Laboratory for Safe and Secure Systems (LAS3)
Refine
Year of publication
Document Type
- conference proceeding (article) (275)
- Article (42)
- conference proceeding (presentation, abstract) (10)
- Part of a Book (9)
- Report (4)
- Preprint (3)
- Book (2)
- conference talk (2)
- conference proceeding (volume) (2)
- Doctoral Thesis (2)
Is part of the Bibliography
- no (353)
Keywords
- eye tracking (9)
- empirical research (6)
- Eye tracking (4)
- Markov model (4)
- data analysis (4)
- learning management system (4)
- Moodle (3)
- Real-time systems (3)
- Safety (3)
- higher education (3)
Institute
- Fakultät Elektro- und Informationstechnik (353)
- Laboratory for Safe and Secure Systems (LAS3) (353)
- Research Center for Artificial Intelligence - RCAI (124)
- Labor Datenkommunikation (16)
- Labor Industrielle Elektronik (14)
- Fakultät Informatik und Mathematik (6)
- Labor Informationssicherheit und Complience (ISC) (5)
- Fakultät Angewandte Natur- und Kulturwissenschaften (2)
- Fakultät Business and Management (2)
- Sensorik-Applikationszentrum (SappZ) (2)
Begutachtungsstatus
- peer-reviewed (90)
- begutachtet (11)
Autonomous Driving (AD) has advanced significantly in recent years, yet widespread deployment remains limited. One of the most enduring challenges in Autonomous Vehicle (AV) development is planning a safe, comfortable, and efficient motion in complex, real-world environments. This thesis addresses motion planning across three distinct domains: urban shuttles, passenger vehicles, and truck-trailer systems. It contributes practical insights and novel approaches toward scalable autonomous mobility. The first part of this work presents an integrated motion planning framework for the Continental Urban Mobility Experience (CUbE) driverless shuttle. Extensive real-world testing over several years highlights the system’s robustness and underscores the importance of long-term validation in urban settings. Key innovations include a multi-layered planning stack and a data-driven motion forecasting approach that enhances interaction with human traffic participants. The second part investigates the behavior of human drivers in understructured traffic environments. Those are areas that fall between well-defined road systems and fully unstructured spaces. A novel analysis framework is introduced for mining patterns from naturalistic trajectory datasets, enabling AVs to better blend into human traffic and navigate ambiguous scenarios with improved predictability and safety. The final part of the thesis explores Deep Reinforcement Learning (DRL) for planning and controlling complex truck-trailer maneuvers. A DRL-based approach is developed and evaluated in simulated environments, demonstrating the method’s potential to handle the nonlinear dynamics of articulated vehicles. These contributions advance the field of motion planning by combining theoretical insights, system-level integration, and empirical evaluation. They offer pathways for improving AV behavior across diverse platforms and use cases, ultimately supporting the broader adoption of AD technologies.
Improving 3D Object Detection for Autonomous Driving – A Case Study of Data-Driven Development
(2024)
Autonomous Driving (AD) solutions are poised to revolutionize mobility, driving significant R&D efforts. However, scaling this technology presents major challenges, necessitating a re-evaluation of automotive R&D processes. Agile and DevOps methodologies are crucial for faster innovation cycles and meeting the demand for software-defined features. Artificial Intelligence (AI), particularly Machine Learning (ML), is integral to advancing AD systems, requiring a shift towards "data-driven development." While AI models offer robustness, their statistical behavior poses risks, which are addressed by current standards like ISO 21448 “Safety of the intended functionality (SOTIF)” and ISO 8800 “Road Vehicles – Safety and artificial intelligence”, currently under development. Real-life AD applications demand adaptation to new data, requiring advanced techniques like Active Learning and Continuous Learning. AD systems, as software-defined products, require constant updates and integration of AI components, following automotive industry standards. Drawing from MLOps/AIOps practices, our study applies data-driven development to a camera-based 3D Object Detection case study, iteratively improving the detector through a combination of Active Learning and Semi-Supervised Learning, demonstrating the transformative potential of a well-implemented “Data Loop” in the automotive industry.
