities programmers perform deliberate practice to improve their own skills in coding and programming. For this reason, a qualitative questionnaire was developed and conducted with a sample of 22 participants. The results indicate that programmers perform formal and informal forms of training and learning. Typically, a classical programming training in the context of a university course or for work-related reasons is a first step in the acquisition of expertise. Building on these basic skills, non-formal and informal learning activities are carried out by the learners. Especially the social interaction and the collaborative work with other programmers is of great importance in this context. The activities mentioned by the test persons fulfil the characteristics of deliberate practice and will be examined more closely in a further study. Y1 - 2020 SN - ISBN 9781450377522 U6 - https://doi.org/10.1145/3396802.3396815 SP - 42 EP - 46 ER - TY - CHAP A1 - Gruber, Hans A1 - Wolff, Christian A1 - Mottok, Jürgen A1 - Bazo, Alexander A1 - Hauser, Florian A1 - Schreistetter, Stefan T1 - Tutorial on Software Engineering Education in Co-Located Multi-User Eye-Tracking-Environments T2 - Proceedings of the 32nd IEEE Conference on Software Engineering Education and Training: Munich, November 2020 N2 - We briefly describe a tutorial on the application of Eye-Tracking technology for Software Engineering Education. We will showcase our setup of a large-scale Eye-Tracking-Classroom and its usage for real-time improvement of traditional learning scenarios in Software Engineering Education. We will focus on the integration of gaze data into modern integrated development environments (IDEs) and demonstrate a complete workflow for its usage in co-located multi-user Eye-Tracking-Environments. KW - eye-tracking KW - software engineering education KW - multi-user eye tracking KW - real-time learning scenarios Y1 - 2020 U6 - https://doi.org/10.1109/CSEET49119.2020.9206170 ER - TY - CHAP A1 - Reuter, Rebecca A1 - Stark, Theresa A1 - Sedelmaier, Yvonne A1 - Landes, Dieter A1 - Mottok, Jürgen A1 - Wolff, Christian T1 - Insights in Students’ Problems during UML Modeling T2 - 2020 IEEE Global Engineering Education Conference (EDUCON): Proceedings N2 - UML (Unified Modeling Language) is the current de facto as well as de jure standard (ISO/IEC 19505:2012) notation to visualize models in software development. UML provides essential guidelines and rules to visualize and understand complex software systems. This is the reason why it has become part of curricula for software engineering courses at many universities worldwide. It is well known, however, that UML is hard to grasp for novices, mainly due to its complexity. In order to tackle the problem of teaching UML to novice students appropriately, it is inevitable to understand their needs and problems much better than we do now. This paper presents empirical insights into students' problems when developing common UML diagrams. Identified problems are generalized, giving rise to a problem catalogue that is derived from our empirical findings, thus establishing a basis for addressing these problems through focused learning arrangements. KW - UML KW - UML problems KW - software engineering KW - higher education KW - visual notation Y1 - 2020 U6 - https://doi.org/10.1109/EDUCON45650.2020.9125110 SP - 592 EP - 600 ER - TY - CHAP A1 - Renner, Sebastian A1 - Pozzobon, Enrico A1 - Mottok, Jürgen ED - Meng, Weizhi T1 - A Hardware in the Loop Benchmark Suite to Evaluate NIST LWC Ciphers on Microcontrollers T2 - Information and Communications Security: 22nd International Conference, ICICS 2020, Copenhagen, Denmark, August 24-26, 2020, Proceedings N2 - The National Institute of Standards and Technology (NIST) started the standardization process for lightweight cryptography algorithms in 2018. By the end of the first round, 32 submissions have been selected as 2nd round candidates. NIST allowed designers of 2nd round submissions to provide small updates on both their specifications and implementation packages. In this work, we introduce a benchmarking framework for evaluating the performance of NIST Lightweight Cryptography (LWC) candidates on embedded platforms. We show the features and application of the framework and explain its design rationale. Moreover, we provide information on how we aim to present up-to-date performance figures throughout the NIST LWC competition. In this paper, we present an excerpt of our software benchmarking results regarding speed and memory requirements