-
Kerscher, S., Ludwig, B., Müller, N.: Investigating the Added Value of Combining Regression Results from Different Window Lengths. AIKE. pp. 128-135. IEEE (2019).
Predicting the motion of a dynamic object by using time series is highly dependent on the chosen window size. If we use a too short window length the prediction gets noisy and is strongly affected by measurement errors. Too large windows lead to an inert behavior. In this paper we want to analyze, if there is an added value of using regression results coming from different window sizes instead of one, for classifying the performed maneuver. For our investigation, we are using motion data from pedestrians, taken by a laser. Those trajectories are the basis for our regression predictions. From those predictions, we are calculating features, based on one regression result with one window size, or based on two results with different window sizes. In the next step, we analyze which features are more significant for maneuver detection. The evaluation is done with feature selection methods like Principal Component Analysis or Extremely Randomized Trees. Additionally, we are training Neural Networks on features sets, stemming from regression results of one, ore two window sizes. On the outcome of those tests we can estimate the added value of two different regression window length. If features, which are using information from short- and longtime regression, are ranked better than features which are only based on one regression output we can conclude that there is an added value by using different window sizes.
-
Liang, H., Zimmermann, A., Reiner, K., Christian, F.: A new method for solving the height problem in deflectometry. Proceedings Applied Optical Metrology III (2019).
Phase-measuring deflectometry (PMD) is an established measurement method for determining the topography of specular free-form surfaces. However, since each camera pixel only contains information about the location of the observed screen point, but not about the incident ray direction, the surface slope cannot be determined unambiguously without prior knowledge of the height. In order to overcome this difficulty (known as the ”height problem” of PMD), several cameras with overlapping fields of view are often used. This, however, requires a very large screen and additional installation space in order to ensure sufficiently diverse viewing directions within the overlap region. Other solutions, such as multiple measurements with shifted screen positions or the use of additional measuring equipment to determine the object position, also have considerable drawbacks due to the longer measurement time and the greater calibration effort. A new method is presented which avoids these disadvantages.
-
Weber, K., Saueressig, G., Schütz, A.: Informationssicherheit und Datenschutz an Hochschulen organisieren. Angewandte Forschung in der Wirtschaftsinformatik. (2019).
Für Aufgaben zur Sicherheit von Informationen und zum Schutz von Daten müssen an Hoch-schulen passende Organisationsstrukturen geschaffen werden. Hochschulen haben durch die Freiheit von Forschung und Lehre einerseits und durch einen gesetzlich streng geregelten Verwaltungsbetrieb andererseits spezielle Herausforderungen in der Organisationsgestal-tung. Auf Basis des BSI-Standards 200-2 zeigt der Beitrag eine Organisationsstruktur für In-formationssicherheits-und Datenschutzmanagement, die an einer bayerischen Hochschule entwickelt wurde. Die Organisationsstruktur definiert Rollen und Gremien auf drei Ebenen (strategisch, taktisch, operativ) und unterscheidet zentrale und dezentrale Verantwortlichkei-ten. Die Struktur deckt den hohen Koordinationsbedarf, berücksichtigt die Diskussionskultur und gewährleistet die Partizipation aller Hochschulangehörigen
-
von Rymon Lipinski, B., Seibt, S., Roth, J., Abé, D.: Level Graph - Incremental Procedural Generation of Indoor Levels using Minimum Spanning Trees. CoG. pp. 1-7. IEEE (2019).
Procedural generation of virtual worlds is an important aspect of game development since decades, typically for increasing replayability or for speeding up the level creation process. However, the utilization of this potential has always been a great challenge due to the difficult controllability of the underlying algorithms or limitations to specific level geometries, like 2D regular structures. In this paper, we present a novel approach for semi-automatic generation of a wide variety of 2D/3D corridor and room systems. The underlying processing pipeline is based on a separation between a user-guided generation of a graph-based abstract level structure and a fully-automatic construction of the corresponding geometry using a pre-modeled component library. The core algorithm is built on the computation of an extended minimal spanning tree, which can be controlled by a set of intuitive vertex and edge parameters. First experimental results have shown that our incremental generation pipeline allows the efficient creation of complex indoor levels, minimizing limitations on level and game designers' creativity.
-
Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. In Computers and Security 86, 2019, 147-167, DOI:. Computers and Security. pp. 147-167 (2019).
Labeled data sets are necessary to train and evaluateanomaly-based network intrusion detection systems. This workprovides a focused literature survey of data sets for network-based intrusion detection and describes the underlying packet-and flow-based network data in detail. The paper identifies 15different properties to assess the suitability of individual data setsfor specific evaluation scenarios. These properties cover a widerange of criteria and are grouped into five categories such asdata volume or recording environment for offering a structuredsearch. Based on these properties, a comprehensive overview ofexisting data sets is given. This overview also highlights thepeculiarities of each data set. Furthermore, this work brieflytouches upon other sources for network-based data such astraffic generators and data repositories. Finally, we discuss ourobservations and provide some recommendations for the use andthe creation of network-based data sets.
-
Zoppelt, M., Tavakoli Kolagari, R.: UnCle SAM : Modeling Cloud Attacks with the Automotive Security Abstraction Model. In CLOUD COMPUTING 2019. CLOUD COMPUTING 2019, The Tenth International Conference on Cloud Computing, GRIDs, and Virtualization, At Venice, Italy (2019).