UI/UX-Gestaltung ist für die Mensch-Computer-Interaktion bei Webanwendungen entscheidend. Hohe Nutzererwartungen und starker Wettbewerb erfordern Usability-Messungen, um Nutzer langfristig zu binden. Die Heuristic Evaluation (HE) stellt diesbezüglich eine effiziente Messmethode dar, ihr Erfolg hängt jedoch stark von der Erfahrung der Evaluatoren ab – Experten finden bis zu 50 % mehr Probleme als Novizen. Um diese Performanzlücke bei der Anwendung der HE zu schließen, werden in diesem Paper Eye Movement Modeling Examples (EMMEs) hinsichtlich ihrer Wirksamkeit untersucht. Dabei werden die Blickbewegungen und Kommentare von Usability-Experten aufgezeichnet, während sie eine Website anhand von Jakob Nielsens zehn Heuristiken bewerten. Dies visualisiert Expertenstrategien und kognitive Prozesse und macht die Heuristiken didaktisch nutzbar und für Novizen nachvollziehbar. Fragebogenbefunde zu den EMMEs bestätigen, dass diese als hilfreich und lernfördernd wahrgenommen werden, was ein tieferes Verständnis ermöglicht und den Einsatz in anderen Domänen unterstützen könnte
Industrial control systems are foundational to the operation of critical infrastructure and industrial processes. As such, they are prime targets for cyber attacks, necessitating a proper understanding of a system's attack surface. Cybersecurity testbeds provide a safe environment for exploring cyber attacks and their effects on systems and networks. However, devising a testbed can be a resourceintensive and time-consuming process. This is especially true from a penetration testing perspective, as most testbeds are not designed to support the exploration of chaining attacks against a wide variety of architectures, implementations, and software versions. This paper addresses this issue by proposing an iterative concept for creating flexible and scalable testbeds. It also presents lessons learned that influenced the concept and discusses and positions it in relation to current testbeds literature.
This study uses holistic models of image perception originating from radiology and psychology to analyze and interpret eye movements during code reviews in the C++ programming language. The study design is based on former experiments, but is supplemented by approaches from expertise research. The study utilizes a sample of 34 subjects whose eye movements are recorded by a Tobii Pro Spectrum 600 Hz. The results show that the holistic models of image perception are suitable for application to source code. In addition, it can be observed that the code reviews are conducted in phases, which are characterized by certain strategies (e.g. scan, error detection, ...). Furthermore, experience-related differences can be detected between experts and novices, which emphasize that experts use elaborate strategies and have a comparatively better ability to collect and process information from source code
The security assessment of Industrial Control Systems (ICS) is becoming increasingly challenging due to their growing complexity and interconnectivity. Traditional penetration testing is often impractical in live environments due to the risk of operational disruption, making testbeds essential for evaluating security mechanisms, analyzing threats, and developing defense strategies. However, existing testbeds tend to be static and difficult to quickly adapt to a wide variety of scenarios. To address these limitations, we propose a modular and flexible ICS testbed that enables rapid reconfiguration of the testbed composition in order to test a wide variety of scenarios. Our open-source approach leverages containerized applications as building blocks, allowing users to create and modify the testbed with minimal effort. We show how to use the provided components to construct testbeds and how our approach can be used as a tool for accommodating penetration tests.
Eye-tracking and questionnaires are typically treated as separate methods for measuring usability and user experience (UX). Recent studies show that machine learning models trained solely on eye movements can predict pragmatic and hedonic quality ratings. Building on this, this study examines which gaze patterns predict usability and UX and whether models can generalize across stimuli. Five models were trained on eye movements from 121 users browsing six websites. A feature-importance analysis revealed that saccadic patterns, such as regressions and successive forward movements, are more associated with UX, whereas longer consecutive saccades are indicative of usability. When trained separately for each website, the best-performing models achieve Matthews Correlation Coefficient scores of 0.751 and 0.780, with only small negative effect sizes on holdout data. Trained across websites, holdout scores dropped to 0.196 for usability and 0.338 for UX, suggesting that cross-stimuli generalizability is limited and, at best, achievable for hedonic interaction aspects.
This paper presents the design and implementation of the digitisation and digital subsystems of a physical true random number generator (PTRNG). The system is being developed in alignment with the KRITIS!M project at the Regensburg University of Applied Sciences. The system digitises analogue noise signals and processes them using a modular firmware architecture based on the Zephyr RTOS. The subsystem comprises two custom hardware platforms: One is dedicated to high-speed analogue-to-digital conversion, while the other handles data processing, statistical validation, and external communication via TCP/IP. The design emphasises extensibility, robustness and real-time operation. The firmware employs a mediator-based buffer management system that ensures clean separation and coordination between the acquisition, post-processing, validation and networking components. While challenges remain in optimising the analogue front end, the digital components, however, operate reliably and form a solid foundation for the future integration of cryptographic post-processing and full system validation against established standards, such as NIST SP 800-90 and BSI AIS 31.