Search

This book presents the most interesting talks given at ISSE 2010 – the forum for the inter-disciplinary discussion of how to adequately secure electronic business processes. The topics include: - Identity and Security Management - Technical and Economical Aspects of Cloud Security - Security Services and Large Scale Public Applications - Smart Grid Security and Emerging Security Solutions - Privacy and Data Protection Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2010. The content: Identity and Security Management - Technical and Economical Aspects of Cloud Security - Security Services and Large Scale Public Applications - Smart Grid Security and Emerging Security Solutions - Privacy and Data Protection – Security Threats and Contermeasures Target Groups: Developers of Electronic Business Processes IT Managers IT Security Experts Researchers About the Editors: Norbert Pohlmann: Professor for System and Information Security at the University of Applied Sciences in Gelsenkirchen Helmut Reimer: Senior Consultant, TeleTrusT Wolfgang Schneider: Deputy Institute Director, Fraunhofer Institute SIT

This book presents the most interesting talks given at ISSE 2009 – the forum for the inter-disciplinary discussion of how to adequately secure electronic business processes. The topics include: - Economics of Security and Identity Management - Security Services and Large Scale Public Applications - Privacy and Data Protection and Awareness Raising - Standards and Technical Solutions - Secure Software, Trust and Assurance Adequate information security is one of the basic requirements of all electronic business processes. It is crucial for effective solutions that the possibilities offered by security technology can be integrated with the commercial requirements of the applications. The reader may expect state-of-the-art: best papers of the Conference ISSE 2009. Content/noch mit MS abgleichen!! Economics of Security and Identity Management - Security Services and Large Scale Public Applications - Privacy and Data Protection and Awareness Raising - Standards and Technical Solutions - Secure Software, Trust and Assurance Target Group: - Developers of Electronic Business Processes - IT Managers - IT Security Experts - Researchers Wolfgang Schneider: Deputy Institute Director, Fraunhofer Institute SIT Abouth the Editors: Norbert Pohlmann: Professor for System and Information Security at the University of Applied Sciences in Gelsenkirchen Helmut Reimer: Senior Consultant, TeleTrusT

This book contains a selection of papers and presentations from the 6th EADiM Academic Network Conference held in Graz in November 2007. The Academic Network originates from the assessment process of the EUROPRIX Multimedia Awards. Many enthusiastic teachers and instructors have encouraged their students and graduates to take part in this competition with their final projects or first products in terms of innovation and added value for users. The network was formally established in 2002 by instructors of award-winning interactive e-content projects. Participants in the network share an interest in identifying successful approaches in teaching and in optimizing their teaching methods. The network has started off a European masters program and a number of other cooperation projects. The Academic Network's annual conference provides a forum for the exchange of latest experiences, it is a meeting place for nominees and winners from the EUROPRIX Multimedia Awards, and it reflects on the development of e-content technology and industry. Academics, instructors, and professors from all parts of Europe present their new approaches to successful and effective teaching. They discuss methods on how teaching models can better meet the requirements of companies and industry at large. Discussions have been raised how academia can come up to the rapid development of the ICT industries and the fast change of platforms for which content is needed.

The scope of the present book is to offer the most efficient tools for the vectorization of serial computer programs. Here, by vectorization we understand the adaptation of computer programs to the special architecture of modern available vector computers to exploit fully their potential, which will often result in remarkable performance improvements. The book is written primarily for users working in the various fields of computational physics, for scientists as well as for programmers running their jobs on a vector computer. The text may, however, also be of value to those who are interested in numerical algorithms. Although the examples discussed in chapter 9 have been taken from Computational Fluid Dynamics, the numerical methods are well-known, and are applied in many fields of Computational Physics. The book is divided into four parts. After a short introduction which outlines the limits of conventional serial computers in contrast to the possibilities offered by the new vector machines, the second part is addressed to the discussion of some main features of existing computer architectures. We restrict ourselves to the vector computers CRAY-1S and CDC-CYBER 205, although, in the meantime, many vector and parallel computers and array processors are available such as DENELCOR's Heterogeneous Element Processor (HEP), ICL's Distributed Array Processor (DAP), SPERRY UNIVAC's Array Processing System (APS), STAR TECHNOLOGIES ST-l00, FLOATING POINT SYSTEMS'Array Processor (FPS), FUJITSU's FACOM VP-l00 and VP-200, HITACHI's Integrated Array Processor (lAP), HITACHI's S 810/10 and S 810/20 and others.