Driverless (autonomous) vehicles will have greater attack potential than any other individual mobility vehicles ever before. Most intelligent vehicles require communication interfaces to the environment, direct connections (e.g., Vehicle-to-X (V2X)) to an Original Equipment Manufacturer (OEM) backend service or a cloud. By connecting to the Internet, which is not only necessary for the infotainment systems, cars could increasingly turn into targets for malware or botnet attacks. Remote control via the Internet by a remote attacker is also conceivable, as has already been impressively demonstrated. This paper examines security modeling for cloud-based remote attacks on autonomous vehicles using a Security Abstraction Model (SAM) for automotive software systems). SAM adds to the early phases of (automotive) software architecture development by explicitly documenting attacks and handling them with security techniques. SAM also provides the basis for comprehensive security analysis techniques, such as the already available Common Vulnerability Scoring System (CVSS) or any other attack assessment system.
-
Zoppelt, M., Kolagari, R.T.: What Today's Serious Cyber Attacks on Cars Tell Us: Consequences for Automotive Security and Dependability. In: Papadopoulos, Y., Aslansefat, K., Katsaros, P., and Bozzano, M. (eds.) IMBSA. pp. 270-285. Springer (2019).
Highly connected with the environment via various interfaces, cars have been the focus of malicious cyber attacks for years. These attacks are becoming an increasing burden for a society with growing vehicle autonomization: they are the sword of Damocles of future mobility. Therefore, research is particularly active in the area of vehicle IT security, and in part also in the area of dependability, in order to develop effective countermeasures and to maintain a minimum of one step ahead of hackers. This paper examines the known state-of-the-art security and dependability measures based on a detailed and systematic analysis of published cyber attacks on automotive software systems. The sobering result of the analysis of the cyber attacks with the model-based technique SAM (Security Abstraction Model) and a categorization of the examined attacks in relation to the known security and dependability measures is that most countermeasures against cyber attacks are hardly effective. They either are not applicable to the underlying problem or take effect too late; the intruder has already gained access to a substantial part of the vehicle when the countermeasures apply. The paper is thus contributing to an understanding of the gaps that exist today in the area of vehicle security and dependability and concludes concrete research challenges.
-
Niedermaier, M., Hanka, T., Plaga, S., von Bodisco, A., Merli, D.: Efficient Passive ICS Device Discovery and Identification by MAC Address Correlation. Computing Research Repository CoRR. abs/1904.04271, (2019).
Owing to a growing number of attacks, the assessment of Industrial Control Systems (ICSs) has gained in importance. An integral part of an assessment is the creation of a detailed inventory of all connected devices, enabling vulnerability evaluations. For this purpose, scans of networks are crucial. Active scanning, which generates irregular traffic, is a method to get an overview of connected and active devices. Since such additional traffic may lead to an unexpected behavior of devices, active scanning methods should be avoided in critical infrastructure networks. In such cases, passive network monitoring offers an alternative, which is often used in conjunction with complex deep-packet inspection techniques. There are very few publications on lightweight passive scanning methodologies for industrial networks. In this paper, we propose a lightweight passive network monitoring technique using an efficient Media Access Control (MAC) address-based identification of industrial devices. Based on an incomplete set of known MAC address to device associations, the presented method can guess correct device and vendor information. Proving the feasibility of the method, an implementation is also introduced and evaluated regarding its efficiency. The feasibility of predicting a specific device/vendor combination is demonstrated by having similar devices in the database. In our ICS testbed, we reached a host discovery rate of 100% at an identification rate of more than 66%, outperforming the results of existing tools.
-
Niedermaier, M., Striegel, M., Sauer, F., Merli, D., Sigl, G.: Efficient Intrusion Detection on Low-Performance Industrial IoT Edge Node Devices. Computing Research Repository CoRR. abs/1908.03964, (2019).
-
Niedermaier, M., Fischer, F., Merli, D., Sigl, G.: Network Scanning and Mapping for IIoT Edge Node Device Security. Computing Research Repository CoRR. abs/1910.07622, (2019).
-
Sauer, F., Niedermaier, M., Kießling, S., Merli, D.: LICSTER - A Low-cost ICS Security Testbed for Education and Research. Computing Research Repository CoRR. abs/1910.00303, (2019).
Unnoticed by most people, Industrial Control Systems (ICSs) control entire productions and critical infrastructures such as water distribution, smart grid and automotive manufacturing. Due to the ongoing digitalization, these systems are becoming more and more connected in order to enable remote control and monitoring. However, this shift bears significant risks, namely a larger attack surface, which can be exploited by attackers. In order to make these systems more secure, it takes research, which is, however, difficult to conduct on productive systems, since these often have to operate twenty-four-seven. Testbeds are mostly very expensive or based on simulation with no real-world physical process. In this paper, we introduce LICSTER, an open-source low-cost ICS testbed, which enables researchers and students to get hands-on experience with industrial security for about 500 Euro. We provide all necessary material to quickly start ICS hacking, with the focus on low-cost and open-source for education and research.
-
Niedermaier, M., Merli, D., Georg, S.: A Secure Dual-MCU Architecture for Robust Communication of IIoT Devices. Mediterranean Conference on Embedded Computing (MECO); IEEE. (2019).
The Industrial Internet of Things (IIoT) has already become a part of our everyday life be it water supply, smart grid, or production, IIoT is everywhere. For example, factory operators want to know the current state of the production line. These new demands for data acquisition in modern plants require industrial components to be able to communicate. Nowadays, network communication in Industrial Control Systems (ICSs) is often implemented via an IP-based protocol. This intercommunication also brings a larger attack surface for hackers. If an IIoT device is influenced by attackers, the physical process could be affected. For example, a high network load could cause a high Central Processing Unit (CPU) load and influence the reaction time on the physical control side. In this paper, we introduce a dual Microcontroller Unit (MCU) setup to ensure a resilient controlling for IIoT devices like Programmable Logic Controllers (PLCs). We introduce a possible solution for the demand of secure architectures in the IIoT. Moreover, we provide a Proof of Concept (PoC) implementation with a benchmark and a comparison with a standard PLC.
