TY - CHAP A1 - Uotila, Valter A1 - Groppe, Sven A1 - Gruenwald, Le A1 - Lu, Jiaheng A1 - Mauerer, Wolfgang T1 - Preface QDSM T2 - Joint Workshops at 49th International Conference on Very Large Data Bases (VLDBW’23) — International Workshop on Quantum Data Science and Management (QDSM’23), August 28 - September 1, 2023, Vancouver, Canada (CEUR Workshop Proceedings) N2 - The first international workshop on Quantum Data Science and anagement (QDSM), co-located with VLDB 2023, is centered around addressing the possibilities of quantum computing for data science and data management. Quantum computing is a relatively new and emerging field that is believed to have huge computational potential in the future. In the QDSM workshop, we want to provide a venue for discussing and publishing novel results of applying quantum computing to hard data science and data management problems. These problems include join order optimization, designing efficient quantum feature maps, studying possibilities of solving linear programs with quantum algorithms, and divergent index tuning with quantum machine learning. Besides, we include a short and visionary survey on quantum computing for databases. Theworkshop provides a platform for active discussion on these and related topics. Y1 - 2023 UR - https://ceur-ws.org/Vol-3462/QDSM1.pdf PB - RWTH Aachen, Sun SITE Central Europe CY - Aachen ER - TY - CHAP A1 - Thelen, Simon A1 - Eder, Friedrich A1 - Melzer, Matthias A1 - Nunes, Danilo Weber A1 - Stadler, Michael A1 - Rechenauer, Christian A1 - Obergrießer, Mathias A1 - Jubeh, Ruben A1 - Volbert, Klaus A1 - Dünnweber, Jan T1 - A Slim Digital Twin For A Smart City And Its Residents T2 - SOICT '23: Proceedings of the 12th International Symposium on Information and Communication Technology, 2023, Hi Chi Minh, Vietnam N2 - In the engineering domain, representing real-world objects using a body of data, called a digital twin, which is frequently updated by “live” measurements, has shown various advantages over tradi- tional modelling and simulation techniques. Consequently, urban planners have a strong interest in digital twin technology, since it provides them with a laboratory for experimenting with data before making far-reaching decisions. Realizing these decisions involves the work of professionals in the architecture, engineering and construction (AEC) domain who nowadays collaborate via the methodology of building information modeling (BIM). At the same time, the citizen plays an integral role both in the data acquisition phase, while also being a beneficiary of the improved resource management strategies. In this paper, we present a prototype for a “digital energy twin” platform we designed in cooperation with the city of Regensburg. We show how our extensible platform de- sign can satisfy the various requirements of multiple user groups through a series of data processing solutions and visualizations, in- dicating valuable design and implementation guidelines for future projects. In particular, we focus on two example use cases concern- ing building electricity monitoring and BIM. By implementing a flexible data processing architecture we can involve citizens in the data acquisition process, meeting the demands of modern users regarding maximum transparency in the handling of their data. KW - smart city KW - AI KW - digital twin KW - artificial intelligence KW - urban planning KW - BIM KW - portal system Y1 - 2023 SN - 979-8-4007-0891-6 U6 - https://doi.org/10.1145/3628797.3628936 SP - 8 EP - 15 PB - ACM ER - TY - BOOK A1 - Scheid, Sandro A1 - Vogl, Stefanie T1 - Data Science: Grundlagen, Methode und Modelle der Statistik KW - Big Data KW - Data Mining KW - Data Science Y1 - 2021 SN - 978-3-446-46663-0 SN - 978-3-446-47001-9 U6 - https://doi.org/10.3139/9783446470019 PB - Hanser ER - TY - JOUR A1 - Kratzer, Simon A1 - Westner, Markus A1 - Strahringer, Susanne T1 - Traction with fraction: Strategic IS management in SMEs through Fractional CIOs JF - International Journal of Information Systems and Project Management N2 - Small and medium-sized enterprises (SMEs) increasingly need to manage nformation technology (IT) effectively in order to remain competitive. However, compared to larger organizations, SMEs often face challenges in terms of resources and employer attractiveness, and regularly do not have the need to employ a Chief Information Officer (CIO) on a full-time basis. To address this issue, a growing number of global experts have begun to provide CIO services on a part-time basis for multiple clients simultaneously. This approach allows SMEs to tap into the expertise of experienced IT leaders at a fraction of the cost and without committing to long-term arrangements. While these professionals, known as “Fractional CIOs”, have proven their value in the field, there has been a lack of academic research on this emerging trend. Therefore, we carried out a comprehensive research project between 2020 and 2023, involving 62 Fractional CIOs from 10 countries. The research produced a definition, different types of engagements, and success factors for Fractional CIOs and their engagements. This paper summarizes these findings for a wider audience of academics and practitioners. KW - Fractional CIO KW - Chief Information Officer KW - SMEs KW - small businesses Y1 - 2024 U6 - https://doi.org/10.12821/ijispm120101 SN - 2182-7788 VL - 12 IS - 1 SP - 5 EP - 16 ER - TY - JOUR A1 - Dahmen, Victoria A1 - Weikl, Simone A1 - Bogenberger, Klaus T1 - Interpretable Machine Learning for Mode Choice Modeling on Tracking-Based Revealed Preference Data JF - Transportation Research Record: Journal of the Transportation Research Board N2 - Mode choice modeling is imperative for predicting and understanding travel behavior. For this purpose, machine learning (ML) models have increasingly been applied to stated preference and traditional self-recorded revealed preference data with promising results, particularly for extreme gradient boosting (XGBoost) and random forest (RF) models. Because of the rise in the use of tracking-based smartphone applications for recording travel behavior, we address the important and unprecedented task of testing these ML models for mode choice modeling on such data. Furthermore, as ML approaches are still criticized for leading to results that are hard to understand, we consider it essential to provide an in-depth interpretability analysis of the best-performing model. Our results show that the XGBoost and RF models far outperform a conventional multinomial logit model, both overall and for each mode. The interpretability analysis using the Shapley additive explanations approach reveals that the XGBoost model can be explained well at the overall and mode level. In addition, we demonstrate how to analyze individual predictions. Lastly, a sensitivity analysis gives insight into the relative importance of different data sources, sample size, and user involvement. We conclude that the XGBoost model performs best, while also being explainable. Insights generated by such models can be used, for instance, to predict mode choice decisions for arbitrary origin–destination pairs to see which impacts infrastructural changes would have on the mode share. KW - travel behavior KW - sensitivity analysis KW - smartphone tracking KW - mode choice KW - revealed preference KW - interpretable machine learning Y1 - 2024 U6 - https://doi.org/10.1177/03611981241246973 SN - 0361-1981 VL - 2678 IS - 11 SP - 2075 EP - 2091 PB - SAGE Publications ER - TY - JOUR A1 - Brosig, Christoph A1 - Gräubig, Dix M. A1 - Strahringer, Susanne A1 - Westner, Markus T1 - Prerequisites and Causal Recipes for Manufacturers’ IT-Enabled Service Innovation Success JF - Communications of the Association for Information Systems N2 - For manufacturing firms, success in innovating IT-enabled services is a critical antecedent to benefit from digital servitization of their business models. Digital servitization literature has explored mechanisms for success in innovating IT-enabled services, indicating that the phenomenon is multifaceted and needs to be explained from multiple theoretical perspectives. We derive a conceptual model for success in innovating IT-enabled services covering its multifaceted nature by referring to knowledge-based and organizational control theory. We test this model using qualitative cases of IT-enabled service innovation initiatives in manufacturing firms and use set-theoretic analyses to account for the multifaceted nature of the phenomenon. The necessary condition analysis yields that a certain degree of service innovation capabilities is a prerequisite for success. With the results of a qualitative comparative analysis, we obtain five solution terms as causal recipes for success in innovating IT-enabled services. Our results contribute to research by offering a theory-based approach that explains the multiplicity of success in IT-enabled service innovation. Practitioners benefit from our results by understanding prerequisites and causal recipes for success while learning from unsuccessful initiatives in innovating IT-enabled services of manufacturing firms. Our study is also an example of how to rigorously calibrate qualitative data using a structured approach. Y1 - 2024 U6 - https://doi.org/10.17705/1CAIS.05509 SN - 1529-3181 VL - 55 SP - 205 EP - 256 PB - Association for Information Systems, AIS ER - TY - CHAP A1 - Legler, Katharina A1 - Jajja, Muhammad Sheheryar A1 - Volbert, Klaus T1 - Analysis and Design of Smart Components in Digital Energy Twins T2 - Proceedings of the 10th International Conference on Internet of Things, Big Data and Security., Porto, Portugal April 6-8, 2025 N2 - The energy crisis, energy demand growth, and dependence on fossil fuels worldwide have made urgent action necessary for us to seek sustainability in energy production and use. Digital technologies, especially Digital Energy Twins, have immense potential to reduce energy consumption, thereby