TY - CHAP A1 - Fritz, Florian A1 - Schmid, Michael A1 - Mottok, Jürgen ED - Brinkmann, André T1 - Accelerating Real-Time Applications with Predictable Work-Stealing T2 - Architecture of computing systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings N2 - Modern compute architectures often consist of multiple CPU cores to achieve their performance, as physical properties put a limit on the execution speed of a single processor. This trend is also visible in the embedded and real-time domain, where programmers are forced to parallelize their software to keep deadlines. Additionally, embedded systems rely increasingly on modular applications, that can easily be adapted to different system loads and hardware configurations. To parallelize applications under these dynamic conditions, often dispatching frameworks like Threading Building Blocks (TBB) are used in the desktop and server segment. More recently, Embedded Multicore Building Blocks (EMB2) was developed as a task-based programming solution designed with the constraints of embedded systems in mind. In this paper, we discuss how task-based programming fits such systems by analyzing scheduler implementation variants, with a focus on classic work-stealing and the libraries TBB and EMB2. Based on the state of the art we introduce a novel resource-trading concept that allows static memory allocation in a work-stealing runtime holding strict space and time bounds. We conduct benchmarks between an early prototype of the concept, TBB and EMB2, showing that resource-trading does not introduce additional runtime overheads, while unfortunately also not improving on execution time variances. KW - Real-time KW - Parallel programming KW - Work-stealing Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_18 SP - 241 EP - 255 ER - TY - CHAP A1 - Frauenschläger, Tobias A1 - Renner, Sebastian A1 - Mottok, Jürgen T1 - Security Improvements by Separating the Cryptographic Protocol from the Network Stack onto a Multi-MCU Architecture T2 - Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings N2 - The number of IoT devices in SCADA and ICS systems is rising quickly, especially in the domain of critical infrastructures. But these kinds of systems are performing mission critical tasks like controlling devices in industrial facilities or substations in the smart grid. Therefore, they are subject to a lot of regulatory standards. Yet, to provide remote access over the internet, special architectures are developed to integrate a network interface into these devices without inferring with the actual functionality. However, these architectures either lack security measures against cyber-attacks or do not offer the necessary performance for time-critical communication interfaces. To solve that, an architecture consisting of three units is introduced in this paper to provide a network interface with extensive security measures and a high performance. The main feature is the isolation of the cryptographic functionality onto an additional MCU. After proposing the basic concept, the paper presents many implementation details. Based on the current state of implementation, a concept validation of the realized architecture is described. KW - Cyber-security KW - Functional safety KW - Network security KW - Industrial Internet of Things KW - Industrial Control System KW - Supervisory Control and Data Acquisition System Multi microcontroller setup Dos prevention Critical infrastructures KW - Multi microcontroller setup Dos prevention Critical infrastructures KW - Dos prevention KW - Critical infrastructures Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_14 SP - 185 EP - 199 PB - Springer International Publishing ER - TY - CHAP A1 - Dentgen, Manuel A1 - Renner, Sebastian A1 - Mottok, Jürgen ED - Brinkmann, André ED - Karl, Wolfgang ED - Lankes, Stefan ED - Tomforde, Sven ED - Pionteck, Thilo ED - Trinitis, Carsten T1 - Equally Distributed Bus-Communication Access Rights for Inter MCU Communication Using Multimaster SPI T2 - Architecture of Computing Systems - ARCS 2020: 33rd international conference, Aachen, Germany, May 25-28, 2020, proceedings T2 - Lecture notes in computer science ; Bd. 12155 N2 - With the rising complexity and processing power of modern computer systems, the amount of MCU on a single PCB also rises. These microcontrollers often need to communicate with each other to exchange payload and control information in a bidirectional manner. Today’s well-established communication protocols in MCUs either do not fit modern transmission speed requirements or do have an inappropriate master-slave attribute, which does not allow the communication partners to have equal bus access rights. Therefore, this paper introduces an extension of the Serial Peripheral Interface (SPI) to allow an equally distributed access right for the communication interface between two microcontrollers. It simultaneously does fit modern transmission speed requirements of a common network interface, so that the message transmission does not constitute a bottleneck in data processing. Besides the protocol design, we do also provide a first prototype implementation, which constitutes a proof of concept. Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-52794-5_15 SP - 200 EP - 212 ER - TY - CHAP A1 - Renner, Sebastian A1 - Pozzobon, Enrico A1 - Mottok, Jürgen ED - Meng, Weizhi T1 - A Hardware in the Loop Benchmark Suite to Evaluate NIST LWC Ciphers on Microcontrollers T2 - Information and Communications Security: 22nd International Conference, ICICS 2020, Copenhagen, Denmark, August 24-26, 2020, Proceedings N2 - The National Institute of Standards and Technology (NIST) started the standardization process for lightweight cryptography algorithms in 2018. By the end of the first round, 32 submissions have been selected as 2nd round candidates. NIST allowed designers of 2nd round submissions to provide small updates on both their specifications and implementation packages. In this work, we introduce a benchmarking framework for evaluating the performance of NIST Lightweight Cryptography (LWC) candidates on embedded platforms. We show the features and application of the framework and explain its design rationale. Moreover, we provide information on how we aim to present up-to-date performance figures throughout the NIST LWC competition. In this paper, we present an excerpt of our software benchmarking results regarding speed and memory requirements of selected ciphers. All up-to-date results, including benchmarking different test cases for multiple variants of each 2nd round algorithm on five different microcontrollers, are periodically published to a public website. While initially only the reference implementations were available, the ability of automatically testing the performance of the candidate algorithms on multiple platforms becomes especially relevant as more optimized implementations are developed. Finally, we show how the framework can be extended in different directions: support for more target platforms can be easily added, different kinds of algorithms can be tested, and other test metrics can be acquired. The focus of this paper should rather lay on the framework design and testing methodology than on the current results, especially for reference code. KW - Lightweight cryptography KW - Benchmarking KW - Embedded systems KW - RISC-V Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-61078-4_28 SP - 495 EP - 509 PB - Springer CY - Cham ER - TY - CHAP A1 - Inderwies, Tom A1 - Mottok, Jürgen T1 - Secure Software Update of a Secure Module in the Power Grid T2 - Proceedings of the Regensburg Applied Research Conference 2020 (RARC 2020), July 31st Y1 - 2020 UR - https://doi.org/10.35096/othr/pub-641 SP - 25 EP - 31 ER - TY - CHAP A1 - Hauser, Florian A1 - Stark, Theresa A1 - Mottok, Jürgen A1 - Gruber, Hans A1 - Reuter, Rebecca T1 - Deliberate Practice in Programming: How is it carried out by programmers? T2 - ECSEE '20: Proceedings of the 4th European Conference on Software Engineering Education, Seeon, Germany, June 2020 N2 - This work in progress study examines through which activities programmers perform deliberate practice to improve their own skills in coding and programming. For this reason, a qualitative questionnaire was developed and conducted with a sample of 22 participants. The results indicate that programmers perform formal and informal forms of training and learning. Typically, a classical programming training in the context of a university course or for work-related reasons is a first step in the acquisition of expertise. Building on these basic skills, non-formal and informal learning activities are carried out by the learners. Especially the social interaction and the collaborative work with other programmers is of great importance in this context. The activities mentioned by the test persons fulfil the characteristics of deliberate practice and will be examined more closely in a further study. Y1 - 2020 SN - ISBN 9781450377522 U6 - https://doi.org/10.1145/3396802.3396815 SP - 42 EP - 46 ER - TY - JOUR A1 - Wenger, Florent A1 - Jaquet-Chiffelle, David-Olivier A1 - Kleine, Nadine A1 - Weber, Karsten A1 - Morgan, Gwenyth A1 - Gordijn, Bert A1 - Inversini, Reto