Robert Boschgmbh

Christopher Huth

Paulius Duplys

Simon Greiner

Jorge Guajardo Merchan

Rene Guillaume

Max Camillo Eisele

Anupam Sarkar

Marcel Kneib

Hans Loehr

Martin Ring

Arne Nordmann

Christian Zimmermann

Clemens Schroff

Oliver Willers

Jo Pletinckx

Rakshith Amarnath

Fredrik Kamphuis

Tobias Gehrmann

Herve Seudie

Irina Nicolae

Marius Fischer

A computer-implemented method for maintaining a function of a local entity upon connection disruption to a backend in a communication system including a backend and a plurality of local entities. The backend provides backend information for the function. The method includes reception of local behavior models from a plurality of local entities by the backend, wherein the local behavior models provide the function in the local entities if particular backend information is not available; creation of a behavior model based on the received local behavior models; and transmission of the behavior model to a local entity of the plurality of the local entities by the backend.

Computer-implemented method for maintaining a function in local entities upon connection disruption to a backend in a communication system

A method for obtaining coverage-guided fuzzing of software on a hardware target. The hardware target includes a breakpoint register, and is designed to stop an execution of the software prior to execution of an instruction of the software if the instruction is reached during the execution of the software; a memory address of the instruction is set in the breakpoint register. The method includes setting a first breakpoint prior to a first instruction of the software; executing or continuing a fuzzing iteration of the software; first checking whether the first breakpoint is reached while executing or continuing the fuzzing iteration; storing a piece of log information that includes that the first instruction in the fuzzing iteration has been reached, and optionally deleting the first breakpoint if the first check is positive. The coverage-guided fuzzing of the software includes the piece of log information.

Coverage-guided fuzzing via dynamic instrumentation

A computer-implemented method for performing a test for a program code. The method includes the following steps: providing a modified program code, which includes the program code to be tested and at least one code segment, the at least one code segment monitoring an execution sequence of execution segments, and the code segment being developed to induce a program termination when an impermissible execution sequence is detected; performing a fuzz test for the modified program code; signaling a program termination when an impermissible execution sequence is detected.

Method and device for operating fuzz testing of a program code

A computer-implemented method for fuzzing a target software running on a computer. In the method: a target program is carried using first input data, memory context information of the target program's run is captured, a machine learning model is trained using the first input data and the memory context information as model input, a fuzzing input is generated based on an output of the machine learning model, the target program is tested using the fuzzing input.

Method for fuzz testing

A computer-implemented method for selecting a fuzzing method for carrying out fuzzing testing of a predefined program code. The method includes: providing one or multiple reference performance metrics that characterize the result of reference fuzzing testing of the program code to be tested, using a reference fuzzing method; carrying out fuzzing tests, based on various fuzzing methods, on the predefined program code in order to ascertain one or multiple performance metrics in each case; selecting one or multiple fuzzing methods corresponding to the associated performance metrics, as a function of the reference performance metric; and carrying out fuzzing testing corresponding to the one or multiple selected fuzzing methods.

Computer-implemented method and device for selecting a fuzzing method for testing a program code

A method for communicating data requests to one or more data sources. The method includes receiving a data request, with which data of one or more data types are requested, from an application, and checking the availability of one or more data sources that are able to provide the one or more requested data types. The method further comprises: if at least one of the one or more data sources is available, sending a request to the available data source for the requested associated data type that the data source can provide; and, if no data source is available for at least one of the requested data types, sending a request for this data type to a placeholder module.

Method for communicating data requests to one or more data sources and for processing requested data from one or more data sources in an application

A computer-implemented method for carrying out an update management for updating application software on data processing units. The method includes: providing an error model, which indicates a number of errors across software versions of the application software; determining an update sequence for data processing units, depending on their particular software version; and updating the application software or providing an update prompt to update the application software in the data processing units according to the update sequence.

Computer-implemented method and device for the update management of different versions of distributed software with the aid of machine learning methods

A method for authenticating a message transmitted via a communication channel, including the following: sampling recurring signal edges within a data frame of the message, sampling values being obtained with a start time that is offset between the signal edges, reconstructing an average signal characteristic of a part of the message from the sampling values, calculating signal-technical properties of the data frame from the signal characteristic, and the message is authenticated based on the properties.

