@phdthesis{Stadler2015, author = {Stadler, Thomas}, title = {Eine Anwendung der Invariantentheorie auf das Korrespondenzproblem lokaler Bildmerkmale}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-4026}, school = {Universit{\"a}t Passau}, pages = {XII, 324 S.}, year = {2015}, abstract = {Als sich in der ersten H{\"a}lfte des 19. Jahrhunderts zunehmend mehr bedeutende Mathematiker mit der Suche nach Invarianten besch{\"a}ftigten, konnte nat{\"u}rlich noch niemand vorhersehen, dass die Invariantentheorie mit Beginn des Computerzeitalters in der Bildverarbeitung bzw. dem Rechnersehen ein {\"a}ußerst fruchtbares Anwendungsgebiet finden wird. In dieser Arbeit wird eine neue Anwendungsm{\"o}glichkeit der Invariantentheorie in der Bildverarbeitung vorgestellt. Dazu werden lokale Bildmerkmale betrachtet. Dabei handelt es sich um die Koordinaten einer Polynomfunktion bzgl. einer geeigneten Orthonormalbasis von P_n(R^2,R), die die zeitintegrierte Sensorinputfunktion auf lokalen Pixelfenstern bestm{\"o}glich approximiert. Diese Bildmerkmale werden in vielen Anwendungen eingesetzt, um Objekte in Bildern zu erkennen und zu lokalisieren. Beispiele hierf{\"u}r sind die Detektion von Werkst{\"u}cken an einem Fließband oder die Verfolgung von Fahrbahnmarkierungen in Fahrerassistenzsystemen. Modellieren l{\"a}sst sich die Suche nach einem Muster in einem Suchbild als Paar von Stereobildern, auf denen lokal die affin-lineare Gruppe AGL(R) operiert. Will man also feststellen, ob zwei lokale Pixelfenster in etwa Bilder eines bestimmten dreidimensionalen Oberfl{\"a}chenausschnitts sind, ist zu kl{\"a}ren, ob die Bildausschnitte durch eine Operation der Gruppe AGL(R) n{\"a}herungsweise ineinander {\"u}bergef{\"u}hrt werden k{\"o}nnen. Je nach Anwendung gen{\"u}gt es bereits, passende Untergruppen G von AGL(R) zu betrachten. Dank der lokalen Approximation durch Polynomfunktionen induziert die Operation einer Untergruppe G eine Operation auf dem reellen Vektorraum P_n(R^2,R). Damit l{\"a}sst sich das Korrespondenzproblem auf die Frage reduzieren, ob es eine Transformation T in G gibt so, dass p ungef{\"a}hr mit der Komposition von q und T f{\"u}r die zugeh{\"o}rigen Approximationspolynome p,q in P_n(R^2,R) gilt. Mit anderen Worten, es ist zu kl{\"a}ren, ob sich p und q n{\"a}herungsweise in einer G-Bahn befinden, eine typische Fragestellung der Invariantentheorie. Da nur lokale Bildausschnitte betrachtet werden, gen{\"u}gt es weiter, Untergruppen G von GL_2(R) zu betrachten. Dann erh{\"a}lt man sofort auch die Antwort f{\"u}r das semidirekte Produkt von R^2 mit G. Besonders interessant f{\"u}r Anwendungen ist hierbei die spezielle orthogonale Gruppe G=SO_2(R) und damit insgesamt die eigentliche Euklidische Gruppe. F{\"u}r diese Gruppe und spezielle Pixelfenster ist das Korrespondenzproblem bereits gel{\"o}st. In dieser Arbeit wird das Problem in eben dieser Konstellation ebenfalls gel{\"o}st, allerdings auf elegante Weise mit Methoden der Invariantentheorie. Der Ansatz, der hier vorgestellt wird, ist aber nicht auf diese Gruppe und spezielle Pixelfenster begrenzt, sondern leicht auf weitere F{\"a}lle erweiterbar. Dazu ist insbesondere zu kl{\"a}ren, wie sich sogenannte fundamentale Invarianten von lokalen Bildmerkmalen, also letztendlich Invarianten von Polynomfunktionen, berechnen lassen, d.h. Erzeugendensysteme der entsprechenden Invariantenringe. Mit deren Hilfe l{\"a}sst sich die Zugeh{\"o}rigkeit einer Polynomfunktion zur Bahn einer anderen Funktion auf einfache Weise untersuchen. Neben der Vorstellung des Verfahrens zur Korrespondenzfindung und der daf{\"u}r notwendigen Theorie werden in dieser Arbeit Erzeugendensysteme von Invariantenringen untersucht, die besonders "sch{\"o}ne" Eigenschaften besitzen. Diese sch{\"o}nen Erzeugendensysteme von Unteralgebren werden, analog zu Gr{\"o}bner-Basen als Erzeugendensysteme von Idealen, SAGBI-Basen genannt ("Subalgebra Analogs to Gr{\"o}bner Bases for Ideals"). SAGBI-Basen werden hier insbesondere aus algorithmischer Sicht behandelt, d.h. die Berechnung von SAGBI-Basen steht im Vordergrund. Dazu werden verschiedene Algorithmen erarbeitet, deren Korrektheit bewiesen und implementiert. Daraus resultiert ein Software-Paket zu SAGBI-Basen f{\"u}r das Computeralgebrasystem ApCoCoA, dessen Funktionalit{\"a}t in diesem Umfang in keinem Computeralgebrasystem zu finden sein wird. Im Zuge der Umsetzung der einzelnen Algorithmen konnte außerdem die Theorie der SAGBI-Basen an zahlreichen Stellen erweitert werden.