TY - JOUR A1 - Mauerer, Wolfgang A1 - Rexhepaj, Tanja A1 - Monkman, Gareth J. A1 - Sindersberger, Dirk A1 - Diermeier, Andreas A1 - Neidhart, Thomas A1 - Wolfrum, Dominik A1 - Sterner, Michael A1 - Heberl, Michael A1 - Nusko, Robert A1 - Maier, Georg A1 - Nagl, Klaus A1 - Reuter, Monika A1 - Hofrichter, Andreas A1 - Lex, Thomas A1 - Lesch, Florian A1 - Kieninger, Bärbel A1 - Szalo, Alexander Eduard A1 - Zehner, Alexander A1 - Palm, Christoph A1 - Joblin, Mitchell A1 - Apel, Sven A1 - Ramsauer, Ralf A1 - Lohmann, Daniel A1 - Westner, Markus A1 - Strasser, Artur A1 - Munndi, Maximilian A1 - Ebner, Lena A1 - Elsner, Michael A1 - Weiß, Nils A1 - Segerer, Matthias A1 - Hackenberg, Rudolf A1 - Steger, Sebastian A1 - Schmailzl, Anton A1 - Dostalek, Michael A1 - Armbruster, Dominik A1 - Koch, Fabian A1 - Hierl, Stefan A1 - Thumann, Philipp A1 - Swidergal, Krzysztof A1 - Wagner, Marcus A1 - Briem, Ulrich A1 - Diermeier, Andreas A1 - Spreitzer, Stefan A1 - Beiderbeck, Sabrina A1 - Hook, Christian A1 - Zobel, Martin A1 - Weber, Tim A1 - Groß, Simon A1 - Penzkofer, Rainer A1 - Dendorfer, Sebastian A1 - Schillitz, Ingo A1 - Bauer, Thomas A1 - Rudolph, Clarissa A1 - Schmidt, Katja A1 - Liebetruth, Thomas A1 - Hamer, Markus A1 - Haug, Sonja A1 - Vernim, Matthias A1 - Weber, Karsten A1 - Saßmannshausen, Sean Patrick A1 - Books, Sebastian A1 - Neuleitner, Nikolaus A1 - Rechenauer, Christian A1 - Steffens, Oliver A1 - Kusterle, Wolfgang A1 - Gömmel, Roland A1 - Wellnitz, Felix A1 - Stierstorfer, Johannes A1 - Stadler, Dominik A1 - Hofmann, Matthias J. A1 - Motschmann, Hubert A1 - Shamonin (Chamonine), Mikhail A1 - Bleicher, Veronika A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf A1 - Horn, Anton A1 - Kawasch, Raphael A1 - Petzenhauser, Michael A1 - Probst, Tobias A1 - Udalzow, Anton A1 - Dams, Florian A1 - Schreiner, Rupert A1 - Langer, Christoph A1 - Prommesberger, Christian A1 - Ławrowski, Robert Damian ED - Baier, Wolfgang T1 - Forschungsbericht 2016 T3 - Forschungsberichte der OTH Regensburg - 2016 Y1 - 2016 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-13840 CY - Regensburg ER - TY - CHAP A1 - Tao, Ye A1 - Liu, Guozhu A1 - Mottok, Jürgen A1 - Hackenberg, Rudolf A1 - Hagel, Georg A1 - Mottok, Jürgen T1 - Just-in-Time Teaching in software engineering: A Chinese-German empirical case study T2 - 2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey N2 - Learning centered teaching becomes an important factor in a global perspective of learning software engineering. The Just-in-Time Teaching approach is used in a Chinese-German empirical case study. In a one year terminated project we will analyze the performance of our students in an active learning scenario with Just-in-Time Teaching and Peer Instruction. We will contribute an inter-cultural comparison of achieved competencies by student’s self-assessment and teacher’s observation. KW - Activating Learning KW - Blended Learning KW - Conferences KW - Educational institutions KW - E-Learning KW - ISO Standards KW - JiTT KW - Just-in-Time Teaching KW - Materials KW - Practical Learning KW - Software KW - Software engineering Y1 - 2014 U6 - https://doi.org/10.1109/EDUCON.2014.6826220 SP - 983 EP - 986 PB - IEEE ER - TY - CHAP A1 - Ye Tao, A1 - Guozhu Liu, A1 - Mottok, Jürgen A1 - Hackenberg, Rudolf A1 - Hagel, Georg T1 - Just-in-Time-Teaching experience in a Software Design Pattern course T2 - 2015 IEEE Global Engineering Education Conference (EDUCON), 18-20 March 2015, Tallinn, Estonia Y1 - 2015 SP - 915 EP - 919 ER - TY - CHAP A1 - Tao, Ye A1 - Liu, Guozhu A1 - Mottok, Jürgen A1 - Hackenberg, Rudolf A1 - Hagel, Georg T1 - Ranking task activity in teaching software engineering T2 - IEEE Global Engineering Education Conference (EDUCON), 10-13 April 2016, Abu Dhabi, UAE N2 - In this research, we investigate the possibility of applying ranking task activity in teaching and learning software engineering courses. We introduce three types of ranking tasks, conceptual-, contextual- and sequential ranking questions, which cover most core topics such as requirement analysis, architecture design and quality validation in the course. We have also done experiments on a group of students to see if ranking tasks could