Method and device for authenticating a message transmitted via a bus

A computer-implemented method for testing a system, the tested system being a computer program, a hardware system, or an embedded system. In the method, using a static analysis, a first part of an execution structure for the system is examined to see if the system runs corresponding execution paths without errors when the first part of the execution structure is executed. If in the static analysis error-free execution is determined for the first part of the execution structure, the system is examined using a dynamic analysis which leaves out execution paths which correspond to the first part of the execution structure.

Method for testing a system

A method is provided for checking a sensor value of a MEMS sensor. In the process, an output signal of the MEMS sensor is detected and the sensor value is ascertained as a function of the output signal. In addition, frequency components of the output signal are examined and a determination is made as to whether the ascertained sensor value is reliable or unreliable as a function of the examination of the frequency components. If the sensor value is determined to be unreliable, the sensor value is discarded or provided with a lower weighting, or a warning it output relating to the unreliability of the sensor value or an item of information about the unreliability of the sensor value is stored.

Method for checking a sensor value of a MEMS sensor

A method and system for authenticating a device is disclosed. The method includes the steps of: receiving a helper bit string and a first MAC; measuring a first response bit string of a physical unclonable function of the device with respect to a challenge bit string; subtracting the first response bit string from the helper bit string; decoding a result of the subtraction using a uniformly distributed random matrix, the shared secret bit string being provided from the decoding if the helper bit string was encoded using a previously measured second response bit string that is within a threshold level of similarity to the first response bit string, the decoding outputting an error value otherwise; determining a second MAC based on the shared secret bit string, the uniformly distributed random matrix, and the helper bit string; and determining whether the second MAC matches the first MAC.

Robust computational fuzzy extractor and method for authentication

A method and system for authenticating a first device is disclosed. The method includes the steps of: measuring a first response bit string of a physical unclonable function of the first device with respect to a challenge bit string, the physical unclonable function being provided by one of the processor of the first device and a further physical component of the first device; deriving a shared secret bit string from a uniformly distributed random vector; encoding a helper bit string by multiplying a uniformly distributed random matrix with the uniformly distributed random vector and adding the first response bit string to a result of the multiplication; and transmitting the helper bit string to a second device that is remote from the first device.

Reverse computational fuzzy extractor and method for authentication

A method for authenticating a first device is disclosed. In one embodiment, the method includes the steps of: receiving a helper bit string from a second device that is remote from the first device; measuring a first response bit string of a physical unclonable function of the first device with respect to a challenge bit string; subtracting the first response bit string from the helper bit string; reconstructing a random matrix using a pseudo-random number generator initialized with a seed; and decoding a result of the subtraction using the random matrix, the shared secret bit string being provided from the decoding if the helper bit string was encoded using a previously measured second response bit string that is within a threshold level of similarity to the first response bit string, the decoding outputting an error value otherwise.

Pseudo-random generation of matrices for a computational fuzzy extractor and method for authentication

A method for protecting a network having multiple network subscribers against a cyberattack, in which bits or bit sequences of a message are transmitted between the network subscribers in the network via different voltage levels on at least one transmission route of the network. For this purpose, at least one characteristic of the voltage levels or of the transmitted bits or bit sequences is actively modified in at least one of the network subscribers or on the at least one transmission route and the origin of the transmitted bits or of the at least one transmission route is determined on the basis of the at least one characteristic. The cyberattack on the network is detected or the cyberattack on the network is localized in the network as a function of the ascertained origin.

Method for protecting a network against a cyberattack

A method for transmitting software in which a checker generates two random numbers. The checker calculates a cryptographic key based on the second random number based on a measured hardware function of the device. The checker encrypts the software into a cryptogram using the key, and transmits the cryptogram to the device. The checker transmits the first random number to the device, and receives a checksum from the device. The checker calculates a reference value based on the first random number and an emulated random access memory of the device, with the aid of the measured hardware function and a predefined cryptographic hash function. The checker subjects the checksum to a check based on the reference value, and if the check is successful, the checker transmits the second random number to the device.

Growing community of inventors

Leonberg, Germany

Christopher Huth