This is the second and slightly revised edition of this book. A few errors have been fixed, and some references to related work have been added. I thank the readers for their comments on the first edition. We analyze the search efficiency of a number of common refutational theorem proving strategies on propositional and near-propositional prob­ lems. Search efficiency is concerned with the total number of proofs and partial proofs generated, rather than with the sizes of the proofs. We show that most common strategies produce search spaces of expo­ nential size even on simple sets of clauses, or else are not sensitive to the goal. However, clause linking, which uses a reduction to proposi­ tional calculus, has behavior that is more favorable in some respects, a property that it shares with methods that cache subgoals. A strat­ egy which is of interest for term-rewriting based theorem proving is the A-ordering strategy, and we discuss it in some detail. We show some advantages of A-ordering over other strategies, which may help to explain its efficiency in practice. We also point out some of its com­ binatorial inefficiencies, especially in relation to goal-sensitivity and irrelevant clauses. In addition, SLD-resolution, which is of importance for Prolog implementation, has combinatorial inefficiencies; this may suggest basing Prolog implementations on a different theorem proving strategy. We also develop techniques for studying the asymptotic complexity of first-order theorem provers. This permits an analytic comparison of the worst-case performances of various theorem proving methods.

A large number of problems require the optimization of multiple criteria. These crite­ ria are often non-commensurate and sometimes conflicting in nature making the task of optimization more difficult. In such problems, the task of creating a combined opti­ mization function is often not easy. Moreover, the decision procedure can be affected by the sensitivity of the solution space, and the trade-off is often non-linear. In real life we traditionally handle such problems by suggesting not one, but several non-dominated solutions. Finding a set of non-dominated solutions is also useful in multistaged opti­ mization problems, where the solution of one stage of optimization is passed on to the next stage. One classic example is that of circuit design, where high-level synthesis, logic synthesis and layout synthesis comprise important stages of optimization of the circuit. Passing a set of non-dominated partial solutions from one stage to the next typically ensures better global optimization. This book presents a new approach to multi-criteria optimization based on heuristic search techniques. Classical multicriteria optimization techniques rely on single criteria optimization algorithms, and hence we are either required to optimize one criterion at a time (under constraints on the others), or we are asked for a single scalar combined optimization function. On the other hand, the multiobjective search approach maps each optimization criterion onto a distinct dimension of a vector valued cost structure.

The Information Security Solutions Europe Conference (ISSE) was started in 1999 by EEMA and TeleTrusT with the support of the European Commission and the German Federal Minis­ try of Technology and Economics. Today the annual conference is a fixed event in every IT security professional's calendar. The aim of ISSE is to support the development of a Euro­ pean information security culture and especially a cross-border framework for trustworthy IT applications for citizens, industry and administration. Therefore, it is important to take into consideration both international developments and European regulations and to allow for the interdisciplinary character of the information security field. In the five years of its existence ISSE has thus helped shape the profile of this specialist area. The integration of security in IT applications was initially driven only by the actual security issues considered important by experts in the field; currently, however, the economic aspects of the corresponding solutions are the most important factor in deciding their success. ISSE offers a suitable podium for the discussion of the relationship between these considerations and for the presentation of the practical implementation of concepts with their technical, or­ ganisational and economic parameters.

The Information Security Solutions Europe Conference (ISSE) was started in 1999 by EEMA and TeleTrusT with the support of the European COlnmission and the German Federal Minis­ try of Technology and Economics. Today the annual conference is a fixed event in every IT security professional's calendar. The aim of ISSE is to support the development of a European information security culture and especially a cross-border framework for trustworthy IT ap­ plications for citizens, industry and administration. Therefore, it is important to take into con­ sideration both international developments and European regulations and to allow for the in­ terdisciplinary character of the information security field. In the five years of its existence ISSE has thus helped shape the profile of this specialist area. The integration of security in IT applications was initially driven only by the actual security issues considered important by experts in the field; currently, however, the economic aspects of the corresponding solutions are the most important factor in deciding their success. ISSE offers a suitable podium for the discussion of the relationship between these considerations and for the presentation of the practical implementation of concepts with their technical, or­ ganisational and economic parameters.