-
Liang, H., Zimmermann, A., Kickingereder, R., Faber, C.: Eine neue Methode zur Lösung des Höhenproblems in der Deflektometrie. Deutsche Gesellschaft für angewandte Optik e.V (2019).
Phasenmessende Deflektometrie (PMD) ist ein etabliertes Messverfahren zur Bestimmung der Topographie spiegelnder Freiformflächen. Dabei wird ein bekanntes sinusförmiges Muster auf einem kalibrierten Bildschirm angezeigt. Dieses wird von der Objektoberfläche reflektiert und von einer kalibrierten Kamera aufgenommen. Die lokale Neigung der Oberfläche wird durch Strahlverfolgung ausgewertet. Da jedoch in jedem Kamerapixel nur Information über den Ort des beobachteten Schirmpunkts, nicht aber über dessen Abstrahlrichtung vorliegt, kann die Neigung ohne eine bekannte Höhe nicht eindeutig bestimmt werden. Um diese als „Höhenproblem“ der PMD bekannte Schwierigkeit zu überwinden, werden häufig mehrere Kameras mit überlappenden Bildfeldern verwendet. Dies ist jedoch apparativ aufwendig und nimmt einen großen Bauraum in Anspruch. Auch andere Lösungen wie z.B. die mehrfache Messung bei verschobenen Schirmpositionen oder die Verwendung zusätzlicher Messeinrichtungen zur Bestimmung der Objektlage wirken sich aufgrund der längeren Messzeit und des größeren Kalibrieraufwands nachteilig auf die Performance aus. Es wird ein neues Verfahren vorgestellt, welches obige Nachteile vermeidet.
-
Herl, G., Hiller, J., Kasperl, S., Maier, A.: Reduktion von Metallartefakten durch multipositionale Datenfusion in der industriellen Röntgen-Computertomographie. de Gruyter, tm-Technisches Messen. (2019).
Metal artifacts represent a major challenge for measuring with X-ray computed tomography. This paper presents a method for multipositional data fusion for the reduction of metal artifacts. For this purpose, several scans of the same object are performed with different object positioning, registered on each other and then reconstructed together using a local quality measure. The added value of the method is demonstrated in practical experiments. In particular, it is shown how plastic structures can be made visible despite strong metal artifacts with little effort and without prior knowledge, giving the method a unique selling point compared to existing metal artefact reduction methods.
-
Epple, P., Steppert, M., Malcherek, A., Fritsche, M.: Theoretical and Numerical Analysis of the Pressure Distribution and Discharge Velocity in Flows Under Inclined Sluice Gates. ASME-JSME_KSME 2019 8th Joint Fluids Engineering Conference. (2019).
The flow under sluice gates is nowadays frequently still determined by empirical approaches, based on the Bernoulli equation and a specific discharge coefficient which depends on the geometry of the sluice gate. This discharge coefficient is determined either from potential theory approaches or from a variety of experimental series. Based on Malcherek’s new momentum balance theory approach, the flow under inclined sluice gates can be described now on a physical approach. While the pressure distribution of the vertical sluice gate, which was investigated by the authors in previous works, results in a horizontal acting force only, the pressure distribution of the inclined sluice gate brings an additional force component acting in the vertical direction. The magnitude and the sign of the force in the vertical direction depends on the sign and the value of the angle of inclination. With the commercial CFD solver Star-CCM+ from Siemens PLM, the flow under inclined sluice gates was investigated in detail, to be compared with Malcherek’s momentum balance theory. For this basic investigation, boundary layer effects and 3D effects were first neglected. For various angles of inclination and water levels the pressure distribution on the ground under the sluice gate and on the surface of the sluice gate itself, were evaluated and mathematical functions were introduced to describe the pressure distributions. These results were compared with the results from the vertical sluice gate. Also the discharge velocity and the volumetric flow rate were analyzed and compared with the Malcherek’s new momentum balance theory for inclined sluice gates.
-
Fritsche, M., Epple, P., Hasselmann, K., Reinker, F., Wagner, R., aus der Wiesche, S., Russwurm, H.: CFD-Simulation of Centrifugal Fan Performance Characteristics Using Ideal and Real Gas Models for Air and Organic Fluids. ASME-JSME-KSME 2019 8th Joint Fluids Engineering Conference (2019).
Efficient processes with organic fluids are becoming increasingly important. The high tech fluid Novec™ is such an organic fluid and is used, for example, as a coolant for highperformance electronics, low-temperature heat transfer applications, cooling of automotive batteries, just to mention a few. Thus, efficient designed fans for the transport of organic fluids are becoming more and more important in the process engineering. CFD-simulations are nowadays integral part of the design and optimization process of fans. For air at the most usual application conditions, i.e. no extreme temperatures or pressures, the ideal gas model is in good agreement with the real gas approach. In the present study, this real gas approach for organic fluids have been investigated with CFD methods and, the deviation from the ideal gas model has been analyzed. For this purpose, a simulation model of a centrifugal fan with volute has been designed as a test case. First, the ideal gas model approach has been compared with the real gas approach model of Peng-Robinson for air using the commercial solver ANSYS CFX. Thereafter, the same comparison has been performed using the organic fluid Novec™. After a detailed grid study, the entire fan characteristics, i.e. the design point and the off-design points, have been simulated and evaluated for each fluid (air and Novec™) and gas model (ideal gas and Peng-Robinson real gas). The steady state simulations of the centrifugal fan have been performed using the Frozen Rotor model. The simulation results have been compared, discussed and presented in detail.
-
aus der Wiesche, S., Reinker, F., Wagner, R., Epple, P., Fritsche, M., Russwurm, H.J.: An Accurate Thermal Measurement Approach for Determining Fan Efficiencies Based on System Identification. ASME-JSME-KSME 2019 8th Joint Fluids Engineering Conference (2019).
