Refine
Document Type
- Part of Periodical (15)
- Conference Proceeding (5)
- Article (3)
- Article in a Periodical of the TH Wildau (3)
- Report (2)
- Book (1)
- Part of a Book (1)
- Doctoral Thesis (1)
- Master's Thesis (1)
Year of publication
Institute
Has Fulltext
- yes (32)
Keywords
- Awareness (2)
- Informationssicherheit (2)
- KMU (2)
- 3D sensor (1)
- Assistive control panel (1)
- Bibliotheksmanagementsystem (1)
- Complexity (1)
- Construction Sites (1)
- DOE (1)
- Decision support (1)
Der erste Report des vom Bundesministerium für Wirtschaft und Klimaschutz (BMWK) geförderten Projekts „Awareness Labor KMU (ALARM) Informationssicherheit“ zum Stand der Informationssicherheit in kleinen und mittleren Unternehmen (KMU) befasst sich mit sicherheitsrelevanten Tätigkeitsprofilen. Mit dem Ziel, anhand des Nutzungsverhaltens einzelner Tätigkeitsfelder und Personenengruppen in KMU den Sensibilisierungsbedarf für Informationssicherheit sowie relevante Themen für die Sensibilisierung zu identifizieren, wurde eine Online-Befragung in Unternehmen durchgeführt und deskriptiv ausgewertet. Die Fragen umfassen die Nutzung technischer Infrastruktur und externer Interaktionen, die Arbeitsumgebung, Sicherheitsmaßnahmen sowie Häufigkeit und Bedarf an Schulungen im Bereich Informationssicherheit. Anhand von Korrelationen zwischen Tätigkeitsfeldern, Streudiagrammen mit Nutzungscharakteristika und eines Vergleichs des Nutzungsverhaltens werden die dringende Notwendigkeit der Sensibilisierung und die erwarteten Berufsbilder weitgehend bestätigt. KMU werden digitaler, mobiler und trainingsbedürftiger. Das Ergebnis ist ein Profilbogen, dessen Bausteine „Allgemeine Grundkompetenzen“, „Produktion, Entwicklung und Vertrieb“, „Informationsverarbeitung und IT-Infrastruktur“, „Instandhaltung und Vermittlung“, „Organisations- und Assistenztätigkeiten“, „Verwaltung und Personal“ sowie „Strategie und Führung“ sich in jedem Unternehmen wiederfinden. Jede Person kann sich anhand der Bausteine ihren Trainings- und Sensibilisierungsbedarf zusammenstellen. Der Report unterstützt KMU bei der Etablierung einer nachhaltigen Sicherheitskultur, indem er praxisnahe Handlungsempfehlungen zur Entwicklung von Sensibilisierungsschulungen für Informationssicherheit gibt. Zudem bietet die Datenbasis des Reports die Möglichkeit, internationalen Forschungsfragen im Vergleich zur Ist-Situation in deutschen KMU zu untersuchen.
Structured light has become a widespread technique for the development of camera-based 3D sensors. The structured illumination provides texture to homogeneous objects and thus allows for the reliable determination of the disparity of each object point in a stereo-camera setting. Even a monocular 3D sensor is possible if the light projector has a fixed relative position to the camera and if the structured light is coded, i.e. the position within the whole light pattern can be reconstructed uniquely from a small local window of the pattern, the uniqueness window. Coded patterns with such a uniqueness property are called Perfect SubMaps (PSM). In our paper we focus on the design and evaluation of the subset of symmetric isolated binary toroidal PSMs (SIBTPSM) for structured light patterns, because of their beneficial properties with respect to the signal-to-noise ratio and the use with laser light sources and DOEs. We define several figures of merit that are relevant for the practical use of PSMs in a 3D sensor: the PSM size, the size of the uniqueness window, the Hamming distance, the density, and the homogeneity. We have created SIBTPSMs using our own dedicated algorithms and have designed and fabricated DOEs that produce these patterns with large fan angles of 61° × 47° when used with near-infrared diode lasers (λ = 830nm). We analyze the influence of these characteristics on the 3D measurement process by theory, simulations, and experiments. The patterns of publicly available DOEs based on SIBTPSMs are used for comparison and reference. Our results show that the PSM width, the uniqueness window size, the minimum and average Hamming distances, and the uniformity have strong impact on either speed or quality of the 3D reconstruction, whereas the point density and the PSM height are of minor importance.
