Search

In 2022, energy prices skyrocketed across Europe, with average day-ahead spot market prices in Germany 2.43 times higher than the previous year, hinting at future trends. At the same time, electricity infrastructure is expected to be overutilized in some regions in the future due to the uptake of electric vehicles, heat pumps, PV systems, and other appliances in the residential sector. Dynamic electricity pricing for households is proposed as a solution to alleviate infrastructure strain and reduce costs. The question arises as to what impact dynamic electricity prices as recently seen on the day-ahead spot market in Germany would have on the use of flexibility in households and whether it can compensate for cost increases for households. We analyze the cost-effectiveness of utilizing flexibility through a home energy management system (HEMS) and smart meters against increased self-consumption using a HEMS and static tariffs. We show that with higher electricity prices and price spreads, a higher share of households can offset initial investments in HEMS and metering operation costs by utilizing flexibility from their electric vehicles, heat pumps, and battery storage systems. While increasing self-consumption remains beneficial for households with heat pumps and PV systems, dynamic electricity tariffs are financially more advantageous for those with electric vehicles. The study also determines the maximum additional annual costs for HEMS and metering point operation that still allow cost savings for 75% of households. these costs range from 126 to 145 Euro in the self-consumption scenario depending and from 50 to 111 Euro in the dynamic electricity tariff scenario, highlighting the financial viability of flexibility utilization in response to current pricing trends., Comment: 38 pages, 11 figures, submitted to Advances in Applied Energy

This contribution addresses the problem of image reconstruction of radioactivity distribution for which the available information arises from several classes of data, each associated with a specific combination of detections. We introduce a theoretical framework to measure the amount of information brought by each class and we develop an iterative algorithm dedicated to multi-class reconstruction based on maximum likelihood.We apply our approach to the XEMIS2 camera, a preclinical prototype of a Compton telescope dedicated to 3-photon PET imaging for which four distinct classes of partial detections coexist with the full detection class.Based on Monte Carlo simulations, we present the first elements of our model., Comment: in French language, GRETSI'23, Groupe de Recherche et d'Etudes de Traitement du Signal et des Images, Aug 2023, Grenoble, France

Reverse engineering of unknown network protocols based on recorded traffic traces enables security analyses and debugging of undocumented network services. In particular for binary protocols, existing approaches (1) lack comprehensive methods to classify or determine the data type of a discovered segment in a message, e.,g., a number, timestamp, or network address, that would allow for a semantic interpretation and (2) have strong assumptions that prevent analysis of lower-layer protocols often found in IoT or mobile systems. In this paper, we propose the first generic method for analyzing unknown messages from binary protocols to reveal the data types in message fields. To this end, we split messages into segments of bytes and use their vector interpretation to calculate similarities. These can be used to create clusters of segments with the same type and, moreover, to recognize specific data types based on the clusters' characteristics. Our extensive evaluation shows that our method provides precise classification in most cases and a data-type-recognition precision of up to 100% at reasonable recall, improving the state-of-the-art by a factor between 1.3 and 3.7 in realistic scenarios. We open-source our implementation to facilitate follow-up works.

Overnight, Apple has turned its hundreds-of-million-device ecosystem into the world's largest crowd-sourced location tracking network called offline finding (OF). OF leverages online finder devices to detect the presence of missing offline devices using Bluetooth and report an approximate location back to the owner via the Internet. While OF is not the first system of its kind, it is the first to commit to strong privacy goals. In particular, OF aims to ensure finder anonymity, untrackability of owner devices, and confidentiality of location reports. This paper presents the first comprehensive security and privacy analysis of OF. To this end, we recover the specifications of the closed-source OF protocols by means of reverse engineering. We experimentally show that unauthorized access to the location reports allows for accurate device tracking and retrieving a user's top locations with an error in the order of 10 meters in urban areas. While we find that OF's design achieves its privacy goals, we discover two distinct design and implementation flaws that can lead to a location correlation attack and unauthorized access to the location history of the past seven days, which could deanonymize users. Apple has partially addressed the issues following our responsible disclosure. Finally, we make our research artifacts publicly available., Comment: Accepted at Privacy Enhancing Technologies Symposium (PETS) 2021

The market for Bluetooth Low Energy devices is booming and, at the same time, has become an attractive target for adversaries. To improve BLE security at large, we present BTLEmap, an auditing application for BLE environments. BTLEmap is inspired by network discovery and security auditing tools such as Nmap for IP-based networks. It allows for device enumeration, GATT service discovery, and device fingerprinting. It goes even further by integrating a BLE advertisement dissector, data exporter, and a user-friendly UI, including a proximity view. BTLEmap currently runs on iOS and macOS using Apple's CoreBluetooth API but also accepts alternative data inputs such as a Raspberry Pi to overcome the restricted vendor API. The open-source project is under active development and will provide more advanced capabilities such as long-term device tracking (in spite of MAC address randomization) in the future., Comment: 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks

Due to the increase in natural disasters in the past years, Disaster Response Organizations (DROs) are faced with the challenge of coping with more and larger operations. Currently appointed Information and Communications Technology (ICT) used for coordination and communication is sometimes outdated and does not scale, while novel technologies have the potential to greatly improve disaster response efficiency. To allow adoption of these novel technologies, ICT system designers have to take into account the particular needs of DROs and characteristics of International Disaster Response (IDR). This work attempts to bring the humanitarian and ICT communities closer together. In this work, we analyze IDR-related documents and conduct expert interviews. Using open coding, we extract empirical insights and translate the peculiarities of DRO coordination and operation into tangible ICT design requirements. This information is based on interviews with active IDR staff as well as DRO guidelines and reports. Ultimately, the goal of this paper is to serve as a reference for future ICT research endeavors to support and increase the efficiency of IDR operations.