2. 1 Standards and Standardisation in IT -A General Overview The process of standardisation cannot be regarded as a simple, one­ dimensional activity required to lay down technical rules and guidelines, taking place in a removed world of its own. Rather, it must be considered in conjunction with the environment within which it takes place. Very different facets need to be taken into account when trying to actually understand this process. Even if we disregard social, moral and religious rules for the moment, standards -still in a very general sense -have been with us for quite some time: about 5,000 years ago the first alphabets emerged, enabling completely new forms of communication and information storage. Some 2,500 years later, the first national, coin-based currency, invented by the Lydians, established the basis for easier inter-regional and even international trading. The industrial revolution in the 18th century and, more so, the advent of the railroad in the 19th century resulted in a need for technical standards, which was once more reinforced when mass production generated a demand for interchangeable parts. In parallel, the invention of the electric telegraph in 1837 triggered the development of standards in the field of electrical communication technology. In 1865, the International Telegraph Union -to become the International Telecommunication Union (ITU) in 1932 -was founded by twenty states. The other major international standards setting body, the International Organization for Standardization (ISO), was established in 1947.

The advent of the high-speed computer with its enormous storage capabilities enabled statisticians as well as researchers from the different topics of life sciences to apply mul­ tivariate statistical procedures to large data sets to explore their structures. More and more, methods of graphical representation and data analysis are used for investigations. These methods belong to a topic of growing popUlarity, known as'exploratory data analysis'or EDA. In many applications, there is reason to believe that a set of objects can be clus­ tered into subgroups that differ in meaningful ways. Extensive data sets, for example, are stored in clinical cancer registers. In large data sets like these, nobody would ex­ pect the objects to be homogeneous. The most commonly used terms for the class of procedures that seek to separate the component data into groups are'cluster analysis'or'numerical taxonomy'. The origins of cluster analysis can be found in biology and anthropology at the beginning of the century. The first systematic investigations in cluster analysis are those of K. Pearson in 1894. The search for classifications or ty­ pologies of objects or persons, however, is indigenous not only to biology but to a wide variety of disciplines. Thus, in recent years, a growing interest in classification and related areas has taken place. Today, we see applications of cluster analysis not only to. biology but also to such diverse areas as psychology, regional analysis, marketing research, chemistry, archaeology and medicine.

The world of computing has always had one corner stone of particular interest to many, from educators to practitioners: languages. And programming languages in particular. Over the years, we have seen new languages come-and, much less fre­ quently, old languages go. It is always tempting to focus on'the one'language of fashion of the day. In this very readable and instructive textbook, Stan Warford has done the unusual-and risky-by taking the programming language Component Pascal that is far from mainstream, although it does have roots that are among the strongest in the field. Given that the concept of formal language, whether at the level of architecture, design, or implementation language, is central to our discipline, it is important that students continue to be exposed to a wide variety of languages. No single language does everything perfectly, or even well, and students need to understand this funda­ mental tradeoff. The same holds for frameworks and programming models that need to be designed to allow harmony between the natural ways of a language and the needs to a framework for a particular domain.

This book is a comprehensive introduction to the methods and algorithms and approaches of modern data analytics. It covers data preprocessing, visualization, correlation, regression, forecasting, classification, and clustering. It provides a sound mathematical basis, discusses advantages and drawbacks of different approaches, and enables the reader to design and implement data analytics solutions for real-world applications. The text is designed for undergraduate and graduate courses on data analytics for engineering, computer science, and math students. It is also suitable for practitioners working on data analytics projects. This book has been used for more than ten years in numerous courses at the Technical University of Munich, Germany, in short courses at several other universities, and in tutorials at scientific conferences. Much of the content is based on the results of industrial research and development projects at Siemens.