Femtosecond-Pulsed Laser Written and Etched Fiber Bragg Gratings for Fiber-Optical Biosensing
(2018)
We present the development of a label-free, highly sensitive fiber-optical biosensor for online detection and quantification of biomolecules. Here, the advantages of etched fiber Bragg gratings (eFBG) were used, since they induce a narrowband Bragg wavelength peak in the reflection operation mode. The gratings were fabricated point-by-point via a nonlinear absorption process of a highly focused femtosecond-pulsed laser, without the need of prior coating removal or specific fiber doping. The sensitivity of the Bragg wavelength peak to the surrounding refractive index (SRI), as needed for biochemical sensing, was realized by fiber cladding removal using hydrofluoric acid etching. For evaluation of biosensing capabilities, eFBG fibers were biofunctionalized with a single-stranded DNA aptamer specific for binding the C-reactive protein (CRP). Thus, the CRP-sensitive eFBG fiber-optical biosensor showed a very low limit of detection of 0.82 pg/L, with a dynamic range of CRP detection from approximately 0.8 pg/L to 1.2 µg/L. The biosensor showed a high specificity to CRP even in the presence of interfering substances. These results suggest that the proposed biosensor is capable for quantification of CRP from trace amounts of clinical samples. In addition, the adaption of this eFBG fiber-optical biosensor for detection of other relevant analytes can be easily realized.
Comprehensive digitization leads to new chal-lenges because of cybercrime and related security countermeasures. There is no doubt that this will fundamentally affect our lives and is leading to an increase in the importance of information security (IS). However, technology solutions alone are not sufficient to ensure IS countermeasures. The human side of security is important to protect organizational assets like user information and systems. The paper illustrates these relationships in terms of information security awareness (ISA), examining its goals and the factors influencing it through the systematic analysis and review of scientific literature and the transfer of scientific knowledge for practical purposes. We reviewed the publications of leading academic journals in the field of IS over the past decade.
Die fortschreitende Digitalisierung durchdringt zunehmend alle Lebensbereiche und erfordert ein stärkeres Bewusstsein sowie verbesserte Kompetenzen im Bereich der Informationssicherheit – sowohl im Privat- als auch im Arbeitsleben. Das Projekt SecAware4job dient der Steigerung des Informationssicherheitsbewusstseins von Studierenden an der TH Wildau. Als zukünftige Mitarbeiter/innen sollen die Studierenden spielerisch für Informationssicherheit sensibilisiert werden und entsprechende Kenntnisse für ihren Berufseinstieg erwerben. Dieser Beitrag skizziert Methoden und Übungen, die in dem Fach Sensibilisierung für Informationssicherheit zur Anwendung kommen. Diese innovativen Lehr- und Lernmethoden basieren auf dem Game-based-Learning-Ansatz, denn durch die Einbeziehung spielerischer Elemente kann insbesondere die Motivation gefördert werden und lassen sich Verhaltensänderungen anregen. Damit widmet sich SecAware4job aktuellen Forschungsfragen zum spielebasierten und kooperativen Lernen im Bereich der Awareness/Bewusstseins-Förderung. Es wird angestrebt, Sensibilisierung für Informationssicherheit als Wahlpflichtfach in allen Studiengängen der TH Wildau zu etablieren.
Sensitizing students to information security and privacy awareness with analogue gamification
(2019)
Many studies and investigations in the area of information security reveal a careless handling of sensitive data and insufficient information security awareness. Despite increasing digitization, which has a huge impact on society as a whole, we tend not to pay enough attention to the risks associated with it. But research shows that the mere transfer of knowledge is not enough to cause behavioural changes. Rather, a systemic approach that can bring about the necessary emotionalization and reflection through analogue game-based learning is helpful.