of selected ciphers. All up-to-date results, including benchmarking different test cases for multiple variants of each 2nd round algorithm on five different microcontrollers, are periodically published to a public website. While initially only the reference implementations were available, the ability of automatically testing the performance of the candidate algorithms on multiple platforms becomes especially relevant as more optimized implementations are developed. Finally, we show how the framework can be extended in different directions: support for more target platforms can be easily added, different kinds of algorithms can be tested, and other test metrics can be acquired. The focus of this paper should rather lay on the framework design and testing methodology than on the current results, especially for reference code. KW - Lightweight cryptography KW - Benchmarking KW - Embedded systems KW - RISC-V Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-61078-4_28 SP - 495 EP - 509 PB - Springer CY - Cham ER - TY - CHAP A1 - Dentgen, Manuel A1 - Renner, Sebastian A1 - Mottok, Jürgen ED - Brinkmann, André ED - Karl, Wolfgang ED - Lankes, Stefan ED - Tomforde, Sven ED - Pionteck, Thilo ED - Trinitis, Carsten T1 - Equally Distributed Bus-Communication Access Rights for Inter MCU Communication Using Multimaster SPI T2 - Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings T2 - Lecture notes in computer science ; Bd. 12155 N2 - With the rising complexity and processing power of modern computer systems, the amount of MCU on a single PCB also rises. These microcontrollers often need to communicate with each other to exchange payload and control information in a bidirectional manner. Today’s well-established communication protocols in MCUs either do not fit modern transmission speed requirements or do have an inappropriate master-slave attribute, which does not allow the communication partners to have equal bus access rights. Therefore, this paper introduces an extension of the Serial Peripheral Interface (SPI) to allow an equally distributed access right for the communication interface between two microcontrollers. It simultaneously does fit modern transmission speed requirements of a common network interface, so that the message transmission does not constitute a bottleneck in data processing. Besides the protocol design, we do also provide a first prototype implementation, which constitutes a proof of concept. Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_15 SP - 200 EP - 212 ER - TY - CHAP A1 - Klopp, Marco A1 - Gold-Veerkamp, Carolin A1 - Abke, Jörg A1 - Borgeest, Kai A1 - Reuter, Rebecca A1 - Jahn, Sabrina A1 - Mottok, Jürgen A1 - Sedelmaier, Yvonne A1 - Lehmann, Alexander A1 - Landes, Dieter T1 - Totally Different and yet so Alike: Three Concepts to Use Scrum in Higher Education T2 - Proceedings of the 4th European Conference on Software Engineering Education (ECSEE '20): June 2020, Seeon/Bavaria, Germany N2 - Software process models are important in software projects in order to give the work of a project guidelines or a framework. However, teaching process models in higher education seems to be quite challenging. This has to do with the fact that undergraduates have no experience with projects in which process models are used. The theoretical mediation of process models is initially on a very abstract level. For this reason, we chose to combine two didactic approaches, namely problem-based learning and project work. Various traditional plan-driven process models have been expanded in courses in Software Engineering with agile process models. The Scrum Framework is the focus of consideration of this paper. Three Universities of Applied Sciences which cooperate in the EVELIN project focused on Scrum as a process model and integrated it into their teaching. Since the respective concepts of implementation differ, they should be presented and compared in this article to presents some practice approaches. The goal of this presentation of is a uniform evaluation in order to obtain insights from different perspectives. This comparison can draw conclusions for possible necessary improvements of the respective concepts. Y1 - 2020 U6 - https://doi.org/10.1145/3396802.3396817 SP - 12 EP - 21 ER - TY - CHAP A1 - Seebauer, Stefan A1 - Jahn, Sabrina A1 - Mottok, Jürgen T1 - Learning from Escape Rooms? A Study Design Concept Measuring the Effect of a Cryptography Educational Escape Room T2 - 2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal N2 - Experts predict that more