Distributed-memory multiprocessing systems (DMS), such as Intel's hypercubes, the Paragon, Thinking Machine's CM-5, and the Meiko Computing Surface, have rapidly gained user acceptance and promise to deliver the computing power required to solve the grand challenge problems of Science and Engineering. These machines are relatively inexpensive to build, and are potentially scalable to large numbers of processors. However, they are difficult to program: the non-uniformity of the memory which makes local accesses much faster than the transfer of non-local data via message-passing operations implies that the locality of algorithms must be exploited in order to achieve acceptable performance. The management of data, with the twin goals of both spreading the computational workload and minimizing the delays caused when a processor has to wait for non-local data, becomes of paramount importance. When a code is parallelized by hand, the programmer must distribute the program's work and data to the processors which will execute it. One of the common approaches to do so makes use of the regularity of most numerical computations. This is the so-called Single Program Multiple Data (SPMD) or data parallel model of computation. With this method, the data arrays in the original program are each distributed to the processors, establishing an ownership relation, and computations defining a data item are performed by the processors owning the data.

Using the real Microcontroller (µC) as a replacement for a µC model inside a system simulation of a µC-based system is a big benefit since the µC is already verified. Moreover, its maximum performance and its accuracy are much higher than any simulation model. With the Chip-Hardware-in-the-Loop Simulation (CHILS) approach, Christian Köhler covers the connection between µC and simulation, the analysis and optimization of such coupling systems as well as the interface abstraction. He develops the hardware to simulation coupling system with a focus on less hardware effort, the capabilities to couple with different simulation environments, and the efficiency of coupling. The interface abstraction primarily supports the efficiency of coupling. The system analysis and optimization concepts include formal criteria to determine the fidelity of Hardware-in-the-Loop (HIL) coupling systems, stability analysis of coupling systems, and the numerical analysis of applied software algorithms. Furthermore, the author presents existing concepts to simulate complex systems and compares them with the new approach.

Due to the growing use of more and more complex computerized systems in safety-critical applications, the formal verification of such systems is increasingly gaining importance. Many automatic and semi-automatic schemes for hardware and software verification ultimately rely on decision procedures for discharging the proof obligations generated during the verification process. Christian Herde deals with the development of such procedures, providing methods for efficiently solving formulae comprising complex Boolean combinations of linear, polynomial, and transcendental arithmetic constraints, involving thousands of Boolean-, integer-, and real-valued variables. Although aiming at providing tool support for the verification of hybrid discrete-continuous systems, most of the techniques he describes are general purpose and have applications in many other domains, like operations research, planning, software validation, and electronic design automation.

An important means for improving the cost-efficiency in modern mobile radio networks is to dimension the radio access network carefully. Xi Li presents innovative analytical models and algorithms for the dimensioning of the 3G UMTS Radio Access Network (RAN). The proposed analytical models allow efficient and accurate dimensioning for different evolutions of UMTS radio access technologies. The author validates the analytical models by simulations using developed UMTS system simulation models. All presented analytical dimensioning models are implemented into a commercial dimensioning tool. This dimensioning tool is used to help the 3G UMTS network operators to optimize their network infrastructure in order to reduce network costs while still being able to offer desired Quality of Service.

This book considers the field of computed tomography including a review of state-of-the-art reconstruction algorithms and a concise assessment of the most recent hardware architectures. Holger Scherl introduces the reader to the reconstruction problem in computed tomography and its major scientific challenges that range from computational efficiency to the fulfillment of Tuy's sufficiency condition. The assessed hardware architectures include multi- and many-core systems, cell broadband engine architecture, graphics processing units, and field programmable gate arrays. The author focuses on the interplay between these recent hardware platforms and modern computed tomography reconstruction algorithms.

Despite means of fault prevention such as extensive testing or formal veri?cation, errors inevitably occur during system operation. To avoid subsequent system fa- ures, critical distributed systems, therefore, require engineering of means for fault tolerance. Achieving fault tolerance requires some redundancy, which, unfor- nately, is bound to limitations. Appropriate fault models are needed to describe which types of faults and how many faults are tolerable in a certain context. Pre- ous research on distributed systems has often introduced fault models that abstract too many relevant system properties such as dependent and propagating com- nent failures. In this research work, Timo Warns introduces new structural failure models that are both accurate (to cover relevant properties) and tractable (to be - alyzable). These new failure models cover dependent failures (for instance, failure correlation by geographic proximity) and propagating failures (for instance, pr- agation by service utilization). To evaluate the new failure models, Timo Warns shows how some seminal problems in distributed systems can be solved with - proved resilience and ef?ciency, as compared to existing solutions. Particularly, the textbook-style introduction to distributed systems and the r- orous presentation of the new failure models and their evaluation may serve as an example for other software engineering research projects – which is why this book is a valuable addition to both a researcher's and a student's library.

