TY - CHAP A1 - Graf, Julian A1 - Hachani, Murad A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - A heuristic packet processing model for improved encrypted network analysis T2 - CSCS '25: Proceedings of the 2nd Cyber Security in CarS Workshop N2 - Modern networked systems, such as those in the automotive sector, face increasing complexity and growing attack surfaces due to the rise of interconnected and data-driven technologies. Detecting malicious behavior in these environments requires efficient and scalable methods that can operate reliably despite limited resources and high communication volumes. This paper proposes a heuristic packet processing model designed to support intrusion detection based on structural and temporal characteristics of encrypted network traffic. The model follows a modular architecture consisting of four key phases: recording, sorting, prioritizing, and analyzing. At the core of the approach is the Polymetric Queueing Topology Space, a feature space that combines statistical and time series attributes derived from model structure and flow data. These features serve as input for machine learning models, which can effectively distinguish between benign and intrusion traffic patterns without relying on packet data beyond the transport layer. The approach was evaluated using the publicly available ToN_IoT dataset and demonstrated that reliable classification is achievable using a subset of the developed feature space that contains model-derived traffic features. We used Random Forest for supervised binary and multi-class classification achieving high accuracy scores of 99% for binary and 98% for multi-class classification. Additionally, for unsupervised anomaly detection, we created an Isolation Forest model accomplishing F1-scores of 0.92 for the benign and 0.96 for intrusion class. The architecture is designed to enable dynamic traffic prioritization and to offer a flexible foundation that can observe diverse network domains while maintaining efficient performance under constrained computational conditions. Y1 - 2025 U6 - https://doi.org/10.1145/3736130.3764510 PB - ACM CY - New York, USA ER - TY - GEN A1 - Hauser, Dominic A1 - Graf, Julian A1 - Fischer, Sebastian T1 - SEPP – Security Education and Penetration-Testing Platform for IoT T2 - Conference programme & abstract book N2 - The Internet of Things (IoT) is becoming a major part of our everyday lives, offering convenience and smarter solutions, but also bringing significant security challenges. While theoretical knowledge in IoT security is essential, studies have shown that practical content can be an essential part of internalizing understanding. To address this, we developed the Security Education and Penetration-Testing Platform (SEPP) as the practical component of an existing IoT security course at the OTH Regensburg. SEPP uses real IoT devices like smart locks, cameras, and plugs, simulating a smart home environment to make learning interactive and engaging. Students can explore vulnerabilities, conduct penetration tests, and document their findings through structured exercises. By working on tasks like network scanning, analyzing data traffic, and simulating attacks, students gain a deeper understanding of IoT security risks. Initial tests show that this approach helps students apply their theoretical knowledge and significantly improve their practical skills. This paper explains how SEPP was built, the exercises it offers, and why it’s an important step forward in teaching IoT security effectively. Furthermore, we aim to share the findings and tasks from this paper with other universities, providing them with a solid foundation to teach practical IoT security knowledge in their own courses. Y1 - 2025 UR - https://iafor.org/archives/conference-programmes/ece/ece-programme-2025.pdf SN - 2433-7544 SP - 101 PB - IAFOR ER - TY - GEN A1 - Fischer, Sebastian T1 - The persistent problems with cybersecurity : a negative example and an outlook on the Cyber Resilience Act Y1 - 2025 UR - https://www.iaria.org/conferences2025/filesDataSys25/Keynote_SebastianFischer_ThePersistentProblem.pdf PB - IARIA ER - TY - CHAP A1 - Bauer, Patrick A1 - Frikel, Jürgen T1 - BPConvNet: a deep learning based ρ-Filtered layergram reconstruction method for computed tomography T2 - AIP Conference Proceedings N2 - In this article, we address the reconstruction problem in computed tomography (CT) when dealing with sparse view data. Traditional approaches like filtered backprojection (FBP) often fail under these conditions, leading to streaking artifacts. We propose BPConvNet, a deep learning based version of the ρ-filtered layergram or backprojection filtration (BPF) technique (cf. [1]). Unlike FBP, the BPF method applies filtering (F) after backprojection (BP), hence the name. The proposed BPConvNet adapts the BPF workflow by substituting the filtering step with a residual convolutional neural network. Our numerical experiments demonstrate that BPConvNet is competitive to similar deep learning methods. Moreover, we explain that BPConvNet can be easily adapted to to different CT acquisition geometries, such as fan beam and 3D configurations KW - Convolutional neural network KW - Deep learning KW - Learning and learning models KW - Computed tomography Y1 - 2025 U6 - https://doi.org/10.1063/5.0286063 SN - 0094-243X VL - 3315 IS - 1 PB - AIP Publishing ER - TY - THES A1 - Schaffer, Josefa T1 - Precision in eye tracking: evaluation and improvement of accuracy N2 - This thesis will evaluate the accuracy of the Tobii Pro Glasses 3, which are wearable eye tracking glasses. A static and dynamic accuracy study will be conducted, utilising a poster and imitating realistic environments. The results will be evaluated using a self-developed sample-wise approach, trying to determine possible differences between static and dynamic conditions while wearing eye tracking glasses. In addition to that, a tool named glassesValidator, used to calculate data quality metrics of eye tracking glasses, will be evaluated on its accuracy and validity itself. In the static accuracy study, participants will focus, in reading order, on nine fixation targets on the poster for at least two seconds while using a chin rest to prevent head movement. In the dynamic accuracy study participants will be walking in a semicircular movement around the poster while focusing only on the central fixation target on the poster. The results for the static and dynamic study will be compared to each other, providing possible influence of different lighting conditions and the usage of contact lenses. The results provided by glassesValidator and the self-developed accuracy approach will also be compared to each other to evaluate and provide possible improvements to increase the accuracy of the tool. Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-85296 CY - Regensburg ER - TY - JOUR A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - Security risk analysis of the cloud infrastructure of Smart Grid and IoT - 4-Level-Trust-Model as a security solution JF - International Journal on Advances in Internet Technology N2 - The digital transformation has found its way into business and private life. It consists of digitization and digitaliza- tion. Digitization means the technical process and digitalization is the socio-technological process. Technologies of digitization are Cloud Computing (CC), Internet of Things (IoT) and Smart Grid (SG), which are separate technologies. The increasing digitalization in the private sector and of the energy industry connect these technologies. Actually, there is no connection between the CC infrastructure and the SG infrastructure at the moment, because in Germany the SG is currently under construction. If one looks at the CC and IoT, it must be stated there is an connection between the IoT infrastructure and the CC infrastructure as a service provider. To connect the technologies CC, IoT and SG and also build an SG cloud for innovative services, the new laws for privacy must be implemented. For privacy and security analyses it is important to know which data can be stored and distributed on a cloud. To illustrate this analysis, we connect the SG infrastructure with the IoT. An IoT device (car charging station) should be able to transfer data to and from the SG. SG is a critical infrastructure and the IoT device a potential insecure device and