IT-Security specialists will be needed in the coming years, but in current higher education in engineering disciplines, this topic is hardly addressed. Newer learning methods such as game-based learning (GBL) are enjoying an increasing popularity as their improvement in the education of subject specific topics can be proven by a variety of studies. We chose Educational Escape Rooms (EduER) as a GBL-tool to impart IT-Security in higher education of engineers. In our Escape Room (ER), the students try to solve puzzles and riddles with learned knowledge on the emphasis of cryptography. This paper first deals with a brief introduction to GBL and EduERs, followed by the design of our ER concept, containing different tasks with focus on the topic of cryptography. The tasks cover different cryptographic methods and hash algorithms, e.g. AES, RSA, SHA3. Afterwards the experimental study is presented. The study of the EduER was carried out with students from the bachelor's program in Electrical Engineering and Information Technology at the OTH Regensburg. The participants were divided into three groups of 5 to 8 persons each. They received a briefing with important information, followed by the ER execution, a debriefing afterwards and an exam-like evaluation sheet to test their learned knowledge. Finally, first basic results are presented. Y1 - 2020 U6 - https://doi.org/10.1109/EDUCON45650.2020.9125333 SP - 1684 EP - 1685 ER - TY - CHAP A1 - Jahn, Sabrina A1 - Mottok, Jürgen T1 - Work in Progress: Towards an Academic Secure Software Engineering Curriculum for Engineers T2 - 2020 IEEE Global Engineering Education Conference (EDUCON): 27-30 April 2020, Porto, Portugal N2 - In the age of the Internet of Things, it is becoming increasingly important to integrate knowledge about the development of secure systems (Secure Software Engineering) into academic teaching. However, teaching IT Security and Secure Software Engineering to non-computer scientists is rare. Therefore, we focus our research on the integration of IT Security into software engineering education of non-computer scientists, particularly electrical engineers, by means of inductive teaching- and learning-arrangements. After collecting students' preconceptions of IT Security and Secure Software Engineering in prior work, this paper now contributes with a first mapping of these preconceptions with corresponding learning content as well as suitable inductive teaching methods to be able to create new lecture and exercise units and improve academic learning and teaching in both areas. Y1 - 2020 U6 - https://doi.org/10.1109/EDUCON45650.2020.9125210 SP - 1713 EP - 1717 ER - TY - CHAP A1 - Frauenschläger, Tobias A1 - Renner, Sebastian A1 - Mottok, Jürgen T1 - Security Improvements by Separating the Cryptographic Protocol from the Network Stack onto a Multi-MCU Architecture T2 - Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings N2 - The number of IoT devices in SCADA and ICS systems is rising quickly, especially in the domain of critical infrastructures. But these kinds of systems are performing mission critical tasks like controlling devices in industrial facilities or substations in the smart grid. Therefore, they are subject to a lot of regulatory standards. Yet, to provide remote access over the internet, special architectures are developed to integrate a network interface into these devices without inferring with the actual functionality. However, these architectures either lack security measures against cyber-attacks or do not offer the necessary performance for time-critical communication interfaces. To solve that, an architecture consisting of three units is introduced in this paper to provide a network interface with extensive security measures and a high performance. The main feature is the isolation of the cryptographic functionality onto an additional MCU. After proposing the basic concept, the paper presents many implementation details. Based on the current state of implementation, a concept validation of the realized architecture is described. KW - Cyber-security KW - Functional safety KW - Network security KW - Industrial Internet of Things KW - Industrial Control System KW - Supervisory Control and Data Acquisition System Multi microcontroller setup Dos prevention Critical infrastructures KW - Multi microcontroller setup Dos prevention Critical infrastructures KW - Dos prevention KW - Critical infrastructures Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_14 SP - 185 EP - 199 PB - Springer International Publishing ER -