TY - GEN A1 - Renner, Sebastian A1 - Pozzobon, Enrico T1 - SIM SIMulator T2 - IT Security Conference Troopers19, 2019, Heidelberg, Germany N2 - Der Vortrag präsentierte ein Tool, das die Simulation einer SIM-Karte durch einen Standard-Mikrocontroller ermöglicht. Mit diesem Täuschungsmanöver kann die Authentifizierung des 3G-Mobilfunkstandards seitens der SIM-Karte umgangen werden. Tritt zusätzliche Hardware hinzu, die eine 3G-Basisstation vortäuscht, lässt sich eine Man-in-the-Middle-Attacke im 3G-Netz durchführen. In diesem Szenario ist es möglich, die sensiblen Kommunikationsdaten, also den gesamten Datenverkehr beispielsweise zwischen einem Pkw und den Backend-Servern des Herstellers, auszulesen und zu untersuchen. Zudem eignet sich das Tool zum Pentesten von Modems oder SIM- beziehungsweise Smartcard-Applikationen. Der komplette Aufbau des sogenannten SIMulators ist als Open-Source-Software frei verfügbar und auf GitHub abrufbar. Y1 - 2019 UR - https://www.youtube.com/watch?v=FC8UsCy4zVE UR - https://intra.fh-regensburg.de/en/our-university/aktuelles/detail/news/einbruchsicherheit-fuer-die-vernetzte-zukunft.html ER - TY - CHAP A1 - Tao, Ye A1 - Liu, Guozhu A1 - Mottok, Jürgen A1 - Hackenberg, Rudolf A1 - Hagel, Georg A1 - Mottok, Jürgen T1 - Just-in-Time Teaching in software engineering: A Chinese-German empirical case study T2 - 2014 IEEE Global Engineering Education Conference (EDUCON), 3-5 April 2014, Istanbul, Turkey N2 - Learning centered teaching becomes an important factor in a global perspective of learning software engineering. The Just-in-Time Teaching approach is used in a Chinese-German empirical case study. In a one year terminated project we will analyze the performance of our students in an active learning scenario with Just-in-Time Teaching and Peer Instruction. We will contribute an inter-cultural comparison of achieved competencies by student’s self-assessment and teacher’s observation. KW - Activating Learning KW - Blended Learning KW - Conferences KW - Educational institutions KW - E-Learning KW - ISO Standards KW - JiTT KW - Just-in-Time Teaching KW - Materials KW - Practical Learning KW - Software KW - Software engineering Y1 - 2014 U6 - https://doi.org/10.1109/EDUCON.2014.6826220 SP - 983 EP - 986 PB - IEEE ER - TY - CHAP A1 - Hackenberg, Rudolf A1 - Weiss, Nils A1 - Renner, Sebastian A1 - Pozzobon, Enrico T1 - Extending Vehicle Attack Surface Through Smart Devices T2 - SECURWARE 2017 : The Eleventh International Conference on Emerging Security Information, Systems and Technologies, 11th, 2017, Rome, Italy N2 - Modern cars include more and more features that first emerged from the consumer electronics industry. Technologies like Bluetooth and Internet-connected services found their way into the vehicle industry. The secure implementation of these functions presents a great challenge for the manufacturers because products originating from the consumer industry can often not be easily transferred to the safety-sensitive traffic environment due to security concerns. However, common automotive interfaces like the diagnostics port are now also used to implement new services into the car. With dongles designed to read out certain vehicle data and transfer it to the Internet via the cellular network, the owner can access information about gas consumption or vehicle location through a mobile phone app, even when he is away from the car. This paper wants to emphasize new threats that appear due to the ongoing interconnection in modern cars by discussing the security of the diagnostics interface in combination with the use of an Internet-connected dongle. Potential attack vectors, as well as proof-of-concept exploits will be shown and the implications of security breaches on the safe state of the vehicle will be investigated. KW - On-Board-Diagnostics KW - Cellular Network KW - Automotive Security Y1 - 2017 UR - https://www.thinkmind.org/articles/securware_2017_8_10_38014.pdf SN - 978-1-61208-582-1 SP - 131 EP - 135 PB - IARIA ER - TY - CHAP A1 - Fuxen, Philipp A1 - Hackenberg, Rudolf A1 - Heinl, M. P. A1 - Schunck, C. H. A1 - Yahalom, R. T1 - MANTRA: A Graph-based Unified Information Aggregation Foundation for Enhancing Cybersecurity Management in Critical Infrastructures // Aufsatznr.: P-335 T2 - Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI), N2 - The digitization of almost all sectors of life and the quickly growing complexity of interrelationships between actors in this digital world leads to a dramatically increasing attack surface regarding both direct and also indirect attacks over the supply chain. These supply chain attacks can have different characters, e.g., vulnerabilities and backdoors in hardware and software, illegitimate access by compromised service providers, or trust relationships to suppliers and customers exploited in the course of business email compromise. To address this challenge and create visibility along these supply chains, threat-related data needs to be rapidly exchanged and correlated over organizational borders. The publicly funded project MANTRA is meant to create a secure and resilient framework for real-time exchange of cyberattack patterns and automated, contextualized risk management. The novel graph-based approach provides benefits for automation regarding cybersecurity management, especially when it comes to prioriization of measures for risk reduction and during active defense against cyberattacks. In this paper, we outline MANTRA’s scope, objectives, envisioned scientific approach, and challenges. Y1 - 2023 U6 - https://doi.org/10.18420/OID2023_10 SP - 123 EP - 128 ER - TY - CHAP A1 - Gerstner, Mathias A1 - Hackenberg, Rudolf T1 - Context-aware forecasting of mobile network quality for autonomous vehicle connectivity T2 - Vehicular analytics 2025 : the second conference on vehicular systems N2 - As autonomous driving becomes increasingly feasible, the German government has introduced a legal framework to enable the operation with Level 4 automated driving functionality. A key requirement is the maintenance of a continuous connection between such vehicles and a remote technical supervisor. If this link is lost, the vehicle must transition into a safe state by bringing itself to a controlled stop. To mitigate the risk of connection loss, accurate forecasting of mobile network availability along routes is essential. This paper presents an Exploratory Data Analysis (EDA) based on 38 measurement runs collected over ten months along a rural 64 km route in Germany. The dataset includes passive mobile network signal quality parameters, Global Navigation Satellite System (GNSS) position and precision data, as well as contextual features, such as speed, driving direction, day of the week, weather, and distance to the connected base station. Although mean values capture overall tendencies for areas with consistently good or poor coverage, they fail to capture the variability necessary for reliable prediction on a per-trip basis. Notably, some route segments show high variance in signal quality across different measurement runs. This variability is assumed to result from changing environmental influences, such as weather or traffic conditions at different times. Our analysis reveals weak but statistically relevant correlations between several contextual features (e.g., temperature ≈ -0.2) and network quality indicators. The inclusion of weather parameters or the day of the week has been shown to lower the Mean Absolute Error (MAE) compared to a prediction based only on measurements from the past. These findings underscore the importance of contextual information and localized modeling to predict network availability for safety-critical systems, such as autonomous vehicles. Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-86166 UR - https://www.thinkmind.org/library/VEHICULAR_ANALYTICS/VEHICULAR_ANALYTICS_2025/vehicular_analytics_2025_1_10_30005.html SN - 978-1-68558-320-0 PB - IARIA ER -