}, language = {de} } @phdthesis{Jovanovic2015, author = {Jovanovic, Philipp}, title = {Analysis and Design of Symmetric Cryptographic Algorithms}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-3319}, school = {Universit{\"a}t Passau}, pages = {216}, year = {2015}, abstract = {This doctoral thesis is dedicated to the analysis and the design of symmetric cryptographic algorithms. In the first part of the dissertation, we deal with fault-based attacks on cryptographic circuits which belong to the field of active implementation attacks and aim to retrieve secret keys stored on such chips. Our main focus lies on the cryptanalytic aspects of those attacks. In particular, we target block ciphers with a lightweight and (often) non-bijective key schedule where the derived subkeys are (almost) independent from each other. An attacker who is able to reconstruct one of the subkeys is thus not necessarily able to directly retrieve other subkeys or even the secret master key by simply reversing the key schedule. We introduce a framework based on differential fault analysis that allows to attack block ciphers with an arbitrary number of independent subkeys and which rely on a substitution-permutation network. These methods are then applied to the lightweight block ciphers LED and PRINCE and we show in both cases how to recover the secret master key requiring only a small number of fault injections. Moreover, we investigate approaches that utilize algebraic instead of differential techniques for the fault analysis and discuss advantages and drawbacks. At the end of the first part of the dissertation, we explore fault-based attacks on the block cipher Bel-T which also has a lightweight key schedule but is not based on a substitution-permutation network but instead on the so-called Lai-Massey scheme. The framework mentioned above is thus not usable against Bel-T. Nevertheless, we also present techniques for the case of Bel-T that enable full recovery of the secret key in a very efficient way using differential fault analysis. In the second part of the thesis, we focus on authenticated encryption schemes. While regular ciphers only protect privacy of processed data, authenticated encryption schemes also secure its authenticity and integrity. Many of these ciphers are additionally able to protect authenticity and integrity of so-called associated data. This type of data is transmitted unencrypted but nevertheless must be protected from being tampered with during transmission. Authenticated encryption is nowadays the standard technique to protect in-transit data. However, most of the currently deployed schemes have deficits and there are many leverage points for improvements. With NORX we introduce a novel authenticated encryption scheme supporting associated data. This algorithm was designed with high security, efficiency in both hardware and software, simplicity, and robustness against side-channel attacks in mind. Next to its specification, we present special features, security goals, implementation details, extensive performance measurements and discuss advantages over currently deployed standards. Finally, we describe our preliminary security analysis where we investigate differential and rotational properties of NORX. Noteworthy are in particular the newly developed techniques for differential cryptanalysis of NORX which exploit the power of SAT- and SMT-solvers and have the potential to be easily adaptable to other encryption schemes as well.}, subject = {Kryptologie}, language = {en} } @misc{OPUS4-333, title = {Universit{\"a}tsbibliothek Passau: Jahresbericht 2014}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-3334}, pages = {26}, year = {2015}, abstract = {Jahresbericht der Universit{\"a}tsbibliothek Passau - Berichtsjahr 2014}, language = {de} } @misc{Barbato2015, author = {Barbato, Mariano}, title = {Posts{\"a}kulare Weltpolitik}, editor = {Barbato, Mariano and Marfeld, Sarah}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-5564}, pages = {190 Seiten}, year = {2015}, abstract = {Der Sammelband analysiert den Einfluss von Religion in der Weltpolitik an Fallbeispielen zwischen Internationalen Beziehungen, Welt{\"o}ffentlichkeit, L{\"a}nderstudien und Europ{\"a}ischer Integration. Der posts{\"a}kulare Ansatz von J{\"u}rgen Habermas wird auf sein globales Potential an der Schnittstelle von Außen- und Innenpolitik {\"u}berpr{\"u}ft und weiterentwickelt.