Robert Boschgmbh

Robert Bosch Gmbh

Paulius Duplys

Christopher Huth

Matthew Lewis

Robert Szerwinski

Jorge Guajardo Merchan

Eberhard Boehl

Andreas Heyl

Christian Zimmermann

Rene Guillaume

Sebastien Leger

Tobias Gehrmann

Jan Zibuschka

Jamshid Shokrollahi

Janin Wolfinger

Markus Schweizer

Michael Herrmann

Attila Altay Yavuz

Michael Boehl

Hans Loehr

Benjamin Glas

Fredrik Kamphuis

Hamit Hacioglu

Arne Nordmann

Martin Ring

Max Camillo Eisele

Heiko Baur

Herve Seudie

Hana Boukricha

Jeffrey Donne

Philipp Jung

Roland Schmitz

Niclas Ilg

A method for ascertaining a relevance of security-relevant vulnerabilities of a product. The method includes the following steps which are carried out automatically: providing a terms specification which includes terms for specifying the vulnerabilities; providing a product profile of the product, which specifies the product on the basis of the terms in the terms specification; providing at least one vulnerability profile for the particular vulnerability, which specifies the vulnerability on the basis of the terms in the terms specification; ascertaining the relevance of the particular vulnerability for the product on the basis of a processing of the product profile and of the vulnerability profile.

Method for ascertaining a relevance of security-relevant vulnerabilities of a product

A computer-implemented method for detecting anomalous activity in a computer system by monitoring at least one decoy application programming interface. The method includes: detecting, in at least one decoy API hosted in a computer system, a function call to the at least one decoy API from an element of the computer system; and transmitting an intrusion message from the at least one decoy API to an intrusion detection system signifying that a function call to the at least one decoy API has been made.

Application programming interface security

A method for location-dependent verification of a teleoperator for remote control of a vehicle. At its current location, the vehicle repeatedly and automatedly performs the following: receiving, from the teleoperator, during remote control by the teleoperator, a response message requested via a network, ascertaining a current value of at least one network-dependent property of the received response message, determining a target value of the at least one network-dependent property, verifying the teleoperator by means of a verification of the current value of the at least one network-dependent property and of the determined target value based on a test condition, wherein in the case of a positive test result of the check, the teleoperator is authorized to perform the remote control of the vehicle, and in the case of a negative test result of the check, the vehicle terminates the remote control and/or sends a safety warning.

Method for location-dependent verification of a teleoperator for remote control of a vehicle

A computer-implemented method for recognizing and/or preventing an intrusion into a service-oriented communication system of a vehicle, including registering a process originating from an instance in the service-oriented communication system, and checking, at least based on a predetermined negative list, whether the process in the service-oriented communication system is impermissible. A service-oriented communication system in a vehicle, which is designed to apply the method for recognizing and/or preventing an intrusion into the service-oriented communication system, optionally the communication system being safeguarded via the method for recognizing and/or preventing an intrusion into the service-oriented communication system.

Negative list-based recognition/prevention of intrusion into a service-oriented communication system

A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Method for the provision of a function by a group of computing units

A method, apparatus and system for generating sensor data comprising a subset of tagged sensor data. The method includes: sensing, using a sensing element, ambient data, wherein the ambient data characterises a condition of an environment proximate to the sensing element; identifying, using a data identification engine, at least a first subset of the ambient data comprising a representation of, or identifying information related to, personally relevant information obtained by the sensing element; tagging, using a data tagging engine, the first subset of the ambient data with at least one data tag; and outputting, via the communication interface, at least a second subset of the ambient data comprising ambient data that has not been tagged by the data tagging engine.

Sensor for generating tagged sensor data

A computer implemented method for remote intrusion monitoring of a networked device. The method includes: receiving, by an intrusion detection engine connected to a network, a network communication to a first networked device; transmitting, via the intrusion detection engine, a duplicate of the network communication to a second networked device, wherein the second networked device hosts at least one virtual model of the first networked device; applying the duplicated network communication to the at least one virtual model of the first network device hosted by the second networked device; and monitoring, using a monitoring engine, the at least one virtual model of the first networked device upon reception of the duplicated network communication by the at least one virtual model.

Remote intrusion monitoring

A method for location attestation for a device connected to a network. The method includes: ascertaining at least one initial fingerprint, wherein the at least one initial fingerprint is specific to an initial network environment of the device in the network; storing the at least one ascertained initial fingerprint as a reference; ascertaining at least one current fingerprint, wherein the at least one current fingerprint is specific to a current network environment of the device on the network; comparing the at least one ascertained current fingerprint with the reference; verifying a geographic location of the device at least partially based on the comparison.

Method for location attestation for a device connected to a network

A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.

Method for providing a function via a network of processing units

A computer-implemented method for verifying messages in a service-oriented communication system of a vehicle, including receiving a message and a signature in a first entity of the service-oriented communication system, the message and the signature being received via the service-oriented communication system; checking if the message corresponds to a dedicated message and the signature corresponds to a signature belonging to the dedicated message; and verifying the message, if the checking turns out positive. A computer-implemented method for generating predetermined messages in a first entity of a service-oriented communication system of a vehicle, and a service-oriented communication system in a vehicle, which is configured, are also described.

Resource-efficient verification of messages in a service-oriented communication system

A method for protecting a computer-based classifier. The method includes determining a first similarity of a plurality of input data sets of a computer-based classifier, comparing the determined first similarity of the plurality of input data sets and a second similarity of a comparison corpus of input data sets and recognizing the possibility of an attack on the computer-based classifier when the first similarity of the plurality of input data sets and the second similarity of the comparison corpus deviate from one another in a predetermined manner.

Techniques for protecting a computer-based classifier

A method for updating a software component. The method includes providing a first electronic device and a second electronic device that are connected in a first network, receiving update information for the second electronic device via the first electronic device, the update information being provided with a signature that is generated with the aid of a post-quantum algorithm (PQA) signature, checking the update information by validating the signature by the first electronic device, relaying the update information to the second electronic device if the update information is deemed to be valid, and updating a software component of the second electronic device using the update information.

Techniques for updating a software component

A computer-implemented method for detecting anomalous communications in a service oriented communication system. The method includes providing at least one decoy service, hosted by a decoy server communicably coupled to the service oriented communication system, wherein the at least one decoy service is addressable using a corresponding decoy service identifier; detecting, at the decoy server, a request to consume at least one instance of the at least one decoy service, wherein the request originates from a client communicably coupled to the decoy server via the service oriented communication system; and performing, at the decoy server, a response to the request to consume the at least one instance of the at least one decoy service.

Detecting anomalous communications

A method for communicating data requests to one or more data sources. The method includes receiving a data request, with which data of one or more data types are requested, from an application, and checking the availability of one or more data sources that are able to provide the one or more requested data types. The method further comprises: if at least one of the one or more data sources is available, sending a request to the available data source for the requested associated data type that the data source can provide; and, if no data source is available for at least one of the requested data types, sending a request for this data type to a placeholder module.

Method for communicating data requests to one or more data sources and for processing requested data from one or more data sources in an application

A method, in particular a computer-implemented method, for processing data of a technical system. The method includes the following steps: ascertaining first pieces of information which are associated with a data traffic of the system, and ascertaining metadata associated with the data traffic of the system based on the first pieces of information.

Growing community of inventors

Markgroeningen, Germany

Paulius Duplys