A novel thermal measurement approach is presented for the determination of fan efficiencies. This approach is not resting on a simple direct measurement of the occurring temperature difference but on a system identification based on the transient time signal of the involved temperature measurement device. The values of the system parameters can be identified after recording the transient response of the system to a step input, i. e. the fan is suddenly turned on. By means of a representative case study considering a centrifugal fan, the system identification and its relation to fan efficiency are presented. The outcome of the new thermal approach is compared with results of standardized fan performance tests and with results obtained by the direct temperature measurement method without system identification. It is shown that the direct temperature measurement provides typically poor data whereas the novel thermal approach leads to results which are well comparable with these obtained by standard performance test at the design point.
-
Reinker, F., Wagner, R., Hasselmann, K., aus der Wiesche, S., Fritsche, M., Epple, P., Rußwurm, H.J.: Testing, modeling and simulation of fans working with organic vapors. Proceedings of 13th European Conference on Turbomachinery Fluid dynamics & Thermodynamics (2019).
The present contribution presents a test facility for fans working with organic vapors where non-ideal gas effects are relevant. In contrast to conventional testing of atmospheric fans a thermodynamic approach based on very precise temperature measurements is employed for obtaining the performance curves. The experimental data are used for validation of three-dimensional computational fluid dynamics (CFD) simulations of the organic vapor flows within the turbomachinery including real gas effects. The combined experimental and numerical analysis approach enables the assessment of conventional design rules and correlations. It is found that the influence of the Mach number on efficiency is dominant, and the expected Reynolds number scaling is fully compensated by compressibility effects in the case of an organic vapor with its low speed of sound.
-
Koch, P., May, S., Engelhardt, H., Ziegler, J., Nüchter, A.: Signed Distance Based Reconstruction for Exploration and Change Detection in Underground Mining Disaster Prevention. IEEE International Symposium on Safety, Security, and Rescue Robotics (SSRR '19). p. 1--2 (2019).
This publication describes an application of a Truncated Signed Distance Mapping approach for disaster intervention in underground mine shafts through geometrical change detection of the shaft walls. The paper describes two main problems of such an approach (aligning two potentially huge point clouds and automatic change detection by comparing the reconstructed volumes) and explains in detail the proposed solution.
-
Franz, F., Fertig, T., Schütz, A.E., Vu, H.: Towards Human-readable Smart Contracts. IEEE ICBC. pp. 38-42. IEEE (2019).
In the late 90s the author Ian Grigg defined that smart contracts have to be human-readable like paper contracts while remaining processible by computer programs. The Ethereum Foundation has created a new programming language Solidity that can be used to implement smart contracts. However, the contracts are neither easy to implement nor easy-to-use by the common user. In order to enable users without programming skills to take advantage of the new technology, we propose a generator for smart contracts. Our prototype uses a configuration wizard to determine the requirements of the generated contract. Based on the official ERC Standards of the Ethereum community we will implement a prototype that can configure and generate customized contracts. Moreover, we are covering the challenges that we have to face in order to support automated test case generation and automated deployment processes.
-
Schütz, A.E., Fertig, T., Weber, K., Müller, N.H.: How E-Learning Can Facilitate Information Security Awareness. In: Zaphiris, P. and Ioannou, A. (eds.) HCI (25). pp. 390-401. Springer (2019).
-
Auernhammer, K., Tavakoli Kolagari, R., Zoppelt, M.: Attacks on Machine Learning: Lurking Danger for Accountability. Proceedings of the Association for the Advancement of Artificial Intelligence AAAI Workshop on Artificial Intelligence Safety 2019 (2019).
It is well-known that there is no safety without security. That being said, a sound investigation of security breaches on Ma-chine Learning (ML) is a prerequisite for any safety concerns. Since attacks on ML systems and their impact on the security goals threaten the safety of an ML system, we discuss the im-pact attacks have on the ML models’ security goals, which are rarely considered in published scientific papers. The contribution of this paper is a non-exhaustive list of pub-lished attacks on ML models and a categorization of attacks according to their phase (training, after-training) and their im-pact on security goals. Based on our categorization we show that not all security goals have yet been considered in the lit-erature, either because they were ignored or there are no pub-lications on attacks targeting those goals specifically, and that some are difficult to assess, such as accountability. This is probably due to some ML models being a black box.
-
Herl, G., Hiller, J., Sauer, T.: Artifact reduction in X-ray computed tomography by multipositional data fusion using local image quality measures. Proceedings of the 9th Conference on Industrial Computed Tomography, Padova, Italy (iCT 2019) (2019).
Abstract Metal artifacts are still a major problem in X-ray industrial computed tomography. In order to reduce metal artifacts and increase the image quality of X-ray CT-scans, we suggest using projection data from multiple scans with differently positioned object orientations. We present two different approaches for multipositional CT, which are especially effective for multimaterial objects with high absorbing metal parts. On one hand, we reconstruct the different scans separatly, estimate the local quality of the resulting volumes and then fuse these volumes to an optimized volume. On the other hand, we introduce smART (shrinking merged Algebraic Reconstruction Technique) and merge sinograms of different scans, estimate the reliability of each projection pixel and then reconstruct the merged sinogram with an adapted SART reconstruction method. We demonstrate our approaches on simulations and on measurement data and are able to show a significant reduction of image artifacts qualitatively and quantitatively with the help of dimensional measurement results.
-
Fertig, T., Schütz, A.E., Weber, K., Müller, N.H.: Measuring the Impact of E-Learning Platforms on Information Security Awareness. In: Zaphiris, P. and Ioannou, A. (eds.) HCI (25). pp. 26-37. Springer (2019).