}, subject = {Religion}, language = {de} } @phdthesis{Kriegl2015, author = {Kriegl, Markus}, title = {Generalizations and Applications of Border Bases}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-3628}, school = {Universit{\"a}t Passau}, year = {2015}, abstract = {This doctoral thesis is devoted to generalize border bases to the module setting and to apply them in various ways. First, we generalize the theory of border bases to finitely generated modules over a polynomial ring. We characterize these generalized border bases and show that we can compute them. As an application, we are able to characterize subideal border bases in various new ways and give a new algorithm for their computation. Moreover, we prove Schreyer's Theorem for border bases of submodules of free modules of finite rank over a polynomial ring. In the second part of this thesis, we study the effect of homogenization to border bases of zero-dimensional ideals. This yields the new concept of projective border bases of homogeneous one-dimensional ideals. We show that there is a one-to-one correspondence between projective border bases and zero-dimensional closed subschemes of weighted projective spaces that have no point on the hyperplane at infinity. Applying that correspondence, we can characterize uniform zero-dimensional closed subschemes of weighted projective spaces that have a rational support over the base field in various ways. Finally, we introduce projective border basis schemes as specific subschemes of border basis schemes. We show that these projective border basis schemes parametrize all zero-dimensional closed subschemes of a weighted projective space whose defining ideals possess a projective border basis. Assuming that the base field is algebraically closed, we are able to prove that the set of all closed points of a projective border basis scheme that correspond to a uniform subscheme is a constructive set with respect to the Zariski topology.}, language = {en} } @misc{Hennig2015, author = {Hennig, Martin}, title = {Krise … continued: Popul{\"a}rkulturelle Funktionen seriellen Krisenerz{\"a}hlens am Beispiel Breaking Bad}, doi = {10.15475/skms.2015.1.4}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-2987}, pages = {97-120}, year = {2015}, abstract = {Die zentrale Fragestellung der folgenden Ausf{\"u}hrungen wird dementsprechend lauten, durch welche scheinbar extrem popul{\"a}ren Merkmale sich BREAKING BAD aufbauend oder abweichend von Gattungskonventionen auszeichnet und inwiefern diese mit dem kulturellen Krisendiskurs des Produktionszeitraumes korrelieren. Dabei wird die Serie als spezifische Form der Krisenartikulation und -bearbeitung analysiert. Dazu werden anfangs einige theoretische Erw{\"a}gungen zum seriellen Erz{\"a}hlen vorausgeschickt. Im Rahmen der darauf folgenden Handlungsanalyse wird insbesondere auf das vorgef{\"u}hrte Familienmodell, die kausale Weltordnung der Diegese, Identit{\"a}tskonflikte des Protagonisten, B{\"u}rgerlichkeit als Krisenraum sowie das hier propagierte Gegenmodell poetischer Gerechtigkeit einzugehen sein. Abschließend sollen die daraus resultierenden Befunde einer zusammenfassenden Analyse des Krisendiskurses in BREAKING BAD dienen.}, language = {de} } @phdthesis{Liebig2015, author = {Liebig, J{\"o}rg}, title = {Analysis and Transformation of Configurable Systems}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-2996}, school = {Universit{\"a}t Passau}, pages = {160}, year = {2015}, abstract = {Static analysis tools and transformation engines for source code belong to the standard equipment of a software developer. Their use simplifies a developer's everyday work of maintaining and evolving software systems significantly and, hence, accounts for much of a developer's programming efficiency and programming productivity. This is also beneficial from a financial point of view, as programming errors are early detected and avoided in the the development process, thus the use of static analysis tools reduces the overall software-development costs considerably. In practice, software systems are often developed as configurable systems to account for different requirements of application scenarios and use cases. To implement configurable systems, developers often use compile-time implementation techniques, such as preprocessors, by using \#ifdef directives. Configuration options control the inclusion and exclusion of \#ifdef-annotated source code and their selection/deselection serve as an input for generating tailor-made system variants on demand. Existing configurable systems, such as the linux kernel, often provide thousands of configuration options, forming a huge configuration space with billions of system