Apple Wireless Direct Link (AWDL) is a proprietary and undocumented wireless ad hoc protocol that Apple introduced around 2014 and which is the base for applications such as AirDrop and AirPlay. We have reverse engineered the protocol and explain its frame format and operation in our MobiCom '18 paper "One Billion Apples' Secret Sauce: Recipe of the Apple Wireless Direct Link Ad hoc Protocol." AWDL builds on the IEEE 802.11 standard and implements election, synchronization, and channel hopping mechanisms on top of it. Furthermore, AWDL features an IPv6-based data path which enables direct communication. To validate our own work, we implement a working prototype of AWDL on Linux-based systems. Our implementation is written in C, runs in userspace, and makes use of Linux's Netlink API for interactions with the system's networking stack and the pcap library for frame injection and reception. In our demonstrator, we show how our Linux system synchronizes to an existing AWDL cluster or takes over the master role itself. Furthermore, it can receive data frames from and send them to a MacBook or iPhone via AWDL. We demonstrate the data exchange via ICMPv6 echo request and replies as well as sending and receiving data over a TCP connection., Comment: The 24th Annual International Conference on Mobile Computing and Networking (MobiCom '18)

Apple Wireless Direct Link (AWDL) is a proprietary and undocumented IEEE 802.11-based ad hoc protocol. Apple first introduced AWDL around 2014 and has since integrated it into its entire product line, including iPhone and Mac. While we have found that AWDL drives popular applications such as AirPlay and AirDrop on more than one billion end-user devices, neither the protocol itself nor potential security and Wi-Fi coexistence issues have been studied. In this paper, we present the operation of the protocol as the result of binary and runtime analysis. In short, each AWDL node announces a sequence of Availability Windows (AWs) indicating its readiness to communicate with other AWDL nodes. An elected master node synchronizes these sequences. Outside the AWs, nodes can tune their Wi-Fi radio to a different channel to communicate with an access point, or could turn it off to save energy. Based on our analysis, we conduct experiments to study the master election process, synchronization accuracy, channel hopping dynamics, and achievable throughput. We conduct a preliminary security assessment and publish an open source Wireshark dissector for AWDL to nourish future work., Comment: The 24th Annual International Conference on Mobile Computing and Networking (MobiCom '18)

Factor analysis has proven to be a relevant tool for extracting tissue time-activity curves (TACs) in dynamic PET images, since it allows for an unsupervised analysis of the data. Reliable and interpretable results are possible only if considered with respect to suitable noise statistics. However, the noise in reconstructed dynamic PET images is very difficult to characterize, despite the Poissonian nature of the count-rates. Rather than explicitly modeling the noise distribution, this work proposes to study the relevance of several divergence measures to be used within a factor analysis framework. To this end, the $\beta$-divergence, widely used in other applicative domains, is considered to design the data-fitting term involved in three different factor models. The performances of the resulting algorithms are evaluated for different values of $\beta$, in a range covering Gaussian, Poissonian and Gamma-distributed noises. The results obtained on two different types of synthetic images and one real image show the interest of applying non-standard values of $\beta$ to improve factor analysis., Comment: This manuscript has been accepted for publication in IEEE Trans. Medical Imaging

R Aqr is a symbiotic binary system consisting of a Mira variable with a pulsation period of 387 days and a hot companion which is presumably a white dwarf with an accretion disk. This binary system is the source of a prominent bipolar gaseous outflow. We use high spatial resolution and sensitive images from the Hubble Space Telescope to identify and investigate the different structural components that form the complex morphology of the R Aqr jet . Methods. We present new high-resolution HST WFC3/UVIS narrow-band images of the R Aqr jet obtained in 2013/14 in the light of the [OIII] 5007, [OI] 6300, [NII] 6583, and Ha emission lines. These images also allow us to produce detailed maps of the jet flow in several line ratios such as [OIII]/[OI] and [NII]/[OI] which are sensitive to the outflow temperature and its hydrogen ionisation fraction. The new emission maps together with archival HST data are used to derive and analyse the proper motion of prominent emitting features which can be traced over 20 years with the HST observations. The images reveal the fine gas structure of the jet out to distances of a few ten arcseconds from the central region, as well as in the innermost region, within a few arcseconds around the stellar source. They reveal for the first time the straight highly-collimated jet component which can be traced to up to 900 AU in the NE direction. Images in [OIII], [OI], and [NII] clearly show a helical pattern in the jet beams which may derive from the small-scale precession of the jet. The highly-collimated jet is accompanied by a wide opening angle outflow which is filled by low excitation gas. The position angles of the jet structures as well as their opening angles are calculated. Our measurements of the proper motions of some prominent emission knots confirm the scenario of gas acceleration during the propagation of the outflow., Comment: 15 pages, 7 figures

The foreseen CaLIPSO Positron Emission Tomography (PET) scanner is expected to yield simultaneously a fine image resolution, about 1 mm$^3$, and a high contrast. In this paper we present results of simulations for the full CaLIPSO PET scanner with a "cube" geometry. We quantify by simulations the expected image resolution and Noise Equivalent Count Rates and compare them to the performance of the most efficient clinically used PET scanner, the High-Resolution Research Tomograph by Siemens. We bring up the issues of the image reconstruction for a scanner with high spatial resolution. We also present simulated brain images for [$^{18}$F]-FDG and [$^{11}$C]-PE2I tracer distributions. Results demonstrate the high potential of the CaLIPSO PET scanner for small animal and brain imaging where combination of high spatial resolution and efficiency is essential., Comment: Submitted to IEEE TRPMS journal, 8 pages, 10 figures