FOKUS Publications Overview 2011

The Internet today consist of many heterogeneous infrastructures, owned and maintained by separate and potentially competing administrative authorities. On top of this a wide variety of applications has different requirements with regard to quality, reliability and security from the underlying networks. The number of stakeholders who participate in provisioning of network and services is growing. More demanding applications (like eGovernment, eHealth, critical and emergency infrastructures) are on the rise. Therefore we assume that these two basic characteristics, a) multiple authorities and b) applications with very diverse demands, are likely to stay or even increase in the Internet of the future. In such an environment federation and virtualization of resources are key features that should be supported in a future Internet. The ability to form slices across domains that meet application specific requirements enables many of the desired features in future networks. In thispaper, we present a Multipath Routing Slice experiment that we performed over multiple federated testbeds. We combined capabilities from different experimental facilities, since one single testbed did not offer all the required capabilities. This paper summarizes the conducted experiment, our experience with the usability of federated testbeds and our experience with the use of advanced measurement technologies within experimental facilities. We believe that this experiment provides a good example use case for the future Internet itself because we assume that the Internet will consist of multiple different infrastructures that have to be combined in application specific overlays or routing slices, very much like the experimental facilities we used in this experiment. We also assume that the growing demands will push towards a much better measurement instrumentation of the future Internet. The tools used in our experiment can provide a starting point for this.

The future wireless telecommunication environment is characterized by the co-existence of a multitude of wireless networks such as LTE, LTE-Advanced, UMTS, WiMAX, WiFi etc. In order to be able to offer the best connectivity, according to the requirements of the users and to the preferences of the operator, a novel functionality was introduced in the core network and in the mobile devices for access network discovery and selection. This paper introduces this functionality as standardized in the 3GPP Evolved Packet Core (EPC), highlighting its main concepts and technical scenarios. Further, a set of novel optimizations are presented and evaluated, followed by the description of their implementation as part of the Fraunhofer FOKUS OpenEPC toolkit.

Telecommunication and Internet services are constantly subject to changes, seeking the customer's full satisfaction. Enriching these services with innovative approaches such as context-aware, social, mobile, adaptable and interactive mechanisms enable users to experience a variety of personalized services seamlessly across different platforms and technologies. In this sense, Service Oriented Architectures play a central role in allowing component reuse and low cost service creation. Together with IP Multimedia Subsystem enable the convergence of telecommunications and web services, allowing the network transport technologies to be abstracted from the services above. By integrating these technologies, a number of synergies can be explored. Existing services can be easily enriched with context information, made available on a variety of networks and new services can be composed using previously existing building blocks. This paper explains how this integration can be achieved, and demonstrates the potentialities of this architectural paradigm with a prototype service.

Future mobile networks are expected to be complex heterogeneous systems. On the one hand this will enable users to take advantage of a number of different access technologies. On the other hand it will seriously affect network management procedures since more extensive operations and decisions will have to be dealt with. To tackle these challenges a number of new dynamic mechanisms need to be designed. It is imperative that certain network management tasks have to be performed without human intervention to reduce the OPEX costs and achieve faster responses in different events. To achieve this goal, the introduction of self-x functionalities, combined with cognitive mechanisms and the ability to reconfigure network entities and terminals, is required. Moreover, the introduction of a new pilot channel needs to be considered to assist the terminals in selecting the most suitable radio access technology according to their requirements. We present the functional architecture of an evolved network that was designed in the context of the EU-funded IP project âE3: End-to-End Efficiencyâ. This architecture aims to enhance existing procedures usually performed in traditional operation and maintenance systems (e.g. spectrum management, network planning, configuration actions). We explain the rationale of our design and provide specific examples to illustrate the role of the different functional entities and their interfaces. A considerable part of this architecture has recently been approved as a feasibility study by the ETSI Committee Reconfigurable Radio System.