Humans play a central role in information security. The behavior of workers at their workplace affects the confidentiality, integrity, and availability of sensitive corporate information. In addition, attackers exploit the “human factor” as a weak point with techniques such as phishing, malware, and social engineering. Exploiting the lack of awareness is often an easy task with minimal risk. To make employees aware of their important role, companies typically carry out security awareness campaigns. Our university created an e-Learning Platform (eLP) to support our awareness campaigns. In order to determine the success, the effectiveness and the impact of such an awareness campaign, suitable measurement methods are needed. A common approach to measure the success of eLPs is to run surveys and questionnaires with the learners. Since the manual evaluation of those surveys and questionnaires is a time-consuming task, we are researching how a possible automation can be achieved. Moreover, the effectiveness is often evaluated through quizzes or knowledge tests. Since knowledge by itself does not improve the behavior of people, the compliant-behavior has to be measured, too. We derived metrics for success and effectiveness but recognized that success can hardly be measured automatically. To reduce the manual effort we decided to only measure the effectiveness automatically. Therefore, we are measuring the behavior and determine if the security-compliance has increased.
-
Pfitzner, C., May, S., Nüchter, A.: Body Weight Estimation for Dose-Finding and Health Monitoring of Lying, Standing and Walking Patients Based on RGB-D Data. Sensors. 18, (2018).
This paper describes the estimation of the body weight of a person in front of an RGB-D camera. A survey of different methods for body weight estimation based on depth sensors is given. First, an estimation of people standing in front of a camera is presented. Second, an approach based on a stream of depth images is used to obtain the body weight of a person walking towards a sensor. The algorithm first extracts features from a point cloud and forwards them to an artificial neural network (ANN) to obtain an estimation of body weight. Besides the algorithm for the estimation, this paper further presents an open-access dataset based on measurements from a trauma room in a hospital as well as data from visitors of a public event. In total, the dataset contains 439 measurements. The article illustrates the efficiency of the approach with experiments with persons lying down in a hospital, standing persons, and walking persons. Applicable scenarios for the presented algorithm are body weight-related dosing of emergency patients.
-
Ring, M., Schlör, D., Landes, D., Hotho, A.: Flow-based Network Traffic Generation using Generative Adversarial Networks. Computing Research Repository CoRR. abs/1810.07795, (2018).
Flow-based data sets are necessary for evaluating network-based intrusion de- tection systems (NIDS). In this work, we propose a novel methodology for gener- ating realistic flow-based network traffic. Our approach is based on Generative Adversarial Networks (GANs) which achieve good results for image generation. A major challenge lies in the fact that GANs can only process continuous at- tributes. However, flow-based data inevitably contain categorical attributes such as IP addresses or port numbers. Therefore, we propose three different preprocessing approaches for flow-based data in order to transform them into continuous values. Further, we present a new method for evaluating the gener- ated flow-based network traffic which uses domain knowledge to define quality tests. We use the three approaches for generating flow-based network traffic based on the CIDDS-001 data set. Experiments indicate that two of the three approaches are able to generate high quality data.
-
Stock, M., Herl, G., Sauer, T., Hiller, J.: Edge Preserving Compression of CT Scans using Wavelets. Proceedings of the Structural Health Monitoring, International Symposium Nondestructive Testing 4-5 October 2018, Saarbruecken, Germany (2018).
This work addresses the subject of efficient storage of computed tomography (CT) data with an emphasis on the quality of surfaces. Industrial dimensional metrology often requires high measurement accuracy and we show that this is retained using wavelet-based compression methods. The applied techniques include a tensor product wavelet transform and soft wavelet shrinkage. In our tests on real objects, we compared dimensional CT measurements of compressed and uncompressed volumes. We were able to reduce the necessary storage space significantly with a minimal loss of accuracy. For a multi sphere phantom, we decreased the storage space to 4.7% (from 638 MB to 30 MB) with an average deviation below 1 µm from the original volume.
-
Kasperl, S., Hanke, R., Oeckl, S., Schmitt, P., Uhlmann, N., Heinz, D., Herl, G., Hiller, J., Kämmler, A., Miller, T., Stock, A.M., Sauer, T.: Digitalisierung, Verarbeitung und Analyse kultureller und industrieller Objekte: Wertschöpfung aus großen Datenmengen. Jahrestagung für zerstörungsfreie Prüfung (2018), Deutsche Gesellschaft DGZfP (2018).
Im Zuge der Digitalisierung dreidimensionaler Objekte in großer Genauigkeit fallen Daten in bisher ungekannten Dimensionen an, die gespeichert, verarbeitet und in Information umgewandelt werden müssen.
-
Herl, G., Rettenberger, S., Hiller, J., Sauer, T.: Metal artifact reduction by fusion of CT scans from different positions using the unfiltered backprojection. Proceedings of the 8th Conference on Industrial Computed Tomography, Wels, Austria (iCT 2018) (2018).
Abstract Metal objects or metal parts in an object are still a major problem of X-ray computed tomography (CT) because of so called metal artifacts. We propose a new method – a multipositional data fusion – for automatically fusing multiple CT volumes from different positions to reduce these metal artifacts. After scanning a specimen several times at different positions and reconstruction of every scan (e.g. by the filtered backprojection), we also perform an unfiltered backprojection. Based on the assumption that metal artifacts occur the most wherever X-rays are attenuated a lot, the unfiltered backprojection is used to autonomously estimate the likelihood of metal artifacts in every voxel of every scan. The different volumes are registered and then fused by weighted sum preferring the voxels with low values in the unfiltered backprojection results. In our tests on real objects, our method fully automatically created optimized volumes with significantly less metal artifacts. The multipositional data fusion was compared to the commercially multi spectra fusion of Werth Messtechnik GmbH and outperformed it in one of the use cases.