variants. Unfortunately, existing tool support cannot handle the myriads of system variants that can typically be derived from a configurable system. Analysis and transformation tools are not prepared for variability in source code, and, hence, they may process it incorrectly with the result of an incomplete and often broken tool support. We challenge the way configurable systems are analyzed and transformed by introducing variability-aware static analysis tools and a variability-aware transformation engine for configurable systems' development. The main idea of such tool support is to exploit commonalities between system variants, reducing the effort of analyzing and transforming a configurable system. In particular, we develop novel analysis approaches for analyzing the myriads of system variants and compare them to state-of-the-art analysis approaches (namely sampling). The comparison shows that variability-aware analysis is complete (with respect to covering the whole configuration space), efficient (it outperforms some of the sampling heuristics), and scales even to large software systems. We demonstrate that variability-aware analysis is even practical when using it with non-trivial case studies, such as the linux kernel. On top of variability-aware analysis, we develop a transformation engine for C, which respects variability induced by the preprocessor. The engine provides three common refactorings (rename identifier, extract function, and inline function) and overcomes shortcomings (completeness, use of heuristics, and scalability issues) of existing engines, while still being semantics-preserving with respect to all variants and being fast, providing an instantaneous user experience. To validate semantics preservation, we extend a standard testing approach for refactoring engines with variability and show in real-world case studies the effectiveness and scalability of our engine. In the end, our analysis and transformation techniques show that configurable systems can efficiently be analyzed and transformed (even for large-scale systems), providing the same guarantees for configurable systems as for standard systems in terms of detecting and avoiding programming errors.}, subject = {Refactoring}, language = {en} } @phdthesis{Braun2015, author = {Braun, Bastian}, title = {Web-based Secure Application Control}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-3048}, school = {Universit{\"a}t Passau}, year = {2015}, abstract = {The world wide web today serves as a distributed application platform. Its origins, however, go back to a simple delivery network for static hypertexts. The legacy from these days can still be observed in the communication protocol used by increasingly sophisticated clients and applications. This thesis identifies the actual security requirements of modern web applications and shows that HTTP does not fit them: user and application authentication, message integrity and confidentiality, control-flow integrity, and application-to-application authorization. We explore the other protocols in the web stack and work out why they can not fill the gap. Our analysis shows that the underlying problem is the connectionless property of HTTP. However, history shows that a fresh start with web communication is far from realistic. As a consequence, we come up with approaches that contribute to meet the identified requirements. We first present impersonation attack vectors that begin before the actual user authentication, i.e. when secure web interaction and authentication seem to be unnecessary. Session fixation attacks exploit a responsibility mismatch between the web developer and the used web application framework. We describe and compare three countermeasures on different implementation levels: on the source code level, on the framework level, and on the network level as a reverse proxy. Then, we explain how the authentication credentials that are transmitted for the user login, i.e. the password, and for session tracking, i.e. the session cookie, can be complemented by browser-stored and user-based secrets respectively. This way, an attacker can not hijack user accounts only by phishing the user's password because an additional browser-based secret is required for login. Also, the class of well-known session hijacking attacks is mitigated because a secret only known by the user must be provided in order to perform critical actions. In the next step, we explore alternative approaches to static authentication credentials. Our approach implements a trusted UI and a