The objective of this paper is to analyze economic efficiency considerations of standards competition, in order to thereby enrich the discussion about the transfer of the ECMA-376-1 (Office Open XML OOXML) standard into the ISO/IEC 29500:2008 standard parallel to the already existing ISO/IEC 26300:2006 (Open Document Format for Office Applications ODF) standard. Based on the available economic literature we identify parameters that need to be considered in the decision for or against a competition between competing standards. The characteristics in the specific case of competition between the ODF and the OOOXML standard clearly justify the decision for two documents standards.

Durch einen effizienten Datenaustausch mit der Verwaltung können Unternehmen von kostspieligen Informations- und Meldepflichten entlastet werden. Wie dieser gelingen kann, zeigt das von einem interdisziplinären Projekt-Team entwickelte P23R-Prinzip.

Networks, services, and business models need to be piloted in a large-scale environment that mimics as far as possible the Internet and its future version, although we certainly do not know what this will look like. In this highly demanding and dynamic context, new frameworks and (meta-) architectures for supporting experimentation are proposed, aiming at discovering how existing and emerging testbeds and experimental resources can be put together in such a way that testing and experimentation may be carried out according to specific requirements (industry, academia, etc.). The work presented in this article addresses a number of the fundamental principles and their corresponding technology implementations that enable the provisioning of large-scale testbeds for testing and experimentation as well as deploying future Internet platforms for piloting novel applications. The proposed concepts and architecture of Panlab, a pan-European testbed federation, aspires to facilitate and support user needs in these new areas.

This paper investigates the application of the Delphi methodology for the identification of future fields of standardisation complemented by a methodological extension by using various science and technology indicators. By the term standardisation, we broadly mean the process of developing and implementing technical standards within a standardisation body. Underlining the explorative nature of this paper, we describe the process of identifying future fields of standardisation. To provide a systematic forecasting view on complex science and technology fields, a combination of quantitative indicator-based analyses and qualitative in-depth Delphi surveys is choosen. Firstly, statistical analyses of suitable indicators are used to identify dynamic developments in such fields. Secondly, to identify detailed challenges for future standardisation, qualitative Delphi surveys are conducted. To collect and evaluate relevant issues the respective expert communities were included. They were identified by using information derived from the science and technology databases used. The paper concludes with the assessment of the chosen approach and give practical insights for its feasibility based on a review of the existing literature on the Delphi methodology. In addition, an outlook for further improvements and other possible fields of application is given.

The paper describes a methodology for standardisation foresight developed for the German Institute for Standardisation (DIN), to systematically identify innovative standardisation topics by involving the science and research community. Up to date, formal standardisation bodies have not undertaken systematic efforts to conduct these kinds of forecasting studies. This approach identifies future standardisation aspects in dynamic, innovative fields of technology by combining a computerised quantitative analysis of science and technology indicators (e.g., patent applications, scientific publications, etc.) and Delphi-based surveys. We first describe the function and economic effects of standards in the innovative process. Then, we introduce an indicator module to identify future fields of standardisation and combine this qualitative analysis with an online Delphi survey. To illustrate the general methodological approach, we exemplarily display major results on nanotechnology. We conclude by assessing the application of our standard foresight approach and its extensibility towards computer-aided information retrieval.

Der Beitrag reflektiert die Einführung und Etablierung eines unabhängigen Qualitätsmanagements im Projekt "P23R | Prozess-Daten-Beschleuniger" im Rahmen des IT-Investitionsprogramms der Bundesregierung.

Future processing, storage and communication services will be highly pervasive: people, smart objects, machines and the surrounding space (all embedding devices such as with sensors, RFID tags etc.) will define a highly decentralized cyber environment of resources interconnected by dynamic networks of networks. As communications will extend to cover any combination of \\\people, machines and things\\\, future networks will be increasingly complex and heterogeneous, yet always endorsed with the challenging task of ensuring end-to-end QoS. This paper proposes the groundwork for an advanced cognitive networking paradigm exploitable in future wired and wireless infrastructures: a decentralized cognitive plane to allow for cross-layer, cross-node and cross-network domain self-management, self-control and self-optimization, while being compatible with legacy management and control systems.