-
Kasperl, S., Hanke, R., Oeckl, S., Schmitt, P., Uhlmann, N., Heinz, D., Herl, G., Hiller, J., Kämmler, A., Miller, T., Stock, A.M., Sauer, T.: Digitization, Data Processing and Analysis of Industrial and Cultural Objects: Creating Additional Value from Big Data. Proceedings of the 12th, European Conference on Non-Destructive Testing (ECNDT) 2018, Gothenburg-Sweden (2018).
Abstract In the course of the digitization of three-dimensional objects with great precision, data in hitherto unknown dimensions are amassed which have to be stored, processed and converted into information.
-
Ring, M., Landes, D., Hotho, A.: Detection of slow port scans in flow-based network traffic. PLOS ONE. 13, 1-18 (2018).
Frequently, port scans are early indicators of more serious attacks. Unfortunately, the detection of slow port scans in company networks is challenging due to the massive amount of network data. This paper proposes an innovative approach for preprocessing flow-based data which is specifically tailored to the detection of slow port scans. The preprocessing chain generates new objects based on flow-based data aggregated over time windows while taking domain knowledge as well as additional knowledge about the network structure into account. The computed objects are used as input for the further analysis. Based on these objects, we propose two different approaches for detection of slow port scans. One approach is unsupervised and uses sequential hypothesis testing whereas the other approach is supervised and uses classification algorithms. We compare both approaches with existing port scan detection algorithms on the flow-based CIDDS-001 data set. Experiments indicate that the proposed approaches achieve better detection rates and exhibit less false alarms than similar algorithms.
-
Schulz, T., Überle, M.: How Institutional Arrangements impede Realization of Smart Ecosystems: the Case of Door-to-Door Mobility integrators. In: Bednar, P.M., Frank, U., and Kautz, K. (eds.) Proceedings of the European Conference on Information Systems (ECIS 2018), Portsmouth, UK, 2018. p. 135 (2018).
-
Schütz, A., Fertig, T., Weber, K., Vu, H., Hirth, M., Tran-Gia, T.: Vertrauen ist gut, Blockchain ist besser - Einsatzmöglichkeiten von Blockchain für Vertrauensprobleme im Crowdsourcing. HMD Praxis der Wirtschaftsinformatik. (2018).
Beim Crowdsourcing schreiben Unternehmen auf speziellen Marktplätzen Arbeiten aus, wo sie von einer großen Anzahl von anonymen Arbeitern bearbeitet werden können. Im Gegensatz zu traditionellen Arbeitsverhältnissen geht beim Crowdsourcing der Arbeitnehmer in Vorleistung. Der Auftraggeber entscheidet anhand der übermittelten Bearbeitung, ob der Arbeitnehmer entlohnt wird oder nicht. Vertrauen zwischen beiden Parteien ist daher ein entscheidender Erfolgsfaktor für Crowdsourcing. Dieser Beitrag beschreibt die Vertrauensprobleme im Crowdsourcing und stellt ein Konzept für ein neuartiges Reputationssystem für Crowdsourcing-Plattformen vor. Das Konzept soll helfen, das Vertrauen im Crowdsourcing zu erhöhen. Umgesetzt wird dieses Konzept mittels Smart Contracts auf der Ethereum Blockchain im Projekt CrowdPrecision. Die Profile von Auftraggeber und Arbeitnehmer werden mit einem Reputationsscore verknüpft, der transparent und fälschungssicher in der Blockchain gespeichert wird. Die einzelnen Aufträge werden über Smart Contracts abgebildet, die eine automatisierte Entlohnung und Bewertung unter Einhaltung der vereinbarten Bedingungen garantieren.
-
Stieler, M., Kriegl, B.: How do consumers experience the emotional rollercoaster? A smartphone app to measure emotions continously, transfer. Werbeforschung & Praxis. 64, 43-53 (2018).
-
Niedermaier, M., Malchow, J.-O., Fischer, F., Marzin, D., Merli, D., Roth, V., von Bodisco, A.: You Snooze, You Lose: Measuring PLC Cycle Times under Attacks. In: Rossow, C. and Younan, Y. (eds.) WOOT @ USENIX Security Symposium. USENIX Association (2018).
In this work, we show that the electrical side of a Programmable Logic Controller (PLC), that is, the controlled process, can be influenced by packet flooding. This differs from already known Denial of Service (DoS) attacks as the target is the actual process and not network connectivity. We conducted our experiments with 16 devices from six vendors, giving a good overview of the current market. Except for one device, all are susceptible to network flooding attacks. In three cases, an attack even lead to a DoS on the electrical side, completely disrupting any controlled process. In addition, we show that well-known scanning tools have measurable impacts on PLCs. These findings should be taken into consideration by administrators and researchers planning scanning activities.
-
Koch, R., May, S., Nüchter, A.: Detection and Purging of Specular Reflective and Transparent Object Influences in 3D Range Measurements. Proceedings of the 7th International Society for Photogrammetry and Remote Sensing, ISPRS International Workshop 3D-ARCH 2017: "3D Virtual Reconstruction and Visualization of Complex Architectures". p. 377--384. , Nafplio, Greece (2017).