increase their conceptual knowledge in specific areas. Assessments were given in order to evaluate the effectiveness of this activity, showing an obvious increase in complex conceptual understanding. Y1 - 2016 U6 - https://doi.org/10.1109/EDUCON.2016.7474678 SP - 1023 EP - 1027 ER - TY - CHAP A1 - Renner, Sebastian A1 - Pozzobon, Enrico A1 - Mottok, Jürgen A1 - Hackenberg, Rudolf T1 - Benchmarking Software Implementations of 1st Round Candidates of the NIST LWC Project on Microcontrollers T2 - 3rd Lightweight Cryptography Workshop at NIST, Gaithersburg, USA N2 - This paper introduces a custom framework for benchmarking software implementations from the National Institute of Standards and Technology (NIST) Lightweight Cryptography (LWC) project on embedded devices. We present the design and core functions of the framework and apply it to various NIST LWC authenticated encryption with associated data (AEAD) ciphers. Altogether, we evaluate the speed of 213 submitted algorithm vari-ants on four different microcontroller units (MCUs), including 32 bit ARM and 8 bit AVR architectures. To allow a more meaningful comparison, we also conduct code size tests on all four boards and RAM utilization tests on one test platform. Y1 - 2019 UR - https://csrc.nist.gov/CSRC/media/Events/lightweight-cryptography-workshop-2019/documents/papers/benchmarking-software-implementations-lwc2019.pdf ER - TY - CHAP A1 - Hansch, G. A1 - Staudte, Ch. A1 - Gerhager, S. A1 - Hackenberg, Rudolf A1 - Mottok, Jürgen ED - Mottok, Jürgen ED - Ziemann, Olaf T1 - Migration path for secure and economic smart power grid devices with transitional smart metering support T2 - Applied Research Conference 2012 (ARC 2012), 25./26. June 2012 Nuremberg Y1 - 2012 SN - 2012 978-3-8440-1093-0 SP - 63 EP - 69 PB - Shaker CY - Aachen ER - TY - CHAP A1 - Pozzobon, Enrico A1 - Weiss, Nils A1 - Renner, Sebastian A1 - Hackenberg, Rudolf T1 - A Survey on Media Access Solutions for CAN Penetration Testing T2 - ACM Computer Science in Cars Symposium (CSCS), 2nd, 2018, Munich, Germany N2 - Controller Area Network (CAN) is still the most used network technology in today's connected cars. Now and in the near future, penetration tests in the area of automotive security will still require tools for CAN media access. More and more open source automotive penetration tools and frameworks are presented by researchers on various conferences, all with different properties in terms of usability, features and supported use-cases. Choosing a proper tool for security investigations in automotive network poses a challenge, since lots of different solutions are available. This paper compares currently available CAN media access solutions and gives advice on competitive hard-and software tools for automotive penetration testing. KW - CAN KW - Penetration Testing KW - Benchmarks Y1 - 2018 UR - https://cscs.mpi-inf.mpg.de/files/2018/09/05-A-Survey-on-Media-Access-Solutions-for-CAN-Penetration-Testing.pdf // 10.1145/3273946.3273949 ER - TY - JOUR A1 - Kahl, Matthias A1 - Krause, Veronika A1 - Hackenberg, Rudolf A1 - Ul Haq, Anwar A1 - Horn, Anton A1 - Jacobsen, Hans-Arno A1 - Kriechbaumer, Thomas A1 - Petzenhauser, Michael A1 - Shamonin (Chamonine), Mikhail A1 - Udalzow, Anton T1 - Measurement system and dataset for in-depth analysis of appliance energy consumption in industrial environment JF - tm - Technisches Messen N2 - To support a rational and efficient use of electrical energy in residential and industrial environments, Non-Intrusive Load Monitoring (NILM) provides several techniques to identify state and power consumption profiles of connected appliances. Design requirements for such systems include a low hardware and installations costs for residential, reliability and high-availability for industrial purposes, while keeping invasive interventions into the electrical infrastructure to a minimum. This work introduces a reference hardware setup that allows an in depth analysis of electrical energy consumption in industrial environments. To identify appliances and their consumption profile, appropriate identification algorithms are developed by the NILM community. To enable an evaluation of these algorithms on industrial appliances, we