reducing environmental impacts, particularly in the building sector. This paper presents the development of a digital energy twin that supports sustainable energy consumption analysis and optimization. Our study begins with a comprehensive analysis of the energy consumption data, the weather data, and the building plans as a solid basis for the analysis. We identify key energy consumption trends and patterns across different timescales and device-specific details that could be optimized, such as base load consumption and device-specific inefficiencies. A key part of our work is forecasting energy consumption using time series models, such as the ARIMA model, which promises to be useful in identify ing patterns for improving energy efficiency. Overall, our study provides valuable insights into energy optimization and could form the base for further advances in digital energy twins at OTH Regensburg, helping to contribute to its sustainable development goals and smart campus initiatives. KW - Data Visualization KW - Digital Twins KW - Internet of Things KW - Machine Learning Models Y1 - 2025 SN - 978-989-758-750-4 U6 - https://doi.org/10.5220/0013289900003944 SP - 263 EP - 272 PB - SciTePress - Science and Technology Publications CY - Setúbal, Portugal ER - TY - CHAP A1 - Schildgen, Johannes A1 - Heinz, Florian T1 - A Showcase of LLMs in Action: SQL Generation from Natural Language (Demo Paper) T2 - Datenbanksysteme für Business, Technologie und Web - Workshopband (BTW 2025) N2 - Today, large language models are a very efficient tool for human-computer interaction using natural language. Chatbots like ChatGPT and their corresponding APIs can be used to solve a large variety of tasks that are provided in human-comprehensible sentences, for example generating SQL queries. Executing spoken SQL queries in a database system poses a challenge, because the various syntactical details of SQL are usually not provided verbally. Here, the LLM can help to augment the recognized raw query with the syntax elements needed for successful execution. Furthermore, the correct spelling of table and column names can be derived from the database schema provided in the LLM prompt. This work showcases four use cases in which LLMs assist in querying database systems: (1) A plugin for phpMyAdmin for voice-query input in natural language, (2) a chart generator, (3) an Alexa skill, and (4) a speech-controlled action game SQL Invaders. Y1 - 2025 U6 - https://doi.org/10.18420/BTW2025-47 N1 - Datenbanksysteme für Business, Technologie und Web - Workshopband (BTW 2025) SP - 819 EP - 825 PB - Gesellschaft für Informatik CY - Bonn ER - TY - CHAP A1 - Heinz, Florian A1 - Schildgen, Johannes T1 - SQLinked - A Hybrid Approach for Local and Database-Remote Program Execution T2 - Datenbanksysteme für Business, Technologie und Web - Workshopband (BTW 2025) N2 - When working with today's relational databases, there is usually a clear boundary between the database server and the application, that interfaces with the database system using the query language SQL. The concept of stored procedures allows to move complex parts of the business logic into the database server for various reasons, as, for instance, to reduce the latency of ELT processes that involve several database queries building on each other like distributing records into tables according to their attribute values. Creating and maintaining such stored procedures can be a challenging task, however. The idea pursued in this paper is to create a programming language, as well as a compilation and execution environment that allows the user to mark parts of the application code for being automatically compiled to and later be executed as a stored procedure in the database instead of the execution environment of the actual application. This blurs the border between database and application and provides a natural and maintenance-friendly way for offloading latency sensitive parts of the code to the database system. Y1 - 2025 U6 - https://doi.org/10.18420/BTW2025-128 SP - 257 EP - 263 PB - Gesellschaft für Informatik CY - Bonn ER - TY - CHAP A1 - Penzkofer, Vinzent A1 - Baumann, Timo T1 - Evaluating and Fine-Tuning Retrieval-Augmented Language Models to Generate Text With Accurate Citations T2 - Proceedings of the 20th Conference on Natural Language Processing (KONVENS 2024), September 10-13, 2024, Vienna, Austria N2 - Retrieval Augmented Generation (RAG) is becoming an essential tool for easily accessing large amounts of textual information. However, it is often challenging to determine whether the information in a given response originates from the retrieved context, the training, or is a result of hallucination. Our contribution in this area is twofold. Firstly, we demonstrate how existing datasets for information retrieval evaluation can be used to assess the ability of Large Language Models (LLMs) to correctly identify relevantsources. Our findings indicate that there are notable discrepancies in the performance of different current LLMs in this task. Secondly, we utilise the datasets and metrics for citation evaluation to enhance the citation quality of small open-weight LLMs through fine-tuning. We achieve significant performance gains in this task, matching the results of much larger models. Y1 - 2024 UR - https://aclanthology.org/2024.konvens-main.6.pdf SP - 57 EP - 64 PB - Association for Computational Linguistics ER - TY - CHAP A1 - Baumann, Timo A1 - Eller, Korbinian A1 - Gagarina, Natalia ED - Lal, Yash Kumar ED - Clark, Elizabeth ED - Iyyer, Mohit ED - Chaturvedi, Snigdha ED - Brei, Anneliese ED - Brahman, Faeze ED - Chandu, Khyathi Raghavi T1 - BERT-based Annotation of Oral Texts Elicited via Multilingual Assessment Instrument for Narratives T2 - Proceedings of the the 6th Workshop on Narrative Understanding (WNU), November 12th to November 16th 2024, Miami, Florida, USA N2 - We investigate how NLP can help annotate the structure and complexity of oral narrative texts elicited via the Multilingual Assessment Instrument for Narratives (MAIN). MAIN is a theory-based tool designed to evaluate the narrative abilities of children who are learning one or more languages from birth or early in their development. It provides a standardized way to measure how well children can comprehend and produce stories across different languages and referential norms for children between 3 and 12 years old. MAIN has been adapted to over ninety languages and is used in over 65 countries. The MAIN analysis focuses on story structure and story complexity which are typically evaluated manually based on scoring sheets. We here investigate the automation of this process using BERT-based classification which already yields promising results. Y1 - 2024 U6 - https://doi.org/10.18653/v1/2024.wnu-1.16 SP - 99 EP - 104 PB - Association for Computational Linguistics CY - Stroudsburg, PA, USA ER - TY - CHAP A1 - Graf, Julian A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - Architecture of an intelligent Intrusion Detection System for Smart Home T2 - 2020 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops): 2020, Austin, Texas, USA N2 - Increasing cyber-attacks on Internet of Things (IoT) environments are a growing problem of digitized households worldwide. The purpose of this study is to investigate how an intelligent Intrusion Detection System (iIDS) can provide more security in IoT networks with a novel architecture, combining multiple classical and machine learning approaches. By combining classical security analysis methods and modern concepts of artificial intelligence, we increase the quality of attack detection and can therefore conduct dedicated attack suppression. The architectural image of the iIDS consists of different layers, which in parts achieve self-sufficient results. The results of the different modules are calculated by means of statement variables and evaluation techniques adapted for the individual module elements and subsequently combined by limit value considerations. The architecture image combines approaches for the analysis and processing of IoT network traffic and evaluates it to an aggregated score. From this result it can be determined whether the analyzed data indicates device misuse or attempted break-ins into the network. This study answers the questions whether a connection between classical and modern concepts for monitoring and analyzing IoT network traffic can be implemented meaningfully within a reliable architecture of an iIDS. KW - Internet of Things KW - artificial intelligence KW - smart Home KW - Intrusion KW - Detection System Y1 - 2020 SN - 978-1-7281-4716-1 U6 - https://doi.org/10.1109/PerComWorkshops48775.2020.9156168 SP - 1 EP - 6 PB - IEEE ER - TY - JOUR A1 - Hinterberger, Lukas A1 - Fischer, Sebastian A1 - Weber, Bernhard A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - Extended Definition of the Proposed Open Standard for IoT Device IdentificAtion and RecoGnition (IoTAG) JF - International Journal on Advances in Internet Technology N2 - Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity. A lot of security issues concern IoT devices and the networks they are integrated. To help getting an overview of an IoT network, the devices and the security, we propose a scoring system to get a good impression of IT security. This system generates single scores for each device, using features like encryption, update behavior, etc. Furthermore, a summarized score for the whole network is calculated, to show the status of the network security in an easy way for the administrator. To enable the scoring system, a precise list of the existing devices and their operating status is necessary. To achieve this, we present an open standard for the IoT Device IdentificAtion and RecoGnition (short IoTAG), which requires that devices report, e.g., their name, an unique ID, the firmware version and the supported encryption. The proposed standard is described in detail and an implementation guideline is given in this paper. Additionally, information about how to realize the serialization, the integrity and the communication with IoTAG. KW - Internet of Things KW - device identification KW - open standard KW - security rating KW - IoTAG Y1 - 2020 UR - https://www.thinkmind.org/articles/inttech_v13_n34_2020_2.pdf VL - 13 IS - 3 & 4 SP - 110 EP - 121 PB - IARIA ER - TY - CHAP A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf ED - Trinitis, Carsten ED - Pionteck, Thilo T1 - Work in Progress: Security Analysis for Safety-critical Systems BT - Smart Grid and IoT T2 - ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC N2 - Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. Currently in Germany, the SG is under construction. In order to use future innovative services, SG and IoT must be combined. For this, we connect the SG Infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). Open research question in this context are the security requirements architecture SG and IoT and the mechanism for authentication and authorisation in future application (SG and IoT). Due to the increasing networking of the systems (SG and IoT) new threats and attack vectors arise. The attacks to the architecture influence the target of authenticity, security and privacy. For the security analysis we focus on two communication points: the communication between the smart meter gateway, and the IoT device. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. With this two connections, new threats emerge. A security analysis over all the connections, including the vulnerability and the ability of an attacker, is developed in this paper. The analysis shows us challenges of the communication between IoT and SG. For this, we defined technical and organizational requirements for authentication and authorization. Current authentication and authorization mechanisms are no longer sufficient for the defined requirements. We present the Role-based trust model for Safety-critical Systems for these defined requirements. The new trust model is integrated into a role-based access control model. It defines data classes, which separate the sensitive and non-sensitive information. KW - smart grid KW - Internet of Things (IoT) KW - security analysis; KW - safety-critical infrastructure KW - trust model Y1 - 2019 SN - 978-3-8007-4957-7 SP - 101 EP - 106 PB - VDE Verlag GmbH CY - Berlin ER - TY - CHAP A1 - Görtz, Stefan A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - Generation of Distributed Denial of Service Network Data with Phyton and Scapy T2 - CLOUD COMPUTING 2023 : The Fourteenth International Conference on Cloud Computing, GRIDs, and Virtualization, June 26 - 30, 2023, Nice, France N2 - Distributed Denial of Service attacks are among the most common and widespread network attacks. Due to their nature, they are difficult to defend. Intrusion detection systems, based on machine learning, are a promising approach to counter this threat. But to train these systems, data sets with Distributed Denial of Service attacks are needed. An implemented Python program, which creates Denial of Services packets and simulates distributed sending by multithreading, is presented. Unlike synthetically generated data with the use of simulators, real network traffic is generated. This eliminates errors and offers a better basis of data, as machine learning algorithms need data that is as error-free as possible in order to learn efficiently. Y1 - 2023 UR - https://www.thinkmind.org/index.php?view=instance&instance=CLOUD+COMPUTING+2023 SN - 978-1-68558-044-5 SP - 8 EP - 14 PB - IARIA ER - TY - CHAP A1 - Vogl, Peter A1 - Weber, Sergei A1 - Graf, Julian A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - Design and Implementation of an Intelligent and Model-based Intrusion Detection System for Iot Networks T2 - Cloud Computing 2022: The Thirteenth International Conference on Cloud Computing, GRIDs, and Virtualization, Special Track FAST-CSP, Barcelona, Spain, 24.-28.04.2022 N2 - The ongoing digitization and digitalization entails the increasing risk of privacy breaches through cyber attacks. Internet of Things (IoT) environments often contain devices monitoring sensitive data such as vital signs, movement or surveil-lance data. Unfortunately, many of these devices provide limited security features. The purpose of this paper is to investigate how artificial intelligence and static analysis can be implemented in practice-oriented intelligent Intrusion Detection Systems to monitor IoT networks. In addition, the question of how static and dynamic methods can be developed and combined to improve net-work attack detection is discussed. The implementation concept is based on a layer-based architecture with a modular deployment of classical security analysis and modern artificial intelligent methods. To extract important features from the IoT network data a time-based approach has been developed. Combined with network metadata these features enhance the performance of the artificial intelligence driven anomaly detection and attack classification. The paper demonstrates that artificial intelligence and static analysis methods can be combined in an intelligent Intrusion Detection System to improve the security of IoT environments. KW - Intrusion Detection KW - Artificial Intelligence KW - Machine Learning KW - Network Security KW - Internet of Things Y1 - 2022 UR - https://www.thinkmind.org/index.php?view=article&articleid=cloud_computing_2022_1_20_28003 SN - 978-1-61208-948-5 SP - 7 EP - 12 PB - IARIA CY - [Wilmington, DE, USA] ER - TY - CHAP A1 - Hinterberger, Lukas A1 - Weber, Bernhard A1 - Fischer, Sebastian A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - IoT Device IdentificAtion and RecoGnition (IoTAG) T2 - CLOUD COMPUTING 2020, The Eleventh International Conference on Cloud Computing, GRIDs and Virtualization N2 - To ensure the secure operation of IoT devices in the future, they must be continuously monitored. This starts with an inventory of the devices, checking for a current software version and extends to the encryption algorithms and active services used. Based on this information, a security analysis and rating of the whole network is possible. To solve this challenge in the growing network environments, we present a proposal for a standard. With the IoT Device IdentificAtion and RecoGnition (IoTAG), each IoT device reports its current status to a central location as required and provides information on security. This information includes a unique ID, the exact device name, the current software version, active services, cryptographic methods used, etc. The information is signed to make misuse more difficult and to ensure that the device can always be uniquely identified. In this paper, we introduce IoTAG in detail and describe the necessary requirements. KW - Internet of Things KW - device identification KW - IoTAG KW - security rating Y1 - 2020 UR - https://thinkmind.org/articles/cloud_computing_2020_2_10_28002.pdf SN - 978-1-61208-778-8 SP - 17 EP - 23 PB - IARIA ER - TY - GEN ED - Herrmann, Frank T1 - SIMUL 2022 : the Fourteenth International Conference on Advances in System Simulation : October 16-20, 2022, Lisbon, Portugal Y1 - 2022 UR - https://www.thinkmind.org/download_full.php?instance=SIMUL+2022 SN - 978-1-68558-001-8 PB - IARIA ER - TY - JOUR A1 - Fuxen, Philipp A1 - Schönhärl, Stefan A1 - Schmidt, Jonas A1 - Gerstner, Mathias A1 - Jahn, Sabrina A1 - Graf, Julian A1 - Hackenberg, Rudolf A1 - Mottok, Jürgen T1 - A Cybersecurity Education Platform for Automotive Penetration Testing JF - International Journal On Advances in Security N2 - The paper presents a penetration testing framework for automotive IT security education and evaluates its realization. The automotive sector is changing due to automated driving functions, connected vehicles, and electric vehicles. This development also creates new and more critical vulnerabilities. This paper addresses a possible countermeasure, automotive IT security education. Some existing solutions are evaluated and compared with the created Automotive Penetration Testing Education Platform (APTEP) framework. In addition, the APTEP architecture is described. It consists of three layers representing different attack points of a vehicle. The realization of the APTEP is a hardware case and a virtual platform referred to as the Automotive Network Security Case (ANSKo). The hardware case contains emulated control units and different communication protocols. The virtual platform uses Docker containers to provide a similar experience over the internet. Both offer two kinds of challenges. The first introduces users to a specific interface, while the second combines multiple interfaces, to a complex and realistic challenge. This concept is based on modern didactic theories, such as constructivism and problem-based/challenge-based learning. Computer Science students from the Ostbayerische Technische Hochschule (OTH) Regensburg experienced the challenges as part of a elective subject. In an online survey evaluated in this paper, they gave positive feedback. Also, a part of the evaluation is the mapping of the ANSKo and the maturity levels in the Software Assurance Maturity Model (SAMM) practice Education & Guidance as well as the SAMM practice Security Testing. The scientific contribution of this paper is to present an APTEP, a corresponding learning concept and an evaluation method. KW - Challenge-based Learning KW - Education Framework KW - Penetration Testing KW - Automotive KW - IT-Security Education Y1 - 2022 UR - http://www.iariajournals.org/security/sec_v15_n34_2022_paged.pdf SN - 1942-2636 VL - 15 IS - 3&4 SP - 106 EP - 118 PB - IARIA ER - TY - CHAP A1 - Weber, Bernhard A1 - Hinterberger, Lukas A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf ED - Duncan, Bob ED - Lee, Yong Woo ED - Popescu, Manuela T1 - How to Prevent Misuse of IoTAG? T2 - Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal N2 - Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network. KW - Internet of Things KW - IoTAG KW - device pairing KW - device authentication KW - trusted connection Y1 - 2021 UR - https://www.thinkmind.org/articles/cloud_computing_2021_1_40_28006.pdf SN - 978-1-61208-845-7 SN - 2308-4294 PB - IARIA CY - Wilmington, DE, USA ER - TY - CHAP A1 - Stadler, Sebastian A1 - Cornet, Henriette A1 - Mazeas, Damien A1 - Chardonnet, Jean-Remy A1 - Frenkler, Fritz T1 - IMPRO: IMMERSIVE PROTOTYPING IN VIRTUAL ENVIRONMENTS FOR INDUSTRIAL DESIGNERS T2 - Proceedings of the Design Society: DESIGN Conference 2020 N2 - Computer-Aided Design (CAD) constitutes an important tool for industrial designers. Similarly, Virtual Reality (VR) has the capability to revolutionize how designers work with its increased sense of scale and perspective. However, existing VR CAD applications are limited in terms of functionality and intuitive control. Based on a comparison of VR CAD applications, ImPro, a new application for immersive prototyping for industrial designers was developed. The user evaluations and comparisons show that ImPro offers increased usability, functionality, and suitability for industrial designers. KW - immersive prototyping KW - industrial design KW - virtual reality (VR) KW - human-computer interaction KW - computer-aided design (CAD) Y1 - 2020 U6 - https://doi.org/10.1017/dsd.2020.81 SP - 1375 EP - 1384 PB - Cambridge University Press ER - TY - RPRT A1 - Vetter, Miriam A1 - Haug, Sonja A1 - Dotter, Caroline A1 - Weber, Karsten T1 - EVEKT – Erhöhung der Verbraucherpartizipation an der Energiewende durch KI-Technologien und datenbasierte Mehrwertdienste. 5. Arbeitspapier: Segmentierung von Verbrauchergruppen mittels Clusteranalyse basierend auf einer Bevölkerungsbefragung in Deutschland N2 - Ziel dieses Arbeitspapiers ist es, Haushalte in unterschiedliche Verbrauchergruppen zu kategorisieren, um Schlussfolgerungen für eine zielgerichtete Ansprache zur Stromverbrauchsreduktion zu ziehen. In diesem Bericht werden Umfragedaten einer repräsentativen Online-Bevölkerungsbefragung für Deutschland (11/2023, n=2.027) ausgewertet. Zur Differenzierung von Verbrauchergruppen wurde eine Two-Step-Clusteranalyse zur Bestimmung der Clustervariablen und Bestimmung der Clusteranzahl durchgeführt. Anschließend wurden die Ergebnisse mit einer k-means-Clusterlösung validiert; mit der metrische soziodemografische Variablen (Alter, Haushaltsgröße, Nettoäquivalenzeinkommen und monatliche Stromkosten) aufgenommen wurden. Zwei Verbrauchersegmente resultierten aus dieser Clusterbildung: Cluster 1 besteht aus jüngeren, größeren Haushalten mit geringerem Einkommen, die höhere Stromkosten aufweisen als Cluster 2, welches aus älteren Haushalten mit einer geringeren Haushaltsgröße von durchschnittlich 1,63 Personen und höherem Einkommen sowie geringeren Stromkosten besteht. Es wird untersucht, wie sich die Cluster im Hinblick auf Nutzungsszenarien für Smart-Meter-Anwendungen, die Einstellung zum Zugriff auf Energiedaten, damit in Verbindung stehende Anreize und potenzielle Empfänger von Energiedaten unterscheiden lassen. Schlussfolgerungen für die zielgruppengerechte Adres-sierung von Energiesparwendungen werden abgeleitet. KW - Online-Bevölkerungsumfrage KW - Clustering KW - Verbraucherakzeptanz KW - Smart-Meter KW - intelligente Messsysteme Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-77436 ER - TY - RPRT A1 - Schultz, Maximilian A1 - Hauer, Franziska A1 - Haug, Sonja A1 - Weber, Karsten T1 - KINiro, Künstliche Intelligenz für Nichtregierungsorganisationen - Bedarf, Akzeptanz und Umsetzungsmöglichkeiten. 4. Arbeitspapier: Künstliche Intelligenz in Nichtregierungsorganisationen: In-depth-Interviews N2 - Vor dem Hintergrund der wachsenden Bedeutung Künstlicher Intelligenz (KI) in unterschiedlichen gesellschaftlichen Kontexten untersucht dieses Arbeitspapier aus dem Projekt KINiro den Einsatz, die Bedarfe sowie die Akzeptanz von KI in Nichtregierungsorganisationen (NROs). Im Rahmen des Projekts „KINiro – Bedarf, Akzeptanz und Umsetzungsmöglichkeiten“ wurden zehn vertiefende Expert*innen-Interviews mit Vertreter*innen verschiedener NROs geführt. Ziel war es, ein differenziertes und vertiefendes Verständnis von Wissen, benötigten und vorhandenen Ressourcen, organisatorischen Strukturen, Umsetzungsmöglichkeiten und das Erheben von Akzeptanz und die Gründe für Nicht-Akzeptanz zu erheben. Das Arbeitspapier ist das vierte in dem Projekt und baut auf den Erkenntnissen des Scoping Reviews, der ersten qualitativen Studie und der großen quantitativen Studie auf. Die Ergebnisse zeigen, dass das Interesse an KI in NROs stark zugenommen hat, insbesondere nach der breiten Verfügbarkeit von KI-Anwendungen wie ChatGPT. Die befragten Organisationen experimentieren aktuell mit KI vorwiegend in den Bereichen Textproduktion, Datenanalyse, Wissensmanagement und Prozessoptimierung. Es werden auch spezielle KI-Anwendungen für die Bedarfe der NROs entwickelt und eingesetzt. Zugleich bestehen jedoch große Herausforderungen, insbesondere begrenzte finanzielle und personelle Ressourcen, fehlendes Know-how und der Mangel an Digitalisierung. Datenschutz und ethische Fragestellungen sowie mögliche Verzerrungen (Bias) sind zentrale Bedenken. Dennoch lassen sich erste erfolgreiche Umsetzungsstrategien erkennen, etwa die Bildung interner Arbeitsgruppen, die Unterstützung durch Führungskräfte, auch gezielte Schulungen sowie die Entwicklung von Leitlinien werden positiv bewertet. Diese Ansätze tragen dazu bei, Vorbehalte abzubauen und Akzeptanz zu fördern. Das Arbeitspapier zeigt damit, wie die vorherigen Arbeitspapiere, dass KI im gemeinwohlorientierten Sektor grundsätzlich auf Offenheit trifft, zugleich aber ein breites Spektrum an Voraussetzungen wie Ressourcen, Know-how, rechtliche Rahmenbedingungen und nutzbare Anwendungen benötigt werden, um das volle Potenzial von KI verantwortungsvoll auszunutzen. KW - Künstliche Intelligenz KW - KI KW - Nichtregierungsorganisationen KW - Qualitative Befragung KW - NGO Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-79471 CY - Regensburg ER - TY - THES A1 - Semmelmann, Ernst T1 - Einsatz eines optischen Lesers zum Auslesen von Stromzählerdaten N2 - An der Ostbayerischen Technischen Hochschule Regensburg existiert ein Forschungsprojekt für energieoptimiertes Wohnen. Im Zuge dessen werden im genossenschaftlichen Wohnquartier Margaretenau in Regensburg bereits Daten zum Stromverbrauch erfasst. Dafür wird ein separater Dreiphasenzähler verwendet, für dessen Installation jedoch eine Fachkraft notwendig ist. Eine Alternative stellen die bereits verbauten Stromzähler dar, die für die Stromabrechnung verwendet werden. Diese besitzen eine optische Schnittstelle, über die ermittelte Messgrößen ausgegeben werden können. Die Arbeit behandelt die Entwicklung eines Verfahrens, in dem diese Daten ausgelesen und zur Analyse abgespeichert werden. Dafür wird ein optischer Lesekopf verwendet, der die extrahierten Messwerte an einen Datenaggregator weiterleitet. Dieser wird durch einen Raspberry Pi realisiert, der die Daten aller Leseköpfe aufbereitet und anschließend an die zentrale Sammelstelle versendet, die an der Hochschule betrieben wird und bereits die Datensätze der externen Dreiphasenzähler verarbeitet. Diese fügt die Messwerte schließlich in eine Datenbank ein, damit sie für eine nachfolgende Analyse weiterverwendet werden können. In der Arbeit werden zuerst die theoretischen Grundlagen erläutert, was die Analyse der verwendeten Protokolle und das Funktionsprinzip des optischen Lesekopfs beinhaltet. Anschließend wird das entwickelte Verfahren beschrieben und die Konfiguration der eingesetzten Komponenten erläutert. Schließlich erfolgt die Evaluation der umgesetzten Methode im Hinblick auf die Datenkonsistenz und die Plausibilität der ausgelesenen Messwerte. KW - Elektrizitätszähler KW - Datenerfassung KW - Elektrizitätszähler KW - Datenerfassung KW - Optokopf KW - Verbrauchserfassung Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-80318 ER - TY - CHAP A1 - Neubauer, Katrin A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - Risk Analysis of the Cloud Infrastructure of Smart Grid and Internet of Things T2 - The Tenth International Conference on Cloud Computing, GRIDs, and Virtualization, (CLOUD COMPUTING 2019), 10th Mai 2019, Venice, Italy N2 - Cloud Computing (CC), Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. At the moment, CC is used as a service provider for IoT. Currently in Germany, the SG is under construction and a cloud connection to the infrastructure has not been implemented yet. To build the SG cloud, the new laws for privacy must be implemented and therefore it’s important to know which data can be stored and distributed over a cloud. In order to be able to use future innovative services, SG and IoT must be combined. For this, in the next step we connect the SG infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). In detail, we focus on two different connections: the communication between the smart meter switching box and the IoT device and the data transferred between the IoT and SG cloud. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. Private data, such as name, address and payment details, should not be transferred to the IoT cloud. With these two connections, new threads emerge. In this case, availability, confidentiality and integrity must be ensured. A risk analysis over all the cloud connections, including the vulnerability and the ability of an attacker and the resulting risk are developed in this paper. KW - Smart Grid KW - Internet of Things KW - security analysis KW - cloud computing KW - safety-critical infrastructure Y1 - 2019 UR - https://www.thinkmind.org/articles/cloud_computing_2019_6_20_28013.pdf SN - 978-1-61208-703-0 SN - 2308-4294 SP - 82 EP - 87 PB - IARIA ER - TY - CHAP A1 - Fischer, Sebastian A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - A Study about the Different Categories of IoT in Scientific Publications T2 - CLOUD COMPUTING 2020: the Eleventh International Conference on Cloud Computing, GRIDs and Virtualization, October 25-29, 2020, Nizza N2 - The Internet of Things (IoT) is widely used as a synonym for nearly every connected device. This makes it really difficult to find the right kind of scientific publication for the intended category of IoT. Conferences and other events for IoT are confusing about the target group (consumer, enterprise, industrial, etc.) and standardisation organisations suffer from the same problem. To demonstrate these problems, this paper shows the results of an analyses over IoT publications in different research libraries. The number of results for IoT, consumer, enterprise and industrial search queries were evaluated and a manual study about 100 publications was done. According to the research library or search engine, different results about the distribution of consumer-, enterprise- and industrial- IoT are visible. The comparison with the results of the manual evaluation shows that some search queries do not show all desired publications or that considerably more, unwanted results are returned. Most researchers do not use the keywords right and the exact category of IoT can only be accessed via the abstract. This shows major problems with the use of the term IoT and its minor limitations. KW - Internet of Things KW - IoT KW - publications KW - consumer KW - industrial KW - enterprise KW - categorization Y1 - 2020 UR - https://thinkmind.org/articles/cloud_computing_2020_2_20_28004.pdf SN - 978-1-61208-778-8 SP - 24 EP - 30 PB - IARIA ER - TY - RPRT A1 - Hauer, Franziska A1 - Haug, Sonja A1 - Schultz, Maximilian A1 - Scharf, Anna A1 - Weber, Karsten T1 - KINiro, Künstliche Intelligenz für Nichtregierungsorganisationen - Bedarf, Akzeptanz und Umsetzungsmöglichkeiten. 3. Arbeitspapier: Künstliche Intelligenz in Nichtregierungsorganisationen: Quantitative Erforschung der Umsetzung in deutschen NROs N2 - Hintergrund und Fragestellung Künstliche Intelligenz (KI) stellt ein wichtiges Thema der Digitalisierung dar und hat das Potenzial viele Arbeitsfelder grundlegend zu verändern. Mit dem Einsatz von KI wird die Hoffnung verbunden durch Automatisierung Zeit und Geld zu sparen. Dies könnte besonders interessant für Organisationen sein, die wenig Ressourcen zur Verfügung haben, da sie nicht gewinnorientiert oder ehrenamtlich arbeiten. Dazu zählen Nichtregierungsorganisationen (NRO), die einen wichtigen Bestandteil der Zivilgesellschaft darstellen. Aufgrund der komplexer werdenden Arbeit von NROs scheint KI Möglichkeiten zur Bewältigung aktueller und zukünftiger Herausforderungen zu bieten. Über den Einsatz von KI in NROs ist derzeit jedoch wenig bekannt. Methodik Es wurde eine quantitative Querschnittstudie deutscher Nichtregierungsorganisationen (NRO) zum Thema KI durchgeführt. Der Web-Survey baut auf den Erkenntnissen des Scoping Reviews und der qualitativen Interviews auf und vertieft den Einblick in die Bereiche aktuelle Nutzung von KI, Wissenstand in den Organisationen sowie vorhandene und noch benötigte Ressourcen. Dafür wurden 343 NROs verschiedener Größen und Handlungsfelder befragt und die Ergebnisse quantitativ analysiert. Ergebnisse Die meisten NROs sind der Anwendung von KI gegenüber positiv eingestellt und planen den Einsatz für die Zukunft oder testen ihn bereits. Dafür werden meist schnell umsetzbare, externe Anwendungen wie Schreibunterstützungen oder Textübersetzung für Bürotätigkeiten in den Arbeitsablauf eingebaut. Diese Nutzung beschränkt sich häufig auf erste Versuche und wird durch interessierte Einzelpersonen vorangetrieben. Für größere Umsetzung fehlen häufig Zeit, Geld und Wissen. Da die NROs selbst erwarten, dass die Nutzung von KI in den nächsten Jahren zunehmen wird, werden mehr Wissensaufbau und Austausch in den Organisationen notwendig. Schlussfolgerung Das Interesse an der Thematik scheint in der Zielgruppe vorhanden zu sein, wie die hohe Teilnahmebereitschaft nahelegt. Doch handelt es sich um ein eher neues Thema für die NROs, sodass der Einsatz noch getestet wird und feste Strukturen, welche die Anwendung systematisieren und regeln noch aufgebaut werden müssen. Um dies zu ermöglichen, sind mehr Wissen, Richtlinien und finanzielle Ressourcen notwendig. Die Umsetzung hat in den NROs jedoch wenig Priorität, da zunächst andere Hürden überwunden werden müssen. KW - Künstliche Intelligenz KW - KI KW - Nichtregierungsorganisation KW - NRO KW - qualitative Studie Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-73518 PB - OTH Regensburg CY - Regensburg ER - TY - RPRT A1 - Vetter, Miriam A1 - Haug, Sonja A1 - Dotter, Caroline A1 - Weber, Karsten T1 - EVEKT - Erhöhung der Verbraucherpartizipation an der Energiewende durch KI-Technologien und datenbasierte Mehrwertdienste. 4. Arbeitspapier: Akzeptanz und Nutzungsbereitschaft von Smart-Meter-Anwendungen und datenbasierten Mehrwertdiensten BT - Erste Auswertungen im Rahmen von EVEKT N2 - Um Leistungsschwankungen im Stromnetz durch fluktuierende erneuerbare Energien auszugleichen, sollen in Deutschland intelligente Messtechnologien in Privathaushalten verbaut werden. Diese gelten als zentraler Bestandteil sog. Smart-Grids (intelligente Stromnetze), die Stromnachfrage und -angebot steuern, um Stromnetzstabilität zu gewährleisten. Die Werte, die bei der Messung des Stromverbrauchs in Privathaushalten erhoben werden, können an die Verbraucher*innen mithilfe von Apps oder anderer Smart-Meter-Plattformen (datenbasierte Mehrwertdienste) rückgemeldet werden. Vor diesem Hintergrund wurde eine Online-Befragung der Wohnbevölkerung in Deutschland (n=2.027) durchgeführt, deren Ergebnisse im Folgenden dargestellt werden. Abgefragt wurden Bekanntheit, Nutzungsbereitschaft und Akzeptanz intelligenter Stromzähler bzw. Smart-Meter sowie Anwendungsszenarien. Der Hälfte der Befragten ist der Begriff Smart-Meter bekannt, etwa ein Zehntel aller Befragten verfügt nach eigenen Angaben bereits über einen intelligenten Stromzähler oder einen Smart-Meter. Zudem bestehen bei einem hohen Anteil der Befragten Erwartungen bezüglich Nützlichkeit und Energiereduktion. Ein Nutzungsszenario mit Kostensparhinweisen wird häufiger gewünscht als eine Anzeige des Echt-zeitstromverbrauchs mit dem Energieverbrauch von einzelnen Haushaltsgeräten. Bei den Inhalten der Apps würden vor allem finanzielle und ideelle Anreize zum Energiesparen motivieren. Dem Datenschutz messen die Befragten höchste Bedeutung zu. Als Schlussfolgerung kann formuliert werden, dass intelligente Messtechnologien bis zu einem gewissen Grad schon bekannt, aber in Deutschland wenig verbreitet sind. Die Nutzungsmöglichkeiten für Strom- und Kostenreduktion werden bisher kaum ausgeschöpft. Bestehenden (Datenschutz-)Bedenken gegenüber der Technologie sollte mit intensiver Aufklärung und Information begegnet werden. KW - Smart-Meter KW - Stromverbrauch KW - Soziale Aspekte KW - Motivatoren KW - Akzeptanz Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-77421 ER - TY - INPR A1 - Takayasu, Anna A1 - Weikl, Simone A1 - Dahmen, Victoria A1 - Bogenberger, Klaus T1 - Impact of Travel Stress and Infrastructure Quality on Cycling Mode Share: Insights From Multimodal Trajectory and Survey Data Analysis N2 - This study explores the relationship between travel stress, infrastructure quality, and cycling mode share. Utilizing multimodal trajectory data, survey responses on travel stress, and detailed road network information with geological and bicycle facility data, the study analyzes correlations between actual and perceived infrastructure quality, travel stress, and cycling mode share, as well as the impact of travel time and distance on cycling mode share. The results indicate significant correlations between perceived infrastructure quality and travel stress levels, and between travel stress levels and cycling mode share, particularly among regular bike users. However, clear correlations between actual and perceived infrastructure quality, and between perceived infrastructure quality and cycling mode share, were not observed. Additionally, direct effects of travel time and distance on cycling mode share were not evident. From these findings, three main insights emerge. Firstly, accurately estimating cycling mode share requires considering multiple parameters beyond travel time and distance. Secondly, to implement effective measures for bicycle facilities, a detailed analysis of perceived infrastructure quality, incorporating actual infrastructure design, is crucial. Lastly, travel stress, when carefully assessed with consideration of various factors beyond infrastructure design, emerges as a key determinant of travel mode choice. These insights have significant implications for future cycling research, including the development of travel mode choice models and estimating cycling demand. The study's valuable contributions advance efforts to promote cycling as a sustainable and preferred mode of transportation. Y1 - 2023 U6 - https://doi.org/10.13140/RG.2.2.30696.85766 PB - Researchgate ER - TY - CHAP A1 - Herrmann, Frank ED - Herrmann, Frank T1 - Performance of Storage Strategies in a Highbay Warehouse T2 - SIMUL 2022, the 14th International Conference on Advances in System Simulation: October 16-20, 2022, Lisbon, Portugal N2 - Storage and retrieval times of goods in inventory processes determine the efficiency of highbay warehouses in companies. These times are highly dependent on the performance of rack feeders. Storage strategies have the greatest influence. The paper shows the impact of an efficient control of rack feeders through storage strategies. Storage strategies which are typically used in industrial inventory processes are analysed. For the analysis a simulation system is implemented, so that the real process times are similar to the simulated ones. This results in recommendations for the use of storage strategies in companies. KW - highbay warehouse KW - storage