3D laser scanners are favoured sensors for mapping in mobile service robotics at indoor and outdoor applications, since they deliver precise measurements at a wide scanning range. The resulting maps are detailed since they have a high resolution. Based on these maps robots navigate through rough terrain, fulfil advanced manipulation, and inspection tasks. In case of specular reflective and transparent objects, e.g., mirrors, windows, shiny metals, the laser measurements get corrupted. Based on the type of object and the incident angle of the incoming laser beam there are three results possible: a measurement point on the object plane, a measurement behind the object plane, and a measurement of a reflected object. It is important to detect such situations to be able to handle these corrupted points. This paper describes why it is difficult to distinguish between specular reflective and transparent surfaces. It presents a 3D- Reflection-Pre-Filter Approach to identify specular reflective and transparent objects in point clouds of a multi-echo laser scanner. Furthermore, it filters point clouds from influences of such objects and extract the object properties for further investigations. Based on an Iterative-Closest-Point-algorithm reflective objects are identified. Object surfaces and points behind surfaces are masked according to their location. Finally, the processed point cloud is forwarded to a mapping module. Furthermore, the object surface corners and the type of the surface is broadcasted. Four experiments demonstrate the usability of the 3D-Reflection-Pre-Filter. The first experiment was made in a empty room containing a mirror, the second experiment was made in a stairway containing a glass door, the third experiment was made in a empty room containing two mirrors, the fourth experiment was made in an office room containing a mirror. This paper demonstrate that for single scans the detection of specular reflective and transparent objects in 3D is possible. It is more reliable in 3D as in 2D. Nevertheless, collect the data of multiple scans and post-filter them as soon as the object was bypassed should pursued. This is why future work concentrates on implementing a post-filter module. Besides, it is the aim to improve the discrimination between specular reflective and transparent objects.
-
Ring, M., Wunderlich, S., Grüdl, D., Landes, D., Hotho, A.: Creation of Flow-Based Data Sets for Intrusion Detection. Journal of Information Warfare. 16, 41-54 (2017).
Publicly available labelled data sets are necessary for evaluating anomaly-based Intrusion Detection Systems (IDS). However, existing data sets are often not up-to-date or not yet published because of privacy concerns. This paper identifies requirements for good data sets and proposes an approach for their generation. The key idea is to use a test environment and emulate realistic user behaviour with parameterised scripts on the clients. Comprehensive logging mechanisms provide additional information which may be used for a better understanding of the inner dynamics of an IDS. Finally, the proposed approach is used to generate the flow-based CIDDS-002 data set.
-
Ring, M., Landes, D., Dallmann, A., Hotho, A.: IP2Vec: Learning Similarities Between IP Addresses. 2017 IEEE International Conference on Data Mining Workshops (ICDMW). pp. 657-666 (2017).
IP Addresses are a central part of packet- and flow-based network data. However, visualization and similarity computation of IP Addresses are challenging to due the missing natural order. This paper presents a novel similarity measure IP2Vec for IP Addresses that builds on ideas from Word2Vec, a popular approach in text mining. The key idea is to learn similarities by extracting available context information from network data. IP Addresses are similar if they appear in similar contexts. Thus, IP2Vec is automatically derived from the given network data set. The proposed approach is evaluated experimentally on two public flow-based data sets. In particular, we demonstrate the effectiveness of clustering IP Addresses within a botnet data set. In addition, we use visualization methods to analyse the learned similarities in more detail. These experiments indicate that IP2Vec is well suited to capture the similarity of IP Addresses based on their network communications.
-
Ring, M., Wunderlich, S., Grüdl, D., Landes, D., Hotho, A.: A Toolset for Intrusion and Insider Threat Detection. In: Palomares Carrascosa, I., Kalutarage, H.K., and Huang, Y. (eds.) Data Analytics and Decision Support for Cybersecurity: Trends, Methodologies and Applications. p. 3--31. Springer International Publishing, Cham (2017).
Company data are a valuable asset and must be protected against unauthorized access and manipulation. In this contribution, we report on our ongoing work that aims to support IT security experts with identifying novel or obfuscated attacks in company networks, irrespective of their origin inside or outside the company network. A new toolset for anomaly based network intrusion detection is proposed. This toolset uses flow-based data which can be easily retrieved by central network components. We study the challenges of analysing flow-based data streams using data mining algorithms and build an appropriate approach step by step. In contrast to previous work, we collect flow-based data for each host over a certain time window, include the knowledge of domain experts and analyse the data from three different views. We argue that incorporating expert knowledge and previous flows allow us to create more meaningful attributes for subsequent analysis methods. This way, we try to detect novel attacks while simultaneously limiting the number of false positives.
-
Ring, M., Wunderlich, S., Grüdl, D., Landes, D., Hotho, A.: Flow-based benchmark data sets for intrusion detection. Proceedings of the 16th European Conference on Cyber Warfare and Security (ECCWS). p. 361--369. ACPI (2017).
Anomaly based intrusion detection systems suffer from a lack of appropriate evaluation data sets. Often, existing data sets may not be published due to privacy concerns or do not reflect actual and current attack scenarios. In order to overcome these problems, we identify characteristics of good data sets and develop an appropriate concept for the generation of labelled flow-based data sets that satisfy these criteria. The concept is implemented based on OpenStack, thus demonstrating the suitability of virtual environments. Virtual environments offer advantages compared to static data sets by easily creating up-to-date data sets with recent trends in user behaviour and new attack scenarios. In particular, we emulate a small business environment which includes several clients and typical servers. Network traffic is generated by scripts which emulate typical user activities like surfing the web, writing emails, or printing documents on the clients. These scripts follow some guidelines to ensure that the user behaviour is as realistic as possible, also with respect to working hours and lunch breaks. The generated network traffic is recorded in unidirectional NetFlow format. For generating malicious traffic, attacks like Denial of Service, Brute Force, and Port Scans are executed within the network. Since origins, targets, and timestamps of executed attacks are known, labelling of recorded NetFlow data is easily possible. For inclusion of actual traffic, which has its origin outside the OpenStack environment, an external server with two services is deployed. This server has a public IP address and is exposed to real and up-to-date attacks from the internet. We captured approximately 32 million flows over a period of four weeks and categorized them into five classes. Further, the chronological sequence of the flows is analysed and the distribution of normal and malicious traffic is discussed in detail. The main contribution of this paper is the demonstration of a novel approach to use OpenStack as a basis for generating realistic data sets that can be used for the evaluation of network intrusion detection systems.