introduce the Laboratory-measured IndustriaL Appliance Characteristics (LILAC) dataset: 1302 measurements from one, two, and three concurrently running appliances of 15 appliance types, measured with the introduced testbed. To allow in-depth appliance consumption analysis, measurements were carried out with a sampling rate of 50 kHz and 16-bit amplitude resolution for voltage and current signals. We show in experiments that signal signatures, contained in the measurement data, allows one to distinguish the single measured electrical appliances with a baseline machine learning approach of nearly 100% accuracy. KW - appliance monitoring KW - DAQ KW - NILM Y1 - 2019 U6 - https://doi.org/10.1515/teme-2018-0038 VL - 86 IS - 1 SP - 1 EP - 13 PB - De Gruyter ER - TY - CHAP A1 - Hackenberg, Rudolf A1 - Weiss, Nils A1 - Renner, Sebastian A1 - Pozzobon, Enrico T1 - Extending Vehicle Attack Surface Through Smart Devices T2 - SECURWARE 2017 : The Eleventh International Conference on Emerging Security Information, Systems and Technologies, 11th, 2017, Rome, Italy N2 - Modern cars include more and more features that first emerged from the consumer electronics industry. Technologies like Bluetooth and Internet-connected services found their way into the vehicle industry. The secure implementation of these functions presents a great challenge for the manufacturers because products originating from the consumer industry can often not be easily transferred to the safety-sensitive traffic environment due to security concerns. However, common automotive interfaces like the diagnostics port are now also used to implement new services into the car. With dongles designed to read out certain vehicle data and transfer it to the Internet via the cellular network, the owner can access information about gas consumption or vehicle location through a mobile phone app, even when he is away from the car. This paper wants to emphasize new threats that appear due to the ongoing interconnection in modern cars by discussing the security of the diagnostics interface in combination with the use of an Internet-connected dongle. Potential attack vectors, as well as proof-of-concept exploits will be shown and the implications of security breaches on the safe state of the vehicle will be investigated. KW - On-Board-Diagnostics KW - Cellular Network KW - Automotive Security Y1 - 2017 UR - https://www.thinkmind.org/articles/securware_2017_8_10_38014.pdf SN - 978-1-61208-582-1 SP - 131 EP - 135 PB - IARIA ER - TY - CHAP A1 - Weiss, Nils A1 - Schrötter, Markus A1 - Hackenberg, Rudolf ED - Hof, Hans-Joachim ED - Fritz, Mario ED - Krauß, Christoph ED - Wasenmüller, Oliver T1 - On Threat Analysis and Risk Estimation of Automotive Ransomware T2 - ACM Computer Science in Cars Symposium : [CSCS '19) 08.10.2019, Kaiserslautern, Germany Y1 - 2019 SN - 9781450370042 U6 - https://doi.org/10.1145/3359999.3360492 SP - 1 EP - 9 PB - ACM CY - New York, NY, USA ER - TY - CHAP A1 - Graf, Julian A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - Architecture of an intelligent Intrusion Detection System for Smart Home T2 - 2020 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops): 2020, Austin, Texas, USA N2 - Increasing cyber-attacks on Internet of Things (IoT) environments are a growing problem of digitized households worldwide. The purpose of this study is to investigate how an intelligent Intrusion Detection System (iIDS) can provide more security in IoT networks with a novel architecture, combining multiple classical and machine learning approaches. By combining classical security analysis methods and modern concepts of artificial intelligence, we increase the quality of attack detection and can therefore conduct dedicated attack suppression. The architectural image of the iIDS consists of different layers, which in parts achieve self-sufficient results. The results of the different modules are calculated by means of statement variables and evaluation techniques adapted for the individual module elements and subsequently combined by limit value considerations. The architecture image combines approaches for the analysis and processing of IoT network traffic and evaluates it to an aggregated score. From