strategies KW - simulation of storages and retrievals of goods KW - Inventory processes Y1 - 2022 UR - https://www.thinkmind.org/index.php?view=article&articleid=simul_2022_1_120_58002 SN - 2308-4537 SP - 69 EP - 73 PB - IARIA ER - TY - CHAP A1 - Haug, Sonja A1 - Vetter, Miriam A1 - Scharf, Anna A1 - Altenbuchner, Amelie A1 - Weber, Karsten ED - Heese, Carl ED - Schütz, Sandra ED - Obergrießer, Stefanie T1 - Nachhaltiges Wohnen: soziale Aspekte der Gebäudesanierung T2 - Die Nachhaltigkeitsziele der UN im Spiegel der Wissenschaft Beispiele aus der Sozial- und Gesundheitsforschung N2 - Der Beitrag befasst sich mit Nachhaltigkeitszielen der Vereinten Nationen im Bereich der bezahlbaren und sauberen Energie (Ausbau erneuerbare Energie, klimafreundliche Energie), nachhaltige Städte und Gemeinden (energieeffizienter Wohnungsbau) und Maßnahmen zum Klimaschutz (Senkung Ausstoß von Treibhausgasen). Für die Erreichung dieser Nachhaltigkeitsziele spielen die Wohnung und erforderliche Veränderungen im Verbrauch von Heizenergie und Strom eine bedeutende Rolle. Das Wissen über Energieeinsparungsmöglichkeiten und die Einstellungen der Bevölkerung wie auch anderer Akteur*innen und Stakeholder*innen zur energetischen Gebäudesanierung ist hierbei entscheidend. In diesem Kontext werden drei Forschungsprojekte des Instituts für Sozialforschung und Technikfolgenabschätzung (IST) an der OTH Regensburg vorgestellt: Erstens die Haushaltsbefragung in der Wohnbaugenossenschaft Margaretenau Regensburg (Projekt MAGGIE) zum Thema der energetischen Gebäudesanierung mit Fokus auf Heizung und Stromerzeugung mit regenerativer Energie. Zweitens das Projekt LivingH2, bei dem es um die Brennstoffzellentechnologie geht und drittens das Forschungsprojekt EVEKT in dem Anreizstrukturen für Energiesparmaßnahmen untersucht und in der Wohnsiedlung Herzobase in Herzogenaurach getestet werden sollen. Themenfelder, die in dem Beitrag im Spannungsfeld der sozialen, ökologischen und ökonomischen Nachhaltigkeitsdimensionen angesprochen werden, sind unter anderem Energiearmut, Interessenkonflikte zwischen Akteur*innen sowie Technikakzeptanz und Rebound-Effekte. Y1 - 2025 SN - 978-3-658-43334-5 U6 - https://doi.org/10.1007/978-3-658-43334-5_5 SP - 69 EP - 88 PB - Springer CY - Wiesbaden ER - TY - CHAP A1 - Folger, Fabian A1 - Hachani, Murad A1 - Fuxen, Philipp A1 - Graf, Julian A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf T1 - A Transformer-Based Framework for Anomaly Detection in Multivariate Time Series T2 - CLOUD COMPUTING 2025, The Sixteenth International Conference on Cloud Computing, GRIDs, and Virtualization, April 06, 2025 to April 10, 2025, Valencia, Spain N2 - This paper introduces a comprehensive Transformer-based architecture for anomaly detection in multivariate time series. Using self-attention, the framework efficiently processes high-dimensional sensor data without extensive feature engineering, enabling early detection of unusual patterns to prevent critical system failures. In a subsequent laboratory setup, the framework will be applied using fuzzing techniques to induce anomalies in an Electronic Control Unit, while monitoring side channels, such as temperature, voltage, and Controller Area Network messages. The overall structure of the architecture, as well as the necessary preprocessing steps, such as temporal aggregation and classification up to the optimization of the hyperparameters of the model, are presented. The evaluation of the model architecture with the postulated restrictions shows that the model handles anomaly scenarios in the dataset robustly. It is necessary to evaluate the extent to which the model can be used in practical applications in areas, such as cloud environments or the industrial Internet of Things. Overall, the results highlight the potential of Transformer models for the automated and reliable monitoring of complex time series data for deviations. KW - Artificial Intelligence KW - Transformer KW - Time Series KW - Anomaly Detection KW - Temporal Aggregation KW - ECU Y1 - 2025 UR - https://www.thinkmind.org/library/CLOUD_COMPUTING/CLOUD_COMPUTING_2025/cloud_computing_2025_1_80_20078.html SN - 978-1-68558-258-6 SN - 2308-4294 SP - 52 EP - 57 PB - IARIA ER - TY - JOUR A1 - Dahmen, Victoria A1 - Bogenberger, Klaus A1 - Weikl, Simone T1 - Modellierung des Verkehrsmittelwahlverhaltens mittels erklärbarem Maschinellem Lernen JF - Straßenverkehrstechnik N2 - Die Modellierung der Verkehrsmittelwahl ist für die Vorhersage und das Verständnis des Mobilitätsverhaltens unerlässlich. Hierbei wurden in den letzten Jahren mit maschinellem Lernen vielversprechende Ergebnisse erzielt, insbesondere für XGBoost- und Random-Forest-Modelle. Aufgrund der zunehmenden Verwendung von Tracking-basierten Smartphone-Apps zur Aufzeichnung des Mobilitätsverhaltens, wenden wir diese Modelle auf einen solchen Datensatz an. Zudem analysieren wir eingehend deren Interpretierbarkeit. Wir kommen zu dem Schluss, dass das XGBoost-Modell am leistungsstärksten und dennoch erklärbar ist. Die von solchen Modellen gewonnenen Erkenntnisse können beispielsweise genutzt werden, um die Verkehrsmittelwahl für beliebige Quelle-Ziel-Paare vorherzusagen. Y1 - 2025 U6 - https://doi.org/10.53184/SVT2-2025-3 SN - 0039-2219 VL - 69 IS - 2 SP - 96 EP - 102 PB - Kirschbaum ER - TY - JOUR A1 - Vetter, Miriam A1 - Haug, Sonja A1 - Weber, Karsten T1 - Datenschutzsorgen aus Sicht der Bevölkerung im Kontext der Einführung von Smart-Metern JF - Datensicherheit und Datenschutz N2 - Der Beitrag stellt die Ergebnisse einer repräsentativen Bevölkerungsumfrage zur Akzeptanz von Smart-Metern in Privathaushalten vor. Bedenken gegenüber der Einführung von Smart-Metern hat knapp die Hälfte der Befragten. Anonymisierte Zugriffe auf ERnergieverbrauchsdaten werden anstelle der Weitergabe personenbezogener Daten favorisiert. Informationen über den Datenschutz haben für deutsche Privathaushalte offenbar die höchste Priorität. KW - Smart-Grid KW - Smart-Meter KW - Onlineumfrage KW - Akzeptanz Y1 - 2025 U6 - https://doi.org/10.1007/s11623-025-2065-8 VL - 49 IS - 3 SP - 177 EP - 180 PB - Springer Nature ER - TY - GEN ED - Fischer, Sebastian ED - Neumann, Christoph P. ED - Aßmuth, Andreas T1 - CLOUD COMPUTING 2025, The Sixteenth International Conference on Cloud Computing, GRIDs, and Virtualization, April 06, 2025 to April 10, 2025, Valencia, Spain Y1 - 2025 UR - https://www.thinkmind.org/library/CLOUD_COMPUTING/CLOUD_COMPUTING_2025 SN - 978-1-68558-258-6 SN - 2308-4294 PB - IARIA ER - TY - GEN ED - Herrmann, Frank T1 - Proceedings of the 14th International Conference on Advances in System Simulation, SIMUL 2022, October 16 - 20, 2022, Lisbon, Portugal Y1 - 2022 UR - https://www.thinkmind.org/download_full.php?instance=SIMUL+2022 SN - 978-1-68558-001-8 SN - 2308-4537 PB - IARIA XPS Press ER - TY - CHAP A1 - Weber, Karsten ED - George, Wolfgang Michael ED - Weber, Karsten T1 - Künstliche Intelligenz und Sterben just in time T2 - Wie werden wir in Zukunft sterben? - Szenarien zu Sterben Tod und Trauer im Jahr 2045 Y1 - 2023 SN - 9783837961058 U6 - https://doi.org/10.30820/9783837961058-249 SP - 249 EP - 268 PB - Psychosozial-Verlag CY - Gießen ER - TY - CHAP A1 - Weber, Karsten ED - George, Wolfgang Michael ED - Weber, Karsten T1 - Mensch und Technik, Mensch durch Technik T2 - Wie werden wir in Zukunft sterben? - Szenarien zu Sterben Tod und Trauer im Jahr 2045 Y1 - 2023 SN - 9783837961058 U6 - https://doi.org/10.30820/9783837961058-49 SP - 49 EP - 60 PB - Psychosozial-Verlag CY - Gießen ER - TY - CHAP A1 - Fuxen, Philipp A1 - Hackenberg, Rudolf A1 - Heinl, M. P. A1 - Schunck, C. H. A1 - Yahalom, R. T1 - MANTRA: A Graph-based Unified Information Aggregation Foundation for Enhancing Cybersecurity Management in Critical Infrastructures // Aufsatznr.: P-335 T2 - Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI), N2 - The digitization of almost all sectors of life and the quickly growing complexity of interrelationships between actors in this digital world leads to a dramatically increasing attack surface regarding both direct and also indirect attacks over the supply chain. These supply chain attacks can have different characters, e.g., vulnerabilities and backdoors in hardware and software, illegitimate access by compromised service providers, or trust relationships to suppliers and customers exploited in the course of business email compromise. To address this challenge and create visibility along these supply chains, threat-related data needs to be rapidly exchanged and correlated over organizational borders. The publicly funded project MANTRA is meant to create a secure and resilient framework for real-time exchange of cyberattack patterns and automated, contextualized risk management. The novel graph-based approach provides benefits for automation regarding cybersecurity management, especially when it comes to prioriization of measures for risk reduction and during active defense against cyberattacks. In this paper, we outline MANTRA’s scope, objectives, envisioned scientific approach, and challenges. Y1 - 2023 U6 - https://doi.org/10.18420/OID2023_10 SP - 123 EP - 128 ER - TY - GEN A1 - Fischer, Sebastian T1 - A Security-, Privacy-and Usability-Scoring System for IoT Devices Y1 - 2022 UR - https://www.researchgate.net/publication/364284332_A_Security-_Privacy-and_Usability-Scoring_System_for_IoT_Devices UR - 978-1-61208-948-5 ER - TY - CHAP A1 - Hachani, Murad A1 - Stey, Miguel A1 - Fuxen, Philipp A1 - Graf, Julian A1 - Hackenberg, Rudolf T1 - GFDG: a genetic fuzzing method for the Controller Area Network Protocol T2 - Cloud Computing 2025 : The Sixteenth International Conference on Cloud Coud Computing, GRIDs, and Virtualization, 06.