-
Pfitzner, C., May, S., Nüchter, A.: Evaluation of Features from RGB-D Data for Human Body Weight Estimation. International Federation of Automatic Control. , Toulouse, France (2017).
Body weight is a crucial parameter when it comes to drug or radiation dosing. In case of emergency treatment time is short so that physicians estimate the body weight by the visual appearance of a patient. Further, visual body weight estimation might be a feature for person identification. This paper presents the anthropometric feature extraction from RGB-D sensor data, recorded from frontal view. The features are forwarded to an artificial neural network for weight estimation. Experiments with 233 people demonstrate the capability of different features for body weight estimation. To prove robustness against sensor modalities, a structured light sensor is used, as well as a time-of-flight sensor. An additional experiment including temperature features from a thermal camera improves the body weight estimation beyond.
-
Marc Philipp Dietrich, G.W.: Towards EEG-Based Eye-Tracking for Interaction Design in Head-Mounted Devices. Proceedings of the 7th International Conference on Consumer Electronics Berlin (ICCE-Berlin), 2017 IEEE (2017).
Augmented Reality (AR), Mixed Reality (MR) and Virtual Reality (VR) have an increasing impact on our daily lives. They improve workers' performance in industry and medicine. In addition gaming and entertainment profit from these innovations. The enabling devices are often head-mounted. New intuitive interaction methods must be developed to control application, because conventional input devices such as keyboards, touch screens or classical touch pads cannot be used. This paper introduces electroencephalographic (EEG) eye-tracking as an additional interaction channel. Ocular artefacts (EOG) in the EEG signal are used to detect eye positions. A Brain-Computer Interface (BCI) is used to capture the data. Data is processed and EOG artefacts are extracted to compute the position of the pupil. The first test runs confirm that ocular artefacts in the EEG signal are strongly correlated with the position of the pupils. Extreme positions of the pupils (horizontal left, horizontal right, vertical up and vertical down) can be detected with high accuracy (true-positive-rate of up to 96,6%). In future tests, we successively refine the direction and speed of eye movement and verify their usage under real-time conditions.
-
Koch, R., Böttcher, L., Jahrsdörfer, M., Maier, J., Trommer, M., May, S., Nüchter, A.: Out of lab calibration of a rotating 2D scanner for 3D mapping. Proceedings of the International Society for Optics and Photonics SPIE optical metrology, Videometrics, Range Imaging, and Applications. pp. 10332 - 10332 - 8. , Munich, Germany (2017).
Mapping is an essential task in mobile robotics. To fulfil advanced navigation and manipulation tasks a 3D representation of the environment is required. Applying stereo cameras or Time-of-flight cameras (TOF cameras) are one way to archive this requirement. Unfortunately, they suffer from drawbacks which makes it difficult to map properly. Therefore, costly 3D laser scanners are applied. An inexpensive way to build a 3D representation is to use a 2D laser scanner and rotate the scan plane around an additional axis. A 3D point cloud acquired with such a custom device consists of multiple 2D line scans. Therefore the scanner pose of each line scan need to be determined as well as parameters resulting from a calibration to generate a 3D point cloud. Using external sensor systems are a common method to determine these calibration parameters. This is costly and difficult when the robot needs to be calibrated outside the lab. Thus, this work presents a calibration method applied on a rotating 2D laser scanner. It uses a hardware setup to identify the required parameters for calibration. This hardware setup is light, small, and easy to transport. Hence, an out of lab calibration is possible. Additional a theoretical model was created to test the algorithm and analyse impact of the scanner accuracy. The hardware components of the 3D scanner system are an HOKUYO UTM-30LX-EW 2D laser scanner, a Dynamixel servo-motor, and a control unit. The calibration system consists of an hemisphere. In the inner of the hemisphere a circular plate is mounted. The algorithm needs to be provided with a dataset of a single rotation from the laser scanner. To achieve a proper calibration result the scanner needs to be located in the middle of the hemisphere. By means of geometric formulas the algorithms determine the individual deviations of the placed laser scanner. In order to minimize errors, the algorithm solves the formulas in an iterative process. First, the calibration algorithm was tested with an ideal hemisphere model created in Matlab. Second, laser scanner was mounted differently, the scanner position and the rotation axis was modified. In doing so, every deviation, was compared with the algorithm results. Several measurement settings were tested repeatedly with the 3D scanner system and the calibration system. The results show that the length accuracy of the laser scanner is most critical. It influences the required size of the hemisphere and the calibration accuracy.
-
Koch, R., May, S., Nüchter, A.: Effective Distinction Of Transparent And Specular Reflective Objects In Point Clouds Of A Multi-Echo Laser Scanner. Proceedings of the 18th IEEE International Conference on Advanced Robotics (ICAR '17). p. 566--571. , Hong Kong, China (2017).
A favoured sensor for mapping is a 3D laser scanner since it allows a wide scanning range, precise measurements, and is usable indoor and outdoor. Hence, a mapping module delivers detailed and high resolution maps which makes it possible to navigate safely. Difficulties result from transparent and specular reflective objects which cause erroneous and dubious measurements. At such objects, based on the incident angle, measurements result from the object surface, an object behind the transparent surface, or an object mirrored with respect to the reflective surface. This paper describes an enhanced Pre-Filter-Module to distinguish between these cases. Two experiments demonstrate the usability and show that for single scans the identification of mentioned objects in 3D is possible. The first experiment was made in an empty room with a mirror. The second experiment was made in a stairway which contains a glass door. Further, results show that a discrimination between a specular reflective and a transparent object is possible. Especially for transparent objects the detected size is restricted to the incident angle. That is why future work concentrates on implementing a post-filter module. Gained experience shows that collecting the data of multiple scans and postprocess them as soon as the object was bypassed will improve the map.