network. We show the communication between the smart meter switching box and the IoT device and the data transferred between their clouds. The charging station is connected to the SG to get the current amount of renewable energy in the grid. This is necessary to create a new smart service. But this service also generates private data (e.g., name, address, payment details). The private data should not be transferred to the IoT cloud. For the connection of SG and IoT, availability, confidentiality and integrity must be ensured. A risk analysis over all the cloud connections, including the vulnerability and the ability of an attacker, the resulting risk and the 4-Level- Trust-Model for security assessment are developed. Furthermore, we show the application of the 4-Level-Trust-Model in this paper. Y1 - 2020 UR - https://www.researchgate.net/publication/346580224_Security_Risk_Analysis_of_the_Cloud_Infrastructure_of_Smart_Grid_and_IoT_-_4-Level-Trust-Model_as_a_Security_Solution UR - https://www.iariajournals.org/internet_technology/inttech_v13_n12_2020_paged.pdf VL - 13 IS - 1&2 SP - 11 EP - 20 ER - TY - CHAP A1 - Schwägerl, Felix A1 - Buchmann, Thomas A1 - Westfechtel, Bernhard T1 - Multi-variant model transformations - a problem statement T2 - Proceedings of the 11th International Conference on Evaluation of Novel Software Approaches to Software Engineering N2 - Model Transformations are a key element of Model-Driven Software Engineering. As soon as variability is involved, transformations become increasingly complicated. The lack of support for variability in model transformations impairs the acceptance of approaches to organized reuse such as software product lines. In this position paper, the general problem of multi-variant model transformations is formulated for MOF-based, XMI-serialized models. A simplistic case study is presented to specify the input and the expected output of such a transformation. Furthermore, requirements for tool support are defined, including a standardized representation of both multi-variant model instances and variability information, as well as an execution specification for multi-variant transformations. A literature review reveals that the problem is weakly identified and often solved using ad-hoc solutions; there exists no tool providing a general solution to the proposed problem statement. The observation s presented here may serve for the future development of standards and tools. KW - Model-Driven Software Engineering KW - Software Product Lines KW - Model Transformations KW - Code Generation Y1 - 2016 SN - 978-989-758-189-2 U6 - https://doi.org/10.5220/0005878702030209 SN - 2184-4895 SP - 203 EP - 209 PB - SCITEPRESS ER - TY - RPRT A1 - Alex, Karla A1 - Eichinger, Johanna A1 - Heyder, Clemens A1 - Kandlbinder, Agnes A1 - Loder, Sandra A1 - Rolfes, Vasilija A1 - Röttger, Sara A1 - Scharf, Anna A1 - Scorna, Ulrike A1 - Weigold, Stefanie ED - Cerullo, Laura ED - Gerhards, Helene ED - Weber, Karsten T1 - Abstractband I: In-vitro-Gametogenese (IVG) und artifizieller Uterus (AU) – Problemauslöser oder Problemlöser? Ethische, soziale und rechtliche Aspekte zukünftiger reproduktionsmedizinischer Verfahren BT - Klausurwoche für Early Career Researchers (19. September bis 23. September 2022, OTH Regensburg) Y1 - 2022 U6 - https://doi.org/10.13140/RG.2.2.30303.53928 N1 - Die Klausurwoche wird vom Bundesministerium für Bildung und Forschung (BMBF) (Förderkennzeichen: 01GP2185, Projektkürzel: IVG-AU-PP) finanziell gefördert. ER - TY - JOUR A1 - Hantsch, Carolin A1 - Westner, Markus A1 - Matschi, Markus T1 - IT/OT-Konvergenz: Status-Quo und Umsetzungsempfehlungen JF - HMD Praxis der Wirtschaftsinformatik N2 - Organisationen machen große Anstrengungen zur Verbesserung ihrer Ambidextrie, d. h. ihrer Fähigkeit sowohl Exploitationsziele (z. B. Effizienz, Vorhersagbarkeit) als auch Explorationsziele (z. B. Anpassbarkeit, Innovation) zu erreichen. Obwohl gemäß der Praxisliteratur Technologie in Software-Projekten dabei eine zentrale Rolle spielen kann, gibt es kaum Forschung dazu, wie technologische Faktoren Ambidexterie in Software-Projekten beeinflussen. In dieser Studie untersuchen wir die Rolle dreier technologischer Faktoren: kontinuierliche Integration, Standardisierung und Microservice-Architektur. Die Ergebnisse einer Mehrinformanten-Umfrage in 95 Projekten in der Schweiz und Dänemark zeigen, dass kontinuierliche Integration und Standardisierung mit höherer Ambidexterie einhergehen, während der Zusammenhang zwischen Microservice-Architektur und Ambidextrie nicht signifikant ist. Unser Artikel geht über die existierende Forschung hinaus, indem er zeigt, dass kontinuierliche Integration und Standardisierung nicht nur Exploitation, sondern auch Exploration fördern können. Wir diskutieren auch Gründe für den insignifikanten Zusammenhang zwischen Microservice-Architektur und Ambidextrie. N2 - This study examines IT/OT Convergence in 31 predominantly large German companies. It presents an “IT/OT Governance Framework” as a specific model for successful convergence implementation. The analysis reveals a heterogeneous level of convergence maturity across the examined companies, the majority of which are at the beginning or in the implementation phase. Close cooperation between IT and OT is favored, but without IT completely taking over OT. An IT/OT tandem consisting of a CIO and a central OT responsible person is seen as the ideal way to take responsibility. Six specific recommendations were derived from the interviews and included in the IT/OT Governance Framework developed. These include ensuring top management support, using security as a driver, introducing a central OT responsible person, bringing IT and OT teams physically closer together, continuously demonstrating the added value of convergence, and taking a step-by-step approach to implementation. KW - IT/OT Convergence KW - Operational Technology KW - OT KW - Governance Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-77937 N1 - Corresponding author der OTH Regensburg: Markus Westner PB - Springer Nature ER - TY - JOUR A1 - Schultz, Maximilian A1 - Hauer, Franziska A1 - Haug, Sonja A1 - Weber, Karsten T1 - Künstliche Intelligenz in sozialen Organisationen implementieren BT - von der Einzelinitiative zur Strategie JF - Sozialwirtschaft N2 - Die Digitalisierung wird in der Gesellschaft seit vielen Jahren thematisiert. Durch Künstliche Intelligenz (KI) hat diese Diskussion einen zusätzlichen Anstoß bekommen. Inbesondere für gemeinwohlorientierte Organisationen bieten sich Potenziale sowie Risiken. Sie könnten zur Entlastung von Fachkräften, zur Verbesserung organisatorischer Abläufe und zur Entwicklung neuer Unterstützungsangebote beitragen. Angesichts chronischer Herausforderungen wie Fachkräftemangel, Ressourcenknappheit und wachsender Komplexität von Arbeitsprozessen erscheint KI daher als möglicher Hebel für eine tiefgreifende Transformation. KW - KI KW - Sozialwirtschaft Y1 - 2025 U6 - https://doi.org/10.5771/1613-0707-2025-5-35 VL - 35 IS - 5 SP - 35 EP - 38 PB - nomos Verlag ER - TY - GEN A1 - Weber, Karsten T1 - KI-Nutzung für (psychisch) kranke Menschen: Auswirkungen auf das Professionsverständnis der Fachkräfte Y1 - 2024 ER - TY - GEN A1 - Weber, Karsten T1 - Elektrisch + digital = nachhaltig? Welche Nachhaltigkeitsgewinne haben neue Mobilitätformen? Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Medizin, Mobilität, Medien: Digitaler Wandel als Chance und Herausforderung Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Der Mars zwischen Science und Fiction Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Nachhaltigkeit ist (k)eine Frage der Philosophie Y1 - 2025 ER - TY - GEN A1 - Weber, Karsten T1 - Mögliche Zukünfte der Künstlichen Intelligenz Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Mögliche Zukünfte der Künstlichen Intelligenz Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Der Mensch nach Maß?! Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - The weapons of war and conflict are technology BT - Security from the viewpoint of Technology Assessment Y1 - 2023 ER - TY - GEN A1 - Weber, Karsten T1 - Social science research, research on acceptance, and applied ethics on technology and artificial intelligence in the health sector Y1 - 2024 ER - TY - GEN A1 - Weber, Karsten T1 - KI und Roboter in der Science Fiction – eine (augenzwinkernde) Einführung zur KI-Forschung Y1 - 2024 ER -