Technological advances, miniaturization of embedded computing technology and wireless c- munication together with the evolution of global networks like the Internet have brought the vision of pervasive and ubiquitous computing to life: technology seamlessly woven into the “fabric of everyday life”. Along with this development goes the need and challenge of int- faces supporting an intuitive, unobtrusive and distraction free interaction with such technolo- rich environments. Considering the huge amount, and ever growing number of a vast manifold of heterogeneous, small, embedded or mobile devices shaping the “pervasive computing la- scape”, makes traditional, explicit and attention based styles of interaction appear hopeless. To make computing part of everyday life, the interfacing must go beyond traditional explicit interaction: pervasive computing system designs will have to – and are already successfully attempting to – revert the principle of the user being in an active and attentive role, to one where technology is attentive and active. Interaction is becoming implicit. Implicit interaction is based on two main concepts: perception and interpretation. Perc- tion concerns gathering information about the environment and situations, usually involving (technological) sensors. Interpretation is the mechanism to understand the sensed data. C- ceptually, perception and interpretation when combined are described as situational context.

Graph and model transformations play a central role for visual modeling and model-driven software development. Within the last decade, a mathematical theory of algebraic graph and model transformations has been developed for modeling, analysis, and to show the correctness of transformations. Ulrike Golas extends this theory for more sophisticated applications like the specification of syntax, semantics, and model transformations of complex models. Based on M-adhesive transformation systems, model transformations are successfully analyzed regarding syntactical correctness, completeness, functional behavior, and semantical simulation and correctness. The developed methods and results are applied to the non-trivial problem of the specification of syntax and operational semantics for UML statecharts and a model transformation from statecharts to Petri nets preserving the semantics.

This textbook results from a series of lectures concerning autonomous mobile robots which have been held at the University of Kaiserslautern - tween 1999 and 2009. Methods and algorithms are introduced which can be used for developing complex autonomous land vehicles. Starting from hist- ical remarks and application areas of service robots, the vehicle kinematics modeling is introduced and examples of the drive kinematics of di?erent vehicles are given. Thereafter, typical sensors and sensor systems are - scribed which are used to determine the internal state of the machine and its operational environment. Localization, i. e the determination where the robot is, is still a di?cult problem. In the textbook, several methods are discussed which can be used under speci?c preconditions. Map building as well as navigation strategies complement the set of basic methods. The last two chapters deal with the questions of how to compile the above mentioned methods using powerful control architecture and what frameworks to use to support the development process. This textbook is written for beginners and advanced students from the?elds of computer science, mechanical engineering, and electrical engine- ing, specializing in autonomous mobile systems. The book is also suited for engineers with a special interest in the development of wheel driven service robots. The writing of the manuscript was only possible with the assistance of several researchers of our Robotics Research Lab. Special thanks to Seb- tian Blank, Tim Braun, and Martin Proetzsch for proof-reading and editing.

Routing in dynamically changing networks is a challenge, especially when the current context, usually consisting of multiple criteria, is used as a quality measure and decision metric. Bernd-Ludwig Wenning presents a context-based routing framework which can be applied to routing in different application domains. The routing framework includes the signaling as well as a decision system that is applied for route selection. The author chooses two application domains to evaluate the routing framework: logistic transportation networks and wireless sensor networks. He shows that this routing framework can be considered as a basis for future research in the area of context-based routing, as it opens manifold directions for further applications and enhancements.

