Fakultät für Informatik und Mathematik
Refine
Year of publication
Document Type
- Doctoral Thesis (94)
- Article (11)
- Conference Proceeding (7)
- Master's Thesis (1)
- Other (1)
- Preprint (1)
- Report (1)
Has Fulltext
- yes (116)
Is part of the Bibliography
- no (116)
Keywords
- Computersicherheit (7)
- Semantic Web (4)
- Web Security (4)
- Browser Security (3)
- Datenschutz (3)
- Internet of Things (3)
- Kryptologie (3)
- Multimedia (3)
- Suchmaschine (3)
- Virtual Network Embedding (3)
Institute
This cumulative dissertation contains selected contributions to the field of asymptotic geometric analysis and high-dimensional probability. It is divided into two chapters: Chapter 1 explains some of the necessary theoretical background. In Section 1.1 it first gives a very concise history of asymptotic geometric analysis in general and then of the objects under study in particular, setting out some cornerstones in the discovery of the functional-analytic, geometric, and probabilistic properties of the spaces under consideration.
The next section (1.2) gives the precise definitions and very basic properties of the three lp-type spaces that play a role in the contributed articles: the classical lp-sequence spaces, the mixed-norm sequence spaces, and the Schatten-classes Sp, each in its infinite- and finite-dimensional version.
Section 1.3 is dedicated to the interplay between geometry and probability, expounding the general idea, introducing a few of the common tools, and exemplifying these on two kinds of limit theorems: Schechtman-Schmuckenschläger-type results and Poincaré-Maxwell-Borel lemmas.
The first chapter concludes with Section 1.4, addressing a small sample of open questions pertaining to the contributed articles which are not answered in said articles and may be the interest of future research.
The entirety of Chapter 2 consists of the contributed articles.
Mobile apps are nowadays the preferred means to accomplish ubiquitous tasks like messaging, e-commerce and even playing games. Often, there exist multiple apps for the same purpose, and it is the choice of the end user to pick an appropriate app. Apps that behave unexpected, e.g., crash frequently, are sooner or later replaced, which isundesirable for the companies developing such apps. Thus, it is essential to tests apps properly before they are released onto the market. However, testing manually is often not only too cost-intensive but also too time-consuming in the short development phase, thus an automated solution is preferred. Testing mobile apps automatically received increased attention in the last decade from primarily people in academia, and several testing techniques evolved. One technique that yielded promising results, especially in different domains, is search-based software testing in which a metaheuristic, e.g., a genetic algorithm, is applied to solve an optimisation problem, e.g., test generation. A main objective of test generation is to produce tests that reveal as many faults as possible.
This in turn requires the generation of tests that deeply explore the tested app. The core metric to quantify how much code tests cover is the measurement of code coverage, which can be computed at different levels of granularity ranging from determining the fraction of covered activities to a very fine-grained measurement that calculates the percentage of covered lines. This coverage information is then often used to guide the search of the employed metaheuristic.
However, current automated test generation approaches produce tests with a rather low code coverage. Thus, a substantial part of tested apps remains unexplored, which in turn misses revealing deeply residing faults. We identified three core issues that are directly related to the generation of low-coverage tests. First, the applicability of current test generators is often limited. This comprises the fact that current state-of-the-art code coverage tools are incapable of instrumenting a substantial number of apps and consequently, test generators cannot utilise detailed coverage information during exploration.
In addition, test generators are often only equipped with a primitive set of actions that are insufficient to simulate system events and complex user inputs. Second, the test execution is extremely time-consuming. This includes among other things the overhead associated with executing individual actions, intermediate restart operations as well as fitness evaluations. Since search-based algorithms require a substantial number of test executions to play out their strengths, the slow test execution impedes the effectiveness of the search. Third, the guidance offered by search-based algorithms is often hampered by applying inadequate fitness functions or by using non-representation-specific variation operators.
In this thesis we address the problem of low-coverage tests in the Android domain by proposing several enhancements for the three identified core issues. Concerning the applicability problem, we provide the implementation of a robust code coverage tool that is capable of measuring coverage at different levels of granularity and requires no access to the source code. We also propose to include actions that can simulate system events as well as complex user inputs. Regarding the performance issue, we suggest the integration of a surrogate model that is capable of predicting the outcome of individual actions or complete tests over time in order to reduce the overall test execution costs. With respect to the lack of guidance offered by traditional search-based algorithms, we suggest alternative search strategies. In the case of a deceptive fitness landscape, we propose using novelty search algorithms. Alternatively, we suggest utilising estimation of distribution algorithms that require no crossover or mutation perators to sample new tests. While all those enhancements had a positive impact on the Android test generation process, the individual empirical studies highlighted that further research is necessary to unleash the full power of the proposed search-based algorithms. In particular, exploring complex user interfaces meaningfully requires more attention whether by introducing additional actions or by extracting valuable hints to infer reasonable text inputs. In addition, the guidance offered by fitness functions is often limited because they are either designed too coarse at all or do not accurately reflect the search objectives.