Government digital agendas worldwide go hand in hand with the digital transformation in businesses and public administrations as well as the digital changes taking place in society. Information security (IS) and awareness (ISA) must be an integrated part of these agendas. The goal of IS is to protect information of all types and origins. Here, the employees play a necessary and significant role in the success of IS, and the entire staff of an institution need to know about their specific roles and be aware of the information security management system (ISMS). As there are still fundamental strategic deficiencies in the institutions themselves, humans should not be called “the weakest link” in the security chain. Rather, sustainable awareness-raising and training for people should be established in the institutions using interactive, authentic, and game-based learning methods. Psychological studies show the great importance of emotionalization when communicating IS knowledge and the reliable exchange of experience about IS. However, in many institutions, a change in culture is becoming necessary. IS must be integrated into all (business) processes and projects, and viable safeguards must be included. This chapter summarizes the most important scientific findings and transfers them to the practice of public administrations in Germany. Moreover, it shows examples of learning methods and provides practical assistance for IS sensitization and training.
In this paper, we explain the development of an analysis tool (Wildau Information System Evaluation [WISE] Work Index) for exploring the adoption of innovative E-Government applications and for presenting preliminary results regarding the application “eAkte”. We argue that the innovation processes characterized by the use of E-Government applications and tools continually transform the division of labour and the organizational aspects of work in uncertain ways. In some cases, adopting E-Government tools might exert a negative influence on work effectiveness and efficiency. A continuous evaluation and a participative redesigning of E-Government applications might help to avoid negative adopting habits in E-Government. Our research goal is to improve our WISE Work Index which aims at analysing the adoption of E-Government tools among public sector employees. Through our index, we explore how public employees use new E-Government tools in their day-to-day work, how they perceive the usefulness of the tools, and how they adapt their former working routines to the new IT environment. Implementing our index makes it possible to monitor the impact of using E-Government online services as well as their content and to offer concrete suggestions to public managers about ways to enhance the public value of their information and communication technologies (ICT) including employees' views on actively co-designing the public informational services.
Führungskräfte und Mitarbeitende sehen sich stolz als Team mit hoher Identifikation und engen Bindungen in ihrem kleinen und mittelgroßen Unternehmen. Doch wie sieht es mit der Informationssicherheit (information security) und dem entsprechenden Bewusstsein (awareness) in deutschen KMU aus? Diese tiefenpsychologische Grundlagenstudie verdeutlicht den Ist-Stand und will gleichzeitig mit ihren Empfehlungen einen Mehrwert für KMU aufzeigen.
Die Studie offenbart, dass der Begriff Informationssicherheit für viele noch diffus ist und nicht selten Fachleuten und Dienstleistern zugeordnet wird. Zukünftig sollte daher die persönliche Wahrnehmung für die eigene Verantwortung für Informationssicherheit am Arbeitsplatz geschärft werden. Zudem verdeutlichen die von den Interviewten genannten relevanten Themen, dass der Awareness-Reifegrad noch deutlich ausgebaut werden kann, denn auf den ersten beiden Plätzen liegen die altbekannten Problemfelder Passwortsicherheit und Phishing-Attacken.
Damit wird deutlich, dass in KMU verstärkt für alle eine Bewusstseinsbildung (awareness raising) für Informationssicherheit stattfinden sollte. Ganzheitliche Awareness-Konzepte, wie im vom BMWi/BMWK geförderten Projekt „Awareness Labor KMU (ALARM) Informationssicherheit“ vorgesehen, oder ein Awareness-Rahmenprogramm mit dokumentierter Strategie kommen bisher in den befragten KMU nicht zum Einsatz. Aktivitäten für mehr Awareness werden bislang oft nur in Form einer reinen Wissensvermittlung verstanden – das greift zu kurz.
We consider maintenance sites for urban rail systems, where unavailable tracks typically require changes to the regular timetable, and often even to the line plan. In this paper, we present an integrated mixed-integer linear optimization model to compute an optimal line plan that makes best use of the available tracks, together with a periodic timetable, including its detailed routing on the tracks within the stations. The key component is a flexible, turn-sensitive event-activity network that allows to integrate line planning and train routing using a track choice extension of the Periodic Event Scheduling Problem (PESP). Major goals are to maintain as much of the regular service as possible, and to keep the necessary changes rather local. Moreover, we present computational results on real construction site scenarios on the S-Bahn Berlin network. We demonstrate that this integrated problem is indeed solvable on practically relevant instances.