this result it can be determined whether the analyzed data indicates device misuse or attempted break-ins into the network. This study answers the questions whether a connection between classical and modern concepts for monitoring and analyzing IoT network traffic can be implemented meaningfully within a reliable architecture of an iIDS. KW - Internet of Things KW - artificial intelligence KW - smart Home KW - Intrusion KW - Detection System Y1 - 2020 SN - 978-1-7281-4716-1 U6 - https://doi.org/10.1109/PerComWorkshops48775.2020.9156168 SP - 1 EP - 6 PB - IEEE ER - TY - JOUR A1 - Hinterberger, Lukas A1 - Fischer, Sebastian A1 - Weber, Bernhard A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - Extended Definition of the Proposed Open Standard for IoT Device IdentificAtion and RecoGnition (IoTAG) JF - International Journal on Advances in Internet Technology N2 - Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity. A lot of security issues concern IoT devices and the networks they are integrated. To help getting an overview of an IoT network, the devices and the security, we propose a scoring system to get a good impression of IT security. This system generates single scores for each device, using features like encryption, update behavior, etc. Furthermore, a summarized score for the whole network is calculated, to show the status of the network security in an easy way for the administrator. To enable the scoring system, a precise list of the existing devices and their operating status is necessary. To achieve this, we present an open standard for the IoT Device IdentificAtion and RecoGnition (short IoTAG), which requires that devices report, e.g., their name, an unique ID, the firmware version and the supported encryption. The proposed standard is described in detail and an implementation guideline is given in this paper. Additionally, information about how to realize the serialization, the integrity and the communication with IoTAG. KW - Internet of Things KW - device identification KW - open standard KW - security rating KW - IoTAG Y1 - 2020 UR - https://www.thinkmind.org/articles/inttech_v13_n34_2020_2.pdf VL - 13 IS - 3 & 4 SP - 110 EP - 121 PB - IARIA ER - TY - CHAP A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf ED - Trinitis, Carsten ED - Pionteck, Thilo T1 - Work in Progress: Security Analysis for Safety-critical Systems BT - Smart Grid and IoT T2 - ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC N2 - Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. Currently in Germany, the SG is under construction. In order to use future innovative services, SG and IoT must be combined. For this, we connect the SG Infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). Open research question in this context are the security requirements architecture SG and IoT and the mechanism for authentication and authorisation in future application (SG and IoT). Due to the increasing networking of the systems (SG and IoT) new threats and attack vectors arise. The attacks to the architecture influence the target of authenticity, security and privacy. For the security analysis we focus on two communication points: the communication between the smart meter gateway, and the IoT device. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. With this two connections, new threats emerge. A security analysis over all the connections, including the vulnerability and the ability of an attacker, is developed in this paper. The analysis shows us challenges of the communication between IoT and SG. For this, we defined technical and organizational requirements for authentication and authorization. Current authentication and authorization mechanisms are no longer sufficient for the defined requirements. We present the Role-based trust model for Safety-critical Systems for these defined requirements. The new trust model is integrated into a role-based access control model. It defines data classes, which separate the sensitive and non-sensitive information. KW - smart grid KW - Internet of Things (IoT) KW - security analysis; KW - safety-critical infrastructure KW - trust model Y1 - 2019 SN - 978-3-8007-4957-7 SP - 101 EP - 106 PB - VDE Verlag GmbH CY - Berlin ER -