Protection blinding is a challenging issue in renewables-penetrated distribution grids and refers to a situation where a circuit breaker may not trip due to fault current contribution from distributed generation. This research addresses how the distributed generation location and capacity impact the operation of the circuit breaker in terms of the response time of the circuit breakers. The relative electrical distances of the faults and distributed generation to the circuit breakers are considered. The impact of distributed generation capacity considering the fault location is characterized using a new index called the heterogeneity index. The electrical distance between distributed generations and circuit breakers and the electrical distance between fault and circuit breaker is considered by a second new index called the electrical distance ratio. Data analysis on simulation results shows that these indices capture the phenomena of protection blinding caused by distributed generation.
Results show that a higher distributed generation penetration and faults that are electri
cally further away from a circuit breaker show severe cases of protection blinding captured by the indices. Furthermore, it is demonstrated how these indices can identify the worst impacted locations in the distribution grid. A key result is that protection blinding does not necessarily occur solely due to the presence of distributed generation between a circuit breaker and a fault, but is dependent on factors such as distributed generation location in the distribution grid, fault level, fault level distribution across the generation units and fault location.
The transition towards sustainable energy systems necessitates effective management of renewable energy sources alongside conventional grid infrastructure. This paper presents a comprehensive approach to optimizing grid management by integrating Photovoltaic (PV), wind, and grid energies to minimize costs and enhance sustainability. A key focus lies in developing an accurate scheduling algorithm utilizing Mixed Integer Programming (MIP), enabling dynamic allocation of energy resources to meet demand while minimizing reliance on cost-intensive grid energy. An ensemble learning technique, specifically a stacking algorithm, is employed to construct a robust forecasting pipeline for PV and wind energy generation. The forecasting model achieves remarkable accuracy with a Root Mean Squared Error (RMSE) of less than 0.1 for short-term (15 min and one day ahead) and long-term (one week and one month ahead) predictions. By combining optimization and forecasting methodologies, this research contributes to advancing grid management systems capable of harnessing renewable energy sources efficiently, thus facilitating cost savings and fostering sustainability in the energy sector.
With the increasing use of digital technologies in the automotive sector, the traditional automobile is undergoing a structural transformation, requiring new technologies and enabling innovative mobility concepts.
In particular, the ability to drive automatically or even fully autonomously, update control software, and remain connected to the environment allows attackers to infiltrate highly critical vehicle systems and take control without adequate protection.
Once not only individual vehicles but entire fleets are dominated by software, cyberattacks could disrupt a significant portion of the infrastructure and expose passengers to substantial risks.
This work follows a holistic approach to protecting highly automated software-defined vehicles from cyberattacks by designing and implementing security concepts in the main phases of a vehicle's lifecycle.
We use SAE level 4 prototype vehicles to evaluate our proposed techniques.
We start with a systematic security requirement analysis using the ISA-62443 standard series, demonstrating how threats can be identified in a collaborative, hierarchical process and how the resulting security risks impact the software and hardware architecture of a self-driving vehicle.
We show how this analysis process results in concrete requirements whose consideration reduces the overall security risk to a tolerable level.
Subsequently, we develop technical solutions for selected requirements. We begin by securing the CAN and FlexRay legacy protocols, which we foresee being used in specific areas of SDV in a transitional period despite technological changes.
To enable vehicle-wide security management, we address the management and distribution of cryptographic keys within such networks, mainly focusing on resource-constrained devices.
We propose using lightweight implicit certificates for deriving cryptographic group keys that can be used in CAN networks.
Additionally, we demonstrate how the slot-based frame structure of the FlexRay protocol allows for efficient "multi-slot" authentication, for which we calculate cryptographic keys using hash-based key chains.
SDV use Ethernet-based communication protocols and custom middleware stacks to transmit large amounts of data in real-time.
We develop a three-stage security process for the novel ASOA, which enables the development and central orchestration of system-agnostic functional software components on embedded systems and HPC platforms.
After the central specification of the security architecture at the data flow level, security tokens are automatically calculated and distributed for runtime protection of the service-oriented, DDS-based data transmission.
Our process ensures the strict separation of function and system knowledge, allowing for cost-effective and adaptable security architecture management.
The evaluation in four self-driving, software-defined vehicles demonstrates an average runtime overhead of approximately 5.71%.
As the initial risk analysis and actual cyberattacks have shown, protective measures against the compromise of control units must be taken alongside communication security.
To address this, we develop a method for verifying and validating the software integrity of control units.
A governmental third party confirms a measurement through a digital certificate, proving the examined vehicle's trustworthiness and suitability for participation in automated traffic.
In the final step of this work, we present an assessment scheme that allows software-defined vehicles to evaluate security incidents during operation in terms of their maximum expected damage and initiate appropriate countermeasures.
We follow the ISO/SAE 21434 standard and model attack paths using a graph representing dependencies among internal vehicle assets to account for the propagation effects of cyberattacks.
The assessment of a security incident considers not only the probability of individual attack paths but also the vehicle context.
Our practical evaluation demonstrates that we can detect, report, and assess security incidents below the human reaction time in the earlier mentioned prototype vehicles.