mutually authenticated session using signatures as a means to authenticate requests. This way, it establishes a trusted path between the user and the web application without exchanging reusable authentication credentials. As a downside, this approach requires support on the client side and on the server side in order to provide maximum protection. Another approach avoids client-side support but can not implement a trusted UI and is thus susceptible to phishing and clickjacking attacks. Our approaches described so far increase the security level of all web communication at all time. This is why we investigate adaptive security policies that fit the actual risk instead of permanently restricting all kinds of communication including non-critical requests. We develop a smart browser extension that detects when the user is authenticated on a website meaning that she can be impersonated because all requests carry her identity proof. Uncritical communication, however, is released from restrictions to enable all intended web features. Finally, we focus on attacks targeting a web application's control-flow integrity. We explain them thoroughly, check whether current web application frameworks provide means for protection, and implement two approaches to protect web applications: The first approach is an extension for a web application framework and provides protection based on its configuration by checking all requests for policy conformity. The second approach generates its own policies ad hoc based on the observed web traffic and assuming that regular users only click on links and buttons and fill forms but do not craft requests to protected resources.}, subject = {Computersicherheit}, language = {en} } @phdthesis{Wiemann2015, author = {Wiemann, Joachim}, title = {Diskriminierungsverbote unter Privaten: Rechtsdurchsetzung im deutschen und US-amerikanischen Recht}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-3162}, school = {Universit{\"a}t Passau}, pages = {236}, year = {2015}, abstract = {Die Arbeit untersucht die Rechtsdurchsetzung von an Private gerichteten Diskriminierungsverboten im deutschen Recht und im US-Bundesrecht. Teil 1 f{\"u}hrt in die Fragestellung der Arbeit ein und behandelt rechtssystem{\"u}bergreifende Grundlagen. Teil 2 stellt den Rahmen des Unionsrechts f{\"u}r nationales Antidiskriminierungsrecht dar. Die Teile 3 und 4 sind der Analyse eines Rechtsfolgensystems gewidmet. Der dritte Teil besch{\"a}ftigt sich dabei mit der Rechtslage in Deutschland, der vierte Teil mit dem US-Bundesrecht. Teil 5 ist eine vergleichende Analyse deutscher und amerikanischer Konzepte und greift so auf die Teile 3 und 4 zur{\"u}ck. Die Untersuchung geht dabei sowohl grundlegenden Strukturentscheidungen nach (wie z. B. dem fast vollst{\"a}ndigen Fehlen kollektiver Rechtsdurchsetzung in Deutschland) als auch der konkreten Ausgestaltung bestimmter Rechtsfolgen im Detail und zeigt Gemeinsamkeiten und Unterschiede auf. Teil 6 abstrahiert von den konkreten nationalen Regelungen und untersucht Rechtsdurchsetzungs- und Rechtsfolgenmodelle f{\"u}r die Verletzung von Diskriminierungsverboten auf ihre Eignung zur Verhaltenssteuerung anhand verschiedener Modelle; dabei wird ein interdisziplin{\"a}rer Ansatz verfolgt, der insbesondere Erkenntnisse der {\"o}konomischen Analyse des Rechts ber{\"u}cksichtigt. Teil 7 enth{\"a}lt abschließende Bemerkungen.}, subject = {Diskriminierungsverbot}, language = {de} } @misc{OPUS4-294, title = {Schriften zur Kultur- und Mediensemiotik | Online. Ausgabe 1}, number = {1}, editor = {Nies, Martin}, organization = {Virtuelles Zentrum f{\"u}r kultursemiotische Forschung}, issn = {2364-9224}, doi = {10.15475/skms.2015.1}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:739-opus4-2949}, pages = {124}, year = {2015}, abstract = {Inhalt der ersten Ausgabe der Schriften zur Kultur- und Mediensemiotik | Online Martin Nies (Hrsg.) Vorwort zur ersten Ausgabe Martin Siefkes Sturm auf die Zeichen: Was die Semiotik von ihren Kritikern lernen kann Hans Krah German "volkst{\"u}mliche Musik" of the Early Nineties and 'Modern Society': Strategies of De-Individualisation as a Contribution to a Collective Re-Organisation Martin Nies Culture-Clash-Kom{\"o}dien der Gegenwart: Konzeptionen von Transkulturalit{\"a}t, Intrakulturalit{\"a}t und Gender in T{\"u}rkisch f{\"u}r Anf{\"a}nger, Fack ju G{\"o}hte und Zwei Familien auf der Palme Martin Hennig Krise … continued: Popul{\"a}rkulturelle Funktionen seriellen Krisenerz{\"a}hlens am Beispiel Breaking Bad Impressum}, language = {de} }