When the experiments at the Large Hadron Collider (LHC) at CERN begin data taking the biggest high energy physics experiments ever will be underway. One of these experiments is the Compact Muon Solenoid (CMS) with more than 3,000 collaborators working at the energy frontier of particle physics. The silicon strip tracker of the CMS experiment is the largest silicon based track- 2 ing detector system worldwide. A sensitive silicon surface of about 200 m is - alised on more than 15,000 individual detector modules. The silicon strip tracker is one of the central subdetector components inside the CMS experiment at the LHC. The CMS experiment is conceived to study proton-proton collisions at a centre- 34?2?1 of-mass energy of 14 TeV at luminosities up to 10 cm s. To deliver best possible particle track identi?cation in the very harsh radiation environment - side the CMS detector a tracking device with high granularity, high readout speed and radiation hardness is needed. The construction of the CMS silicon tracker required production methods and quality control mechanisms that are new to the?eld of particle physics: An easy to use detector module test system that was used by the entire CMS community and partners in industry, and specialised tests for larger subdetector structures where detector modules were tested together with- nal optical readout components in cold environment.

At times when the IT manager's best friend is systems consolidation (which is a euphemism for centralisation), it may come somewhat as a surprise for you that this book investigates decentralisation in the context of content management systems. It may seem quite obvious that content will and should be managed by the party who creates and owns the content, and hence should be held in a—somewhat—centralised and managed location. However, over the past few years, we have been witnesses of some important trends and developments which call for novel ways of thinking about content management and maybe even broader, about computer systems in general. First, ongoing business globalization creates natural distribution of information at a corp- ate level, as well as decentralization of control over business resources and business processes. Changing alliances with partners require?exible architectures for content management that canadapttochangingconstellations, roles, andaccessrights. Second, theneedforoutsourcing and resource e?ciency has brought about concepts of virtualization, recently culminating in the cloud computing buzzword. Virtualization of content management services requires - tremely scalable and?exible underlying information and communication architectures. These kinds of solutions are theoretically and practically impossible to implement based on c- tralised client-server architectures. Third, we are currently experiencing a dramatic shift in the roles of consumers in the Internet. The times have gone when quality content was only delivered by publishers and news agencies. Wikis and other Web 2. 0 tools empower consumers to produce and publish their personal content.

Modern enterprises have recently paid greater attention to data and information as a valuable strategic resource. The vast volumes of data currently being gen- ated as well as governance requirements, such as Sarbanes-Oxley, Basil II and other regulatory mandates, have made it imperative for organisations to pay - tention to the way that they govern and manage their IT resources in general, and data and information in particular. Furthermore, enterprises have realised that information is indeed one of their most valuable and strategic resources, and that through greater aggregation and analysis of data, improved business insight can lead to significantly greater competitive advantages. In this environment, with greater attention to information as a valuable - source and the continued voracious generation of data, information quality init- tives are now emerging as ‘must do'projects, to address the questionable quality of information and thus decision making in contemporary enterprises. It is, h- ever, often assumed that a data quality initiative is a ‘once-off'activity. Indeed, many organisations have difficulties deciding where to start and how to approach their data quality initiatives. This book provides a detailed guide for organisations to understanding the - sues of data quality as well as a toolset for measuring the data quality maturity and preparedness of their enterprise. This can then lead to a more effective init- tive for improving the level of data quality and thus enhancing the value of their precious information resources.

Software reuse and software quality are increasingly important topics in today's software engineering both for researchers and for practitioners. The design and implementation of tests is especially challenging when tests are conceptualized for different variants and versions of an application. Stefan Baerisch applies a combination of feature modelling and code generation, for which he uses a model-driven approach, in order to facilitate the design of tests by non-programmers. Thus, the reuse of tests, represented by abstract test models, for different systems under tests is made possible. The approach uses code generation to allow test execution on heterogeneous and changing implementations. This combination of modelling and code generation allows for a more integrated and more efficient testing process.

Looking at mobile solutions or wearable computing, it immediately becomes apparent that their user interfaces call for di?erent solutions than the desktop paradigm. This is not only due to the very small size of the displays but also predominantly to the need for a much stronger dependency on the applications. In addition, they feature a use of environmental sensors which has never been seen before enabling applications to run in an Ambient Intelligence Environment. This development requires new solutions and constitutes new research questions. With this book, Dr. Witt contributes to the goal of including mobile and wearable interfaces into a proper development process again: He develops a systematical approach for the development of mobile and wearable user interfaces that can be embedded in standard development processes, and which can also be evaluated during this process. Furthermore, he also describes the architecture and implementation of the WUI, a We- able User Interface Toolkit, which provides the necessary levels of abstraction to allow the programmers of mobile and wearable solutions to easily implement novel solutions in an almost standardized way. These results are based on a solid theoretical foundation and thorough state-of-the-art research. The evaluation of mobile and wearable user interfaces which usually combine a primary manual task with computer assistance is developed as an especially clever ga- like process: Dr. Witt uses the ”hot wire” game to combine all relevant aspects for a proper evaluation.