The collection of personal information by organizations has become increasingly essential for social interactions. Nevertheless, according to the GDPR (General Data Protection Regulation), the organizations have to protect collected data. Access Control (AC) mechanisms are traditionally used to secure information systems against unauthorized access to sensitive data. The increased availability of personal sensor data, thanks to IoT-oriented applications, motivates new services to offer insights about individuals. Consequently, data mining algorithms have been proposed to infer personal insights from collected sensor data. Although they can be used for genuine purposes, attackers can leverage those outcomes, combining them with other type of data, and further breaching individuals’ privacy. Thus, bypassing AC mechanisms thanks to such insights is a concrete problem.
We propose an inference detection system based on the analysis of queries issued on a sensor database. The knowledge obtained through these queries, and the inference channels corresponding to the use of data mining algorithms on sensor data to infer individual information, are described using Raw sensor data based Inference ChannEl Model (RICE-M). The detection is carried out by RICE-M based inference detection System (RICE-Sy). RICE-Sy considers at the time of the query, the knowledge that a user obtains via a new query and has obtained via his query history, and determines whether this is sufficient to allow that user to operate a channel. Thus, privacy protection systems can take advantage of the inferences detected by RICE-Sy, taking into account individuals’ information obtained by the attackers via a database of sensors, to further protect these individuals.
In summary, this cumulative dissertation investigates the application of the conjugate gradient method CG for the optimization of artificial neural networks (NNs) and compares this method with common first-order optimization methods, especially the stochastic gradient descent (SGD).
The presented research results show that CG can effectively optimize both small and very large networks. However, the default machine precision of 32 bits can lead to problems. The best results are only achieved in 64-bits computations. The research also emphasizes the importance of the initialization of the NNs’ trainable parameters and shows that an initialization using singular value decomposition (SVD) leads to drastically lower error values. Surprisingly, shallow but wide NNs, both in Transformer and CNN architectures, often perform better than their deeper counterparts. Overall, the research results recommend a re-evaluation of the previous preference for extremely deep NNs and emphasize the potential of CG as an optimization method.
The growing demand for electric vehicles (EV) in the last decade and the most recent European Commission regulation to only allow EV on the road from 2035 involved the necessity to design a cost-effective and sustainable EV charging station (CS). A crucial challenge for charging stations arises from matching fluctuating power supplies and meeting peak load demand. The overall objective of this paper is to optimize the charging scheduling of a hybrid energy storage system (HESS) for EV charging stations while maximizing PV power usage and reducing grid energy costs.
This goal is achieved by forecasting the PV power and the load demand using different deep learning (DL) algorithms such as the recurrent neural network (RNN) and long short-term memory (LSTM). Then, the predicted data are adopted to design a scheduling algorithm that determines the optimal charging time slots for the HESS. The findings demonstrate the efficiency of the proposed approach, showcasing a root-mean-square error (RMSE) of 5.78% for real-time PV power forecasting and 9.70%
for real-time load demand forecasting. Moreover, the proposed scheduling algorithm reduces the total grid energy cost by 12.13%.
CNT-PUFs: highly robust and heat-tolerant carbon-nanotube-based physical unclonable functions
(2023)
In this work, we explored a highly robust and unique Physical Unclonable Function (PUF) based on the stochastic assembly of single-walled Carbon NanoTubes (CNTs) integrated within a wafer-level technology. Our work demonstrated that the proposed CNT-based PUFs are exceptionally robust with an average fractional intra-device Hamming distance well below 0.01 both at room temperature and under varying temperatures in the range from 23 °C to 120 °C. We attributed the excellent heat tolerance to comparatively low activation energies of less than 40 meV extracted from an Arrhenius plot. As the number of unstable bits in the examined implementation is extremely low, our devices allow for a lightweight and simple error correction, just by selecting stable cells, thereby diminishing the need for complex error correction. Through a significant number of tests, we demonstrated the capability of novel nanomaterial devices to serve as highly efficient hardware security primitives.
Vanadium redox-flow batteries (VRFBs) have played a significant role in hybrid energy storage systems (HESSs) over the last few decades owing to their unique characteristics and advantages. Hence, the accurate estimation of the VRFB model holds significant importance in large-scale storage applications, as they are indispensable for incorporating the distinctive features of energy storage systems and control algorithms within embedded energy architectures. In this work, we propose a novel approach that combines model-based and data-driven techniques to predict battery state variables, i.e., the state of charge (SoC), voltage, and current. Our proposal leverages enhanced deep reinforcement learning techniques, specifically deep q-learning (DQN), by combining q-learning with neural networks to optimize the VRFB-specific parameters, ensuring a robust fit between the real and simulated data. Our proposed method outperforms the existing approach in voltage prediction. Subsequently, we enhance the proposed approach by incorporating a second deep RL algorithm—dueling DQN—which is an improvement of DQN, resulting in a 10% improvement in the results, especially in terms of voltage prediction. The proposed approach results in an accurate VFRB model that can be generalized to several types of redox-flow batteries.