Das UML Testing Profile [UTP] ist eine grafische Modellierungssprache zur Definition, Dokumentation, Visualisierung, Implementierung und zum Austausch von modellbasierten Testspezifikationen auf Basis der UML [UML]. Der normative Teil der Spezifikation definiert das native UML-Profil des UTP1. Die Spezifikation des UTP als UML-Profil ist im Vergleich zu anderen Sprachen der UML-Familie [SysML, MARTE, SoaML] deutlich schlanker und kompakter, erfordert aber gleichzeitig profundes UML-Wissen, um die Potenziale von UTP voll ausschöpfen zu können. Ein Umstand, der die Akzeptanz des UTP bis heute behindert, da nur wenige Tester in den Konzepten der Modellierung im Allgemeinen ausreichend geschult und mit der UML im Besonderen vertraut sind. Dieser Artikel widmet sich daher neben einer kurzen Einführung in das UTP vor allem Fragen seiner Anwendbarkeit. Dabei stehen weniger spezifische Domänen, sondern eher grundsätzliche, testmodellspezifische Fragestellungen im Vordergrund.

We witness an ongoing intensive research towards the specification and implementation of autonomic behaviors for the Future Internet. Important issues that need to be addressed in that context are related to diverse security aspects of the emerging autonomic network technologies. In this paper, we present our research on security in autonomic networks based on the GANA reference model. We present a number of concepts and show how security can be addressed on the architectural level in an autonomic network.

When considering autonomic networking, where multiple self-* functionalities, in terms of node-wide or network-wide control loops, must operate, interact and proficiently collaborate, stability problems inherently arise due to the distributed nature of the decision making process and autonomic nodes interactions towards enabling various self-* functionalities, along with the stochastic nature of the networking environment. This article provides a systematic, concrete view of stability in autonomic networks design. It aims at identifying and categorizing fundamental autonomic networks' architectural and designing issues that cause or affect stability, highlighting and discussing corresponding solutions and thus, providing theoretic tools for analyzing and treating them. As a reference model we adopt Generic Autonomic Network Architecture (GANA), a holistic framework for autonomic networks engineering.

A framework for lowering the borders of service delivery and service composition in telecommunication networks is proposed in this work. In our opinion such an agile framework is needed for two main reasons. At first the cycle of introducing new services in the telecommunication industry usually takes several months, while the general cycles in the Web domain are much faster. Besides, customers want to use a flexible amount of services from different kinds of sources (e.g. Google, Facebook). The proposed agile service environment is intended to interact with services of the traditional telecommunication industry and is enabling the third party development process to support services coming from all kind of domains. Service platforms for Next Generation Networks adapting the principles of Service Oriented Architectures and the initial steps in the standardization towards service delivery frameworks are done. Special requirements that have to be considered are aspects of servicelife-cycle management and service composition that are critical regarding high performing real-time communication processes as needed in a telecommunications environment. Beyond the requirements of dynamic service deployment, management, evolution and service termination there is the intention of a well performing agile service composition mechanism. In order to fulfill the discussed requirements some related work in this area is presented and the promising IT / Network standards are enlightened. Furthermore, the architectural design of the developed framework is presented. Finally the paper demonstrates a practical use case scenario that shows the dynamic integration and combination of telecommunication services with services of the Web domain.

The need to count on critical systems is growing day by day. Together with traditional domains such as medical devices, automotive, railway, aeronautical, space and telecommunications, new applications and services are coming up every day. Terms such as ubiquitous, pervasive, or autonomic computing, products under the general umbrella of smart devices or the use of large wireless sensors networks indicate a clear trend in the increase of application complexity and dependency. The dependency of daily life on computers and computer based systems is growing up at a high rate, and testing is gaining importance at the same rate.

