http://dl.gi.de/handle/20.500.12116/40193 2026-07-21T13:23:39Z http://dl.gi.de/handle/20.500.12116/40212 Providing Evidence for Correct and Timely Functioning of Software Safety Mechanisms Becker, Jan Steffen; Koopmann, Björn; Stierand, Ingo; Westhofen, Lukas Groher, Iris; Vogel, Thomas In many application domains, the development of safety-critical systems must follow standards that define process steps and artifacts to establish a comprehensive safety argumentation. Commonly, this involves the identification of hazards and risks as well as the formulation of a safety concept to mitigate these risks. The concept is decomposed into safety requirements, which are finally implemented in hardware and software. All steps must be covered by analyses to ensure that the concept is effective and correctly implemented. This work focuses on timing aspects of the safety concept, i.e., on how it can be ensured that risk mitigation occurs in time. Based on an industrial use case, we show how consistent timing specifications can be derived, decomposed, and implemented in a complete and sound way. The approach extends previous work on contract-based design and investigates on explicating failure modes and fault detection in contract specifications. Finally, we show how model checking can support the verification of safety concepts and their implementation. 2023-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/40211 Updates at Runtime for Cyber Physical Systems. A Game Theoretic Approach Kröger, Janis; Fränzle, Martin Groher, Iris; Vogel, Thomas Updates are becoming increasingly important in the field of cyber physical systems in order to increase the lifetime of these systems and to save resources and costs. One way to achieve this is to update the system at runtime. This paper describes our vision of a game-theoretic approach to determine when an update is possible at runtime, taking into account the system behavior. This ensures that the system behaves safely at all points in time. For this purpose we use so-called timed games and synthesize a strategy under which the update can be performed. We sketch the approach and illustrate its application on an automotive example of an autopilot. 2023-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/40210 Cyber Security and Software Update management system for connected vehicles in compliance with UNECE WP.29, R155 and R156 Bohara, Rohit; Ross, Mirko; Rahlfs, Sven; Ghatta, Sara Groher, Iris; Vogel, Thomas Code is the new fuel of a modern car. Almost every aspect of a car is controlled and managed by software running in electronic control units (ECU). This has led to enormous complexity in automotive software. To put this in perspective, automotive software has grown from few 100 lines of code to 100 million in a span of 40 years. Additionally, inherent convolution in the automotive software supply chain introduces its own set of problems for cyber security and safety of a car. The research paper proposes a pioneered approach for cyber security and software update management to transform the automotive software engineering principles. It aims to strengthen the security of automotive software, bring transparency in the software supply chain and establishes regulatory compliance management processes by design. 2023-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/40208 Anforderungen an ein Vorgehensmodell zur Auswahl von Unternehmens-Software Weiss, Christoph; Keckeis, Johannes; Weiss, Elisabeth Groher, Iris; Vogel, Thomas Im vorliegenden Paper wird, anhand eines Literaturreviews, der Frage nachgegangen, welchen Anforderungen Vorgehensmodelle bei deren Erstellung unterliegen. Aufgrund der zum großen Teil fragmentarischen Darstellung der Genese von Vorgehensmodellen konnten lediglich vier Anforderungen, welche in mehreren Quellen Niederschlag gefunden hatten, identifiziert werden. Diese Erkenntnis führt zu weiteren Fragen, welche einer wissenschaftlichen Untersuchung zugeführt werden sollten. 2023-01-01T00:00:00Z