This file was created by the TYPO3 extension
bib
--- Timezone: UTC
Creation date: 2025-03-16
Creation time: 08-37-11
--- Number of references
5
inproceedings
2025_pennekamp_confmod
ConfMod: A Simple Modeling of Confidentiality Requirements for Inter-Organizational Data Sharing
2025
5
12
Exploiting data and information is known to be essential for tapping into unrealized (business) potential. In the context of the Industrial Internet of Things (IIoT), concerns related to the sensitivity of data frequently hinder its sharing (across organizations). Despite this situation, universal approaches that account for and appropriately model the confidentiality needs of stakeholders are still missing. In this paper, we address this research gap by proposing ConfMod, a middleware that simplifies the fine-granular modeling of confidentiality requirements while striving for interoperability with other tools and standardization in the area. We evaluate ConfMod in a diverse set of twelve real-world use cases from industry and show its general feasibility. Hence, we are confident that the functionality and simplicity of ConfMod facilitate an important building block for the IIoT, which will fuel inter-organizational data sharing in the future.
Information Security; Information Privacy; Interoperability; Unified Framework; Internet of Production
internet-of-production
https://www.comsys.rwth-aachen.de/fileadmin/papers/2025/2025-pennekamp-confmod.pdf
IEEE
Proceedings of the 6th Workshop on Management for Industry 5.0 (MFI5.0 '25), co-located with the 38th IEEE/IFIP Network Operations and Management Symposium (NOMS '25), May 12-16, 2025, Honolulu, HI, USA
Honolulu, HI, USA
2025 IEEE/IFIP Network Operations and Management Symposium
May 12-16, 2025
accepted
1
JanPennekamp
PaulWeiler
MatthiasBodenbenner
MaximilianSudmann
IstvánKoren
IkeKunze
MarcelFey
DominikWolfschläger
ChristianBrecher
RobertSchmitt
KlausWehrle
inproceedings
2025-kunze-crq
Congestion-Responsive Queuing for Internet Flows
2025
5
Internet congestion management is once again undergoing radical change: QUIC has ignited a cambrian explosion in congestion control (CC) implementations while the many versions of BBR alone have increased the diversity in algorithms used with TCP, both making the congestion landscape more complex. At the same time, the interplay of CC and AQM is also evolving but congestion unresponsiveness remains a threat. In particular, L4S crucially requires a fine-grained CC and AQM interaction to provide its benefits and suffers from unresponsive traffic. Overall, we need more responsive traffic on the Internet as well as mechanisms that can cope with unresponsiveness.
We present Congestion-Responsive Queuing (CRQ), our L4S-inspired system which is designed to promote responsive CC, manage unresponsive traffic, and handle QUIC and TCP flows alike. Similar to L4S, CRQ uses two queues for flow isolation. Yet, in contrast to L4S, we isolate flows based on their actual congestion responsiveness, moving responsive flows to one queue and leaving the remaining flows in the other. Our evaluation with an eBPF prototype highlights the efficacy of our design and shows that CRQ can provide effective incentives for responsive CC.
https://www.comsys.rwth-aachen.de/fileadmin/papers/2025/2025-kunze-crq.pdf
IEEE
Proceedings of the 2025 IEEE/IFIP Network Operations and Management Symposium (NOMS '25), May 12-16, 2025, Honolulu, HI, USA
Honolulu, HI, USA
2025 IEEE/IFIP Network Operations and Management Symposium
May 12-16, 2025
accepted
1
IkeKunze
ConstantinSander
MikeKosek
LarsTissen
JanPennekamp
KlausWehrle
inproceedings
2025-fink-hybridmon
Advancing Network Monitoring with Packet-Level Records and Selective Flow Aggregation
2025
5
Due to its superior efficiency, network operators frequently prefer flow monitoring over full packet captures. However, packet-level information is crucial for the timely and reliable detection, investigation, and mitigation of security incidents. Currently, no solution effectively balances these two contradicting approaches, forcing network operators to compromise between efficiency and accuracy. In this paper, we thus propose HybridMon, a hybrid solution that combines condensed packet-level monitoring with selective flow-based aggregation to strike a new balance between efficiency and accuracy. Operating on the data plane of P4-programmable switches, HybridMon enables fine-grained, practical, and flexible network monitoring at Tbps speeds. We validate the effectiveness of HybridMon through extensive evaluations using Internet backbone and university campus traffic traces, demonstrating its reliability and performance in network forensics and intrusion detection contexts. Our results show that HybridMon reliably monitors all flows while reducing the output bandwidth to 12 % to 20 % compared to packet monitoring when exporting standard features.
Security Services; Control and Data Plane Programmability; Monitoring and Measurements
https://www.comsys.rwth-aachen.de/fileadmin/papers/2025/2025-fink-hybridmon.pdf
IEEE
Proceedings of the 2025 IEEE/IFIP Network Operations and Management Symposium (NOMS '25), May 12-16, 2025, Honolulu, HI, USA
Honolulu, HI, USA
2025 IEEE/IFIP Network Operations and Management Symposium
May 12-16, 2025
accepted
1
Ina BereniceFink
IkeKunze
PascalHein
JanPennekamp
BenjaminStandaert
KlausWehrle
JanRüth
inproceedings
2025_querfurth_transformer
Transformer-Based Integrative Patient Representations from Single-Cell RNA Data
2025
4
28
health; rfc; rust
Learning Meaningful Representations of Life Workshop (LMRL '25), co-located with the 13th International Conference on Learning Representations (ICLR '25), April 24-28, 2025, Singapore, Singapore
Singapore, Singapore
April 24-28, 2025
accepted
1
Benediktvon Querfurth
JohannesLohmöller
JanPennekamp
ToreBleckwehl
RafaelKramann
KlausWehrle
SikanderHayat
inproceedings
2025_berninger_ratings
Privacy-Aware Supply Chain Ratings: Interdisciplinary Research On Collaborative Supply Chain Management
2025
3
20
The establishment, expansion, and operation of reliable value-creation networks present an increasing challenge for manufacturing companies, given the growing volatility of the market environment in which they operate. For example, the development of new business areas, mass customization, or the disruption of supply chains frequently necessitates the establishment of partnerships with new suppliers, both short- and long-term. The utilization of supplier key performance indicators (KPIs) can facilitate the selection of new business partners, as they provide a quick and objective indication of their reliability. Nevertheless, access to potentially sensitive KPIs, such as a supplier's on-time delivery performance, is currently mainly limited to existing supplier relationships and not made available to other companies. This paper presents a coordinated approach for supplier rating systems, thereby enabling the privacy-aware exchange of supplier KPIs across organizations and exemplifies it using an application in the "Internet of Production". Specifically, we conduct interdisciplinary research by formulating the requirements from a business perspective (supply chain design, trust in data sharing, and business models) and evaluating promising solutions from a technical perspective (information security, data quality, data sovereignty, and collaboration). This approach enables the combination of state-of-the-art technology with the evolving requirements of stakeholders, thus creating new paths for exploiting inter-organizational supply chain rating.
supply chain management; privacy awareness; data sharing; collaboration; Internet of Production
internet-of-production
publish-Ing.
Proceedings of the 7th Conference on Production Systems and Logistics (CPSL '25), March 18-21, 2025, Lima, Peru
Lima, Peru
Conference on Production Systems and Logistics
March 18-21, 2025
accepted
2701-6277
1
StefanieBerninger
Soo-YonKim
JoanaPiel
MartinPerau
SandraGeisler
FrankPiller
KlausWehrle
JanPennekamp