-10. April 2025, Valencia N2 - Ensuring the security of modern automotive systems is critical due to their increasing complexity and reliance on interconnected Electronic Control Units. The Controller Area Network still serves as a key communication protocol within these systems, making it a primary target for security testing. Traditional fuzz testing approaches for Controller Area Networks often rely on random or brute-force message generation, not leveraging the system’s feedback to improve the generation process. This paper introduces the Genetic Fuzz Data Generator, a fuzzing method that leverages Genetic Algorithms and side-channel analysis to enhance Controller Area Network security testing. The Genetic Fuzz Data Generator dynamically refines its fuzzing strategy by evaluating system responses through side-channel data, such as processing unit temperatures and power supply variations. By structuring Controller Area Network messages as genetic individuals and applying evolutionary principles—including selection, crossover, and mutation—the Genetic Fuzz Data Generator systematically identifies active Controller Area Network IDs and generates targeted fuzz messages. Experimental validation was conducted on a real automotive electronic control unit within a controlled laboratory setup. The first results demonstrated the approach’s effectiveness, revealing system anomalies, including a Denial of Service vulnerability that disrupted functions of the investigated Electronic Control Unit. The findings highlight the potential of feedback-driven fuzzing for improving the efficiency of black-box security testing in Controller Area Network-based systems. Future research could further optimize fitness functions or explore additional side-channel metrics. Y1 - 2025 UR - https://www.thinkmind.org/library/CLOUD_COMPUTING/CLOUD_COMPUTING_2025/cloud_computing_2025_1_60_28009.html SN - 978-1-68558-258-6 SN - 2308-4294 SP - 40 EP - 45 ER - TY - CHAP A1 - Buchmann, Thomas A1 - Schwägerl, Felix A1 - Peinl, René T1 - To Model, to Prompt, or to Code? The Choice Is Yours: A Multi-Paradigmatic Approach to Software Development T2 - Proceedings of the 20th International Conference on Software Technologies, 10-12.Juni 2025, Bilbao N2 - This paper considers three fundamental approaches to software development, namely manual coding, model-driven software engineering, and code generation by large language models. All of these approaches have their individual pros and cons, motivating the desire for an integrated approach. We present MoProCo, a technical solution to integrate the three approaches into a single tool chain, allowing the developer to split a software engineering task into modeling, prompting or coding sub-tasks. From a single input file consisting of static model structure, natural language prompts and/or source code fragments, Java source code is generated using a two-stage approach. A case study demonstrates that the MoProCo approach combines the desirable properties of the three development approaches by offering the appropriate level of abstraction, determinism, and dynamism for each specific software engineering sub-task. Y1 - 2025 U6 - https://doi.org/10.5220/0013557100003964 SP - 296 EP - 303 PB - SCITEPRESS - Science and Technology Publications ER - TY - CHAP A1 - Reichel, Tobias A1 - Gerstner, Mathias A1 - Schiller, Leo A1 - Attenberger, Andreas A1 - Hackenberg, Rudolf A1 - Dološ, Klara T1 - A forensic analysis of GNSS spoofing attacks on autonomous vehicles T2 - Cloud Computing 2025 : The Sixteenth International Conference on Cloud Computing, GRIDs, and Virtualization, 06.-10. April 2025, Valencia N2 - Global Navigation Satellite Systems (GNSSs) are essential for modern technology, enabling precise geographic positioning in aviation, maritime shipping, and automotive systems. In the future, their role will be even more critical for autonomous vehicles, which rely on accurate localization for navigation and decision-making. However, the increasing connectivity of autonomous vehicles exposes them to cyber threats, including GNSS spoofing attacks, which manipulate location data to mislead onboard systems. As reliance on GNSS grows, so does the risk posed by spoofing attacks, making it a critical security concern. This paper describes GNSS spoofing attacks on autonomous vehicles, focusing on their detection both during and after an attack. Furthermore, we analyze data storage strategies to facilitate effective forensic analysis. We highlight the importance of position, signal, and camera data, which should be preserved to ensure a comprehensive forensic investigation. Finally, we suggest a simulation setup that enables studying which data could be used for a forensic investigation. Additionally, we examine established data frameworks and decide whether they are suitable for detecting GNSS spoofing attacks. Y1 - 2025 UR - https://www.thinkmind.org/articles/cloud_computing_2025_1_50_28008.pdf SN - 978-1-68558-258-6 SN - 2308-4294 SP - 32 EP - 39 ER - TY - THES A1 - Altweck, Ricardo T1 - Analysing Learning Behaviour in Moodle: A Heuristic and AI-Driven Approach BT - A Thesis N2 - In this thesis, a novel evaluation method to determine the duration of learning sessions and the completion of learning material is introduced. Screen recordings of students’ browser sessions are utilised to capture detailed, low-level learner activity in a blended learning environment.The accumulated recordings are analysed to define a continuous completion state for individual learning material, focusing on the exact time a student spends on the material and their activity during this period. The evaluation method is adapted to the type of material, such as PDF documents, quizzes, or video lectures. The results demonstrate the potential of this approach, based on analysis of two distinct time frames: an exam preparation period and a lecture period. Additionally, an AI-driven approach is outlined to further refine the chosen definition of learning material completion. KW - Learning Analytics KW - Student Engagement KW - Session Replays KW - LMS KW - Blended Learning Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-79210 CY - Regensburg ER - TY - JOUR A1 - Kopper, Andreas A1 - Fürstenau, Daniel A1 - Zimmermann, Stephan A1 - Klotz, Stefan A1 - Rentrop, Christopher A1 - Rothe, Hannes A1 - Strahringer, Susanne A1 - Westner, Markus T1 - Shadow IT and Business-Managed IT: A Conceptual Framework and Empirical Illustration JF - International Journal of IT/Business Alignment and Governance (IJITBAG) N2 - Research on Shadow IT is facing a conceptual dilemma in cases where previously “covert” systems developed by business entities are integrated in the organizational IT management. These systems become visible, are thus not “in the shadows” anymore, and subsequently do not fit to existing definitions of Shadow IT. Practice shows that some information systems share characteristics of Shadow IT but are created openly in alignment with the IT organization. This paper proposes the term “Business-managed IT” to describe “overt” information systems developed or managed by business entities and distinguishes it from Shadow IT by illustrating case vignettes. Accordingly,our contribution is to suggest a concept and its delineation against other concepts. In this way, IS researchers interested in IT originated from or maintained by business entities can construct theories with a wider scope of application that are at the same time more specific to practical problems. In addition, the terminology allows to value potentially innovative developments by business entities more adequately. KW - Alignment KW - Business-managed IT KW - IT governance KW - Shadow IT KW - Unternehmen KW - Informationstechnik KW - Datensicherung KW - Organizational IT management Y1 - 2018 U6 - https://doi.org/10.4018/IJITBAG.2018070104 VL - 9 IS - 2 SP - 53 EP - 71 PB - IGI Global ER - TY - JOUR A1 - Käss, Sebastian A1 - Strahringer, Susanne A1 - Westner, Markus T1 - A Multiple Mini Case Study on the Adoption of Low Code Development Platforms in Work Systems JF - IEEE Access N2 - Although adopting Low Code Development Platforms (LCDPs) promises significant efficiency and effectiveness improvements for application development, its adoption still needs further empirical research. This paper uses a combinatorial approach to research LCDP adoption and presents the results of a multiple mini case study with 36 cases on LCDP adoption. A combination of the Socio-Technical Systems theory and the Technology-Organisational-Environment model is used as a theoretical lens. In this paper, we show that LCDP adoption is a multifaceted phenomenon and identify three archetypes for LCDP adoption (i.e., IT Resource Shortage Mitigators, Application Development Democratisers, and Synergy Realisers) and one archetype for LCDP non-adoption (i.e., Intricacy Adversaries). Each archetype can be interpreted as an individual path towards LCDP (non-)adoption. Based on these archetypes, we derive seven starting points for practitioners to adopt LCDPs in work systems. Moreover, by using the theoretical lenses, the paper shows that for an LCDP adoption to occur, an optimisation of the social and technical sub-systems is required. KW - Low Code Development Platform KW - Adoption KW - Case study Y1 - 2023 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-65634 SN - 2169-3536 N1 - Corresponding author: Markus Westner SP - 118762 EP - 118786 PB - IEEE ER - TY - JOUR A1 - Borg, Leise A1 - Frikel, Jürgen A1 - Jørgensen, Jakob Sauer A1 - Quinto, Eric Todd T1 - Analyzing Reconstruction Artifacts from Arbitrary Incomplete X-ray CT Data JF - SIAM Journal on Imaging Sciences N2 - This article provides a mathematical analysis of singular (nonsmooth) artifacts added to reconstructions by filtered backprojection (FBP) type algorithms for X-ray computed tomography (CT) with arbitrary incomplete data. We prove that these singular artifacts arise from points at the boundary of the data set. Our results show that, depending on the geometry of this boundary, two types of artifacts can arise: object-dependent and object-independent artifacts. Object-dependent artifacts are generated by singularities