Information technology is the driving force behind almost all innovations in the automotive industry, with perhaps 90% of all innovations in cars based on digital electronics and software. Dozens of networked microprocessors and several h- dred megabytes of software can be found in a common compact class car, contr- ling engine and driving functions, assisting the driver and enabling various c- fort, infotainment and safety functions. One crucial aspect of digital systems in vehicles is their security. Whereas software safety is a relatively well-established (if not necessarily well-understood)?eld, the protection of automotive IT s- tems against malicious manipulations has only recently started to emerge. Even though many European car manufacturers have lately established R&D groups that are dedicated to embedded security in cars, so far there has not been an a- encompassing reference of this topic. The book by Dr. Marko Wolf?lls this gap, and is by far the most comprehensive treatment of IT security in vehicles available today. A particular challenge of au- motive IT security is its interdisciplinary nature. Dr. Wolf has done an outstanding job incorporating disjoint areas in one comprehensive treatment. The book ranges from the relevant security technologies to a systematic analysis of security risks all the way to solution using state-of-the-art security methods. Despite the fact that much of the material is based on results from the research community, Dr.

Our environment is increasingly pervaded by embedded systems which are integrated into everyday objects, equipped with sensors and actuators, networked among each other and available at any time and in any location. These computationally augmented real-world objects must be supplied with context-awareness and need to share the perceived context-information to enable them to operate more autonomously. Clemens Holzmann investigates the role of spatial contexts for autonomous embedded systems, in particular the position, direction, and spatial extension of objects with respect to an external reference system or other objects. The author presents concepts for recognizing, representing, and reasoning about qualitative spatial relations and their changes over time, as well as an appropriate architecture which has prototypically been implemented in a flexible software framework. His results show that the proposed concepts are suitable for developing spatially aware applications and that qualitatively abstracted relations can constitute an adequate basis for this purpose.

The universalmobiletelecommunications system (UMTS) is a technical standard for a third generation (3G) telecommunication system. UMTS provides data rates more than three 1 times higher than its second generation (2G) predecessors. The increased speed en­ ables, for example, video calls, music downloads, or fast web surfing. The technology is already widely available. In 2007, a total of 166 commercial UMTS radio networks are operational in 66 countries covering all continents (UMTS Forum, 20°7), and there are already more than 100 million UMTS subscribers (3GToday. com, 2007; UMTS Forum, 2006). The market for mobile telecommunication is, however, increasingly competi­ tive, therefore operators need to invest effectively. In Western Europe, mobile phone penetration has reached 100% in 2006 and the average revenue per customer is de­ clining (3G. co. uk, 2007). Besides spectrum license fees, the main cost driver is network infrastructure (Ellingeret al., 2002). Radio network planning can cut operational and capital expenditure by up to 30% (Dehghan, 2005). Good radio network planning is difficult for UMTS, because its radio interface is more complex than anything used at mass-market level before (Dehghan, 2005). Con­ nections are separated via codes; they share the same frequency band and are thus subject to interference. On each link, the system constantly regulates the amount of generated interference to a minimum via a power-control feedback loop.

For the simulation of stochastic systems, those techniques are essential which are able to speed up the simulation, i.e. the equivalent of increasing the accuracy that can be reached within a given run-time, especially with a focus on rare events. Eugen Lamers explains the principle of simulation speed-up in general, demonstrates the technique RESTART for the simulation of rare events, and addresses its efficiency on distributed systems. Due to the character of RESTART, the efficiency is limited by the high communication overhead. The author introduces the Short-Term Dynamic Simulation concept, developed for the planning of mobile radio networks, which enables fast state space coverage along with the consideration of dynamic aspects. He analyses the speed-up potential on a theoretical basis with analytically solvable Markov models for different utilisations. With realistic models for UMTS network planning he shows that the evaluation of dynamic performance measures benefits from the Short-Term Dynamic Simulation technique.