A1 - Bangerter, Endre A1 - Schlehahn, Eva T1 - Canvas White Paper 3 Attitudes and Opinions Regarding Cybersecurity JF - SSRN Electronic Journal Y1 - 2017 U6 - https://doi.org/10.2139/ssrn.3091920 SN - 1556-5068 VL - 10 IS - 5 PB - Elsevier ER - TY - CHAP A1 - Weber, Karsten ED - Lewandowski, Dirk T1 - Search Engine Bias T2 - Handbuch Internet-Suchmaschinen, Band II N2 - Der Name ‚Google’ wird heute synonym für ‚Suchmaschine’ genutzt; das Verb ‚googeln’ hat es zu einem Eintrag im Duden gebracht: Google ist allgegenwärtig. Dies bestätigen Statistiken, die aufweisen, dass Google in vielen Ländern andere Suchmaschinen völlig marginalisiert hat. Außerdem zeigen Untersuchungen, dass sich viele Nutzerinnen und Nutzer auf die Ergebnisse einer einzigen Suchmaschine – oft eben Google – verlassen. Daher stellt sich die Frage, ob die tatsächliche Qualität der Suchergebnisse das Vertrauen in die angenommene Qualität einer Suchmaschine rechtfertigen kann. Nach einleitenden Bemerkungen zum Suchmaschinenmarkt und einer kurzen Beschreibung der generellen Funktionsweise heute verbreiteter Suchmaschinen wird evaluiert, welche Faktoren die Ergebnisse einer Suchmaschine determinieren. Dabei wird sich zeigen, dass Suchergebnisse durch vielfältige Faktoren beeinflusst werden, so bspw. durch das Nutzerverhalten auf verschiedenen Ebenen, durch die verwendeten Indexierungs- und Suchalgorithmen oder durch die Inhalte des Netzes selbst. Diese und weitere Faktoren führen zu Verzerrungen der Suchergebnisse gegenüber einem unterstellten Idealergebnis. Es zeigt sich, dass es in vielen Situationen sinnvoll ist, sich nicht nur auf eine Suchmaschine zu verlassen bzw. den Ergebnissen einer Suchmaschine nicht blind zu vertrauen. So ist im wissenschaftlichen oder journalistischen Kontext dringend die Nutzung von bereichsspezifischen Suchmaschinen und anderer Rechercheformen angeraten. KW - Suchmaschine KW - Suchergebnis KW - Verzerrung KW - Fehler KW - Bias Y1 - 2011 UR - https://www.researchgate.net/publication/256473910_Search_Engine_Bias PB - Akademische Verlagsanstalt CY - Heidelberg ER - TY - CHAP A1 - Haug, Sonja A1 - Weber, Karsten ED - Grimm, Petra ED - Keber, Tobias O. ED - Zöllner, Oliver T1 - Vertrauen, Kontrolle und Privatsphäre in engen sozialen Beziehungen und die Wirkungen moderner Informations- und Kommunikationstechnologie T2 - Anonymität und Transparenz in der digitalen Gesellschaft Y1 - 2015 UR - https://www.researchgate.net/publication/317063738 SN - 978-3-515-11226-0 PB - Steiner CY - Stuttgart ER - TY - JOUR A1 - von Bary, Benedikt A1 - Westner, Markus A1 - Strahringer, Susanne T1 - IT-Backsourcing BT - Empirische Erkenntnisse und Handlungsempfehlungen für eine erfolgreiche Re-Integration der IT-Serviceerbringung JF - HMD Praxis der Wirtschaftsinformatik N2 - IT-Backsourcing bezeichnet die Re-Integration vormals outgesourcter IT-Services zurück zum auslagernden Unternehmen. Die vorliegende Studie stellt die Ergebnisse einer Umfrage unter IT-Managern zu Einflussfaktoren von IT-Backsourcing-Entscheidungen vor. Es lässt sich feststellen, dass IT-Backsourcing von Unternehmen in unterschiedlichen Branchen und für eine Vielzahl an unterschiedlichen IT-Services, wie z. B. Applikationsentwicklung oder Infrastruktur-Leistungen, durchgeführt wird. Hauptgründe für die Entscheidung für ein IT-Backsourcing sind mangelnde Qualität, hohe Kosten sowie eine schlechte Beziehung zum IT-Dienstleister. Die Ergebnisse der Umfrage zeigen, dass diejenigen Unternehmen, die sich für ein Backsourcing entschieden haben, nach der Entscheidung insgesamt zufriedener waren als diejenigen, die in einer Outsourcing-Beziehung geblieben sind. Zudem werden verschiedene Handlungsempfehlungen für IT-Manager aufgezeigt. Zur Ausarbeitung einer zukunftsorientieren IT-Sourcing-Strategie empfiehlt es sich, eine service-spezifische Sourcing-Strategie zu verfolgen und entsprechend spezialisierte Dienstleister einzusetzen. Im Falle einer Entscheidung für ein IT-Backsourcing sollten verschiedene Erfolgsfaktoren beachtetet werden, wie z. B. eine frühzeitige Neubesetzung von Schlüsselstellen sowie ein lückenloser Wissenstransfer. KW - Betriebliches Informationssystem KW - Insourcing KW - Backsourcing KW - Insourcing KW - IT-Sourcing KW - Re-Integration KW - IT-Service Y1 - 2020 U6 - https://doi.org/10.1365/s40702-020-00591-1 VL - 57 IS - 4 SP - 849 EP - 865 PB - Springer ER - TY - JOUR A1 - Weber, Karsten T1 - Mobile Access to Information: Some Questions JF - CSI Communications, Special Issue on "Information Ethics" Y1 - 2005 UR - http://www.capurro.de/csi_June2005infoeth.pdf IS - 6 SP - 21 EP - 22 ER -