of the object being scanned, and these artifacts can extend along lines. They generalize the streak artifacts observed in limited-angle tomography. Object-independent artifacts, on the other hand, are essentially independent of the object and take one of two forms: streaks on lines if the boundary of the data set is not smooth at a point and curved artifacts if the boundary is smooth locally. We prove that these streak and curve artifacts are the only singular artifacts that can occur for FBP in the continuous case. In addition to the geometric description of artifacts, the article provides characterizations of their strength in Sobolev scale in certain cases. The results of this article apply to the well-known incomplete data problems, including limited-angle and regionof-interest tomography, as well as to unconventional X-ray CT imaging setups that arise in new practical applications. Reconstructions from simulated and real data are analyzed to illustrate our theorems, including the reconstruction that motivated this work a synchrotron data set in which artifacts appear on lines that have no relation to the object. KW - DATA TOMOGRAPHY KW - Fourier integral operators KW - GENERALIZED RADON-TRANSFORM KW - IMAGE-RECONSTRUCTION KW - incomplete data tomography KW - limited-angle tomography KW - METAL ARTIFACTS KW - microlocal analysis KW - PROJECTIONS KW - reconstruction artifact KW - region-of-interest tomography KW - SINGULARITIES KW - wavefront set KW - X-ray tomography Y1 - 2018 U6 - https://doi.org/10.1137/18M1166833 VL - 11 IS - 4 SP - 2786 EP - 2814 PB - SIAM PUBLICATIONS ER - TY - JOUR A1 - Kopper, Andreas A1 - Klotz, Stefan A1 - Westner, Markus A1 - Strahringer, Susanne T1 - Shadow IT and Business-managed IT BT - Practitioner Perceptions and Their Comparison to Literature JF - Journal of Information Technology Management (JITM) N2 - Two concepts describe the autonomous deployment of IT by business entities: Shadow IT and Business-managed IT. Shadow IT is deployed covertly, that is, software, hardware, or IT services created/procured or managed by business entities without alignment with the IT organization. In contrast, Business-managed IT describes the overt deployment of IT, that is, in alignment with the IT organization or in a split responsibility model. The purpose of this paper is to extend the conceptual understanding of Shadow IT and Business-managed IT, comparing the perceptions of 29 CIOs and senior IT managers with the results of a systematic literature review. By doing so, this paper presents a structured and comprehensive view of causing factors, outcomes, and governance of Shadow IT and Business-managed IT in practice. A comparison of academic literature and practitioner perceptions reveals the limitations and gaps of the current research and highlights avenues for future research. The authors find three category-spanning themes occurring as causing factors, outcomes, and—as part of governance measures—factors to improve the IT organization: (1) (Poor) business-IT alignment (2) (lack of) agility, and (3) (lack of) policies. This study is innovative with its comprehensive qualitative interview data that the authors compare to the existing literature. Therefore, the paper brings together theoretical and practical insights into Shadow IT and Businessmanaged IT, which should aid practitioners and scholars in decision making and future research. KW - Corporate Governance KW - Strategisches Management KW - Shadow IT KW - Business-managed IT KW - IT governance KW - Agility KW - Business-IT alignment KW - Informationsmanagement Y1 - 2019 UR - http://home.thejitm.org/XXX-4/contents.html SN - 1042-1319 VL - 30 IS - 4 ER - TY - JOUR A1 - Käss, Sebastian A1 - Brosig, Christoph A1 - Westner, Markus A1 - Strahringer, Susanne T1 - Short and sweet: multiple mini case studies as a form of rigorous case study research JF - Information Systems and e-Business Management N2 - Case study research is one of the most widely used research methods in Information Systems (IS). In recent years, an increasing number of publications have used case studies with few sources of evidence, such as single interviews per case. While there is much methodological guidance on rigorously conducting multiple case studies, it remains unclear how researchers can achieve an acceptable level of rigour for this emerging type of multiple case study with few sources of evidence, i.e., multiple mini case studies. In this context, we synthesise methodological guidance for multiple case study research from a cross-disciplinary perspective to develop an analytical framework. Furthermore, we calibrate this analytical framework to multiple mini case studies by reviewing previous IS publications that use multiple mini case studies to provide guidelines to conduct multiple mini case studies rigorously. We also offer a conceptual definition of multiple mini case studies, distinguish them from other research approaches, and position multiple mini case studies as a pragmatic and rigorous approach to research emerging and innovative phenomena in IS. KW - Case study research KW - Multiple mini case study KW - Short case study KW - Methodological guidance Y1 - 2024 U6 - https://doi.org/10.1007/s10257-024-00674-2 PB - Springer Nature ER - TY - JOUR A1 - Klotz, Stefan A1 - Kopper, Andreas A1 - Westner, Markus A1 - Strahringer, Susanne T1 - Von Schatten-IT zu Business-managed IT: Fachbereichs-IT gezielt gestalten JF - Wirtschaftsinformatik & Management N2 - Fachbereichs-IT, Schatten-IT, Business-managed IT. All diese Begriffe beschreiben IT, die neben den eigentlichen, regulären IT-Systemen oder -Prozessen in Unternehmen existieren und von Mitarbeiterinnen und Mitarbeitern der Fachbereiche genutzt werden. Im Fall von„Schatten-IT“ handelt es sich um IT-Systeme und -Prozesse (IT-Instanzen), die sich ohne Kenntnis der IT-Verantwortlichen etabliert haben; im Fall von„Business-managed IT“ entstehen die IT-Systeme und -Prozesse in Kenntnis der bzw. in Abstimmung mit den IT-Verantwortlichen im Unternehmen.„Fachbereichs-IT“ subsumiert Schatten-IT und Business-managed IT. Welche Ursachen führen zu solchen IT-Instanzen, welche Potenziale und Risiken haben diese IT-Instanzen und wie lassen sie sich steuern? KW - Business-managed IT KW - Fachbereichs IT KW - IT Governance KW - Schatten IT KW - Shadow IT Y1 - 2022 U6 - https://doi.org/10.1365/s35764-022-00421-7 SN - 1867-5913 SN - 1867-5905 VL - 14 IS - 4 SP - 282 EP - 287 PB - Springer Nature ER - TY - CHAP A1 - Joblin, Mitchell A1 - Apel, Sven A1 - Hunsen, Claus A1 - Mauerer, Wolfgang T1 - Classifying Developers into Core and Peripheral: An Empirical Study on Count and Network Metrics T2 - 2017 IEEE/ACM 39th International Conference on Software Engineering (ICSE), Buenos Aires, Argentina, 20-28 May 2017 N2 - Knowledge about the roles developers play in a software project is crucial to understanding the project's collaborative dynamics. In practice, developers are often classified according to the dichotomy of core and peripheral roles. Typically, count-based operationalizations, which rely on simple counts of individual developer activities (e.g., number of commits), are used for this purpose, but there is concern regarding their validity and ability to elicit meaningful insights. To shed light on this issue, we investigate whether count-based operationalizations of developer roles produce consistent results, and we validate them with respect to developers' perceptions by surveying 166 developers. Improving over the state of the art, we propose a relational perspective on developer roles, using fine-grained developer networks modeling the organizational structure, and by examining developer roles in terms of developers' positions and stability within the developer network. In a study of 10 substantial open-source projects, we found that the primary difference between the count-based and our proposed network-based core-peripheral operationalizations is that the network-based ones agree more with developer perception than count-based ones. Furthermore, we demonstrate that a relational perspective can reveal further meaningful insights, such as that core developers exhibit high positional stability, upper positions in the hierarchy, and high levels of coordination with other core developers, which confirms assumptions of previous work. Y1 - 2017 U6 - https://doi.org/10.1109/icse.2017.23 SP - 164 EP - 174 PB - IEEE ER - TY - CHAP A1 - Klotz, Stefan A1 - Westner, Markus A1 - Strahringer, Susanne T1 - From Shadow IT to Business-managed IT and Back Again BT - How Responsibility for IT Instances Evolves Over Time T2 - Pacific Asia Conference on Information Systems (PACIS): 2020, Dubai N2 - Today, information technology (IT) is not anymore solely deployed and maintained by the IT organization, but also by business units. IT deployed or managed by business units is called Shadow IT (without alignment with the IT organization) or Business-managed IT (in alignment or a split responsibility model with the IT organization), contrasting “classical” IT. However, the responsibility for deployed IT might change over time. Therefore, this paper conceptualizes the progression of the responsibility for IT as a trajectory through initialization, potential transitions, and discontinuance. The paper illustrates this conceptual framework using four exemplary case vignettes of IT instances. Empirical findings of the case vignettes determine indications when employees initialize an IT instance as Shadow IT, Business-managed IT, or IT-managed systems and reasons why the responsibility for an IT instance changes over time. The results suggest that scholars and practitioners should add a temporal dimension to the governance of IT instances. KW - IT-Governance KW - Shadow IT KW - Business-managed IT KW - Shadow IT KW - Business-managed IT KW - IT governance KW - trajectory KW - application governance Y1 - 2020 UR - https://aisel.aisnet.org/pacis2020/94/ ER -