The Carneades software system provides support for constructing, evaluating and visualizing arguments, using formal representations of facts, concepts, defeasible rules and argumentation schemes. This paper illustrates features of Carneades with a prototype legal application for analyzing open source software license compatibility issues in particular cases. The Carneades system provides a unique combination of features that make to our knowledge applications of this kind possible for the first time.

The proposed system makes video content an interactive experience and gives the viewer the opportunity to interact with objects that are part of the video and access supplemental information. On demand, multimedia content is linked with related information. Interactive, time independent navigation opens new ways to experience and share video content and TV impressions.

The domain of Autonomics and Self-Managing networks come with a number of self-* features, such as auto-discovery and autoconfiguration to name a few. In this paper, we provide a novel approach to auto-discover and auto/self-configure routers for OSPF routing in an autonomic network. We present the enablers for realizing these self-* functionalities. This includes a framework for describing the network policies, objectives and router conguration, models to be followed by a node/device implementation when self-describing the capabilities of a node and tokens for enforcing security and access control during the auto-discovery and auto-configuration processes of a node. We also present the algorithms that the various entities should employ for realizing these self-* features in their auto nomic networks.

Advanced methods and tools for GUI software development allow a rapid and iterative process of prototyping and usability testing. Unfortunately, even with the support of test automation tools, testing of GUI software requires a lot of manual work, especially when the application under test is changing rapidly. In this paper we present an improved method and tool support for automated test modeling of Java GUI applications for model-based testing (MBT) purposes. The implemented GUI Driver tool generates structural models combined with a GUI state model presenting the behavior of the GUI application that is executed and observed automatically. The GUI Driver tool is combined with an open source MBT tool to form a tool chain to support automated testing of Java GUI applications. The models generated by the GUI Driver are used to generate test sequences with MBT tool, and the test sequences are then executed with the GUI Driver to generate a test report.

A key challenge during the development of Web applications on top of multiple heterogeneous devices is to discover and get access to device-specific resources. This paper shows an architecture which enables and virtualizes the resources of user devices whereupon the device-owner controls the access to his resources with a user-configurable rule-based system. User resources are mapped to a RESTful API, so that Web applications can easily use them. In doing so, the communication protocols or API's used by the underlying resource are completely hidden from the user of the RESTful API. This increases the interoperability for a looser coupling between the parts of distributed devices, because the user can replace resources with new ones without an update of the Web applications, which use these resources. This facilitates the creation of mashups, which combine traditional Web 2.0 services with user resources. Users control the access to their resources with a user-configurable rule-system.

Meshed wireless back-haul networks are seen as an aord- able technology to bring Internet connectivity into rural and previously unconnected regions. To date, the main focus is to provide access to classical services such as the WWW or email. Access to such services requires the users to use a personal computer or a recent smart phone. Especially in developing regions, the prevailing end user device is a mobile phone. In order to connect mobile phones to an IP-based back-haul network, the network access points must provide a mobile phone air interface which is usually based on GSM or UMTS. In order to avoid dependence on a costly 3GPP infrastructure, we propose to deploy GSM or 3GPP nano cells in order to terminate the mobile phone protocols immediately at the mesh access points . Hence, the voice or data traffic can be carried over IP-based networks using open protocols such as SIP and RTP. In this paper we present a meshed wireless back-haul network with access points that have been equipped with GSM nano-cells. The voice traffic generated by the mobile phones is carried across the mesh in parallel to typical web or video trac. In this paper we evaluate the QoS handling received by the voice calls across our multi-hop wireless testbed and show that our architecture can provide the resource isolation required to oer uninterrupted VoIP services in parallel to typical Internet traffic.

Smart media is an approach, which makes video content an interactive experience. Smart media gives the viewer the opportunity to interact with objects that are part of the video and access supplemental information. On demand, multimedia content is linked with related information. Interactive, time independent navigation opens a new ways to experience video content. This approach shows how such an system could be built upon IPTV and web technology in a cross platform manner.

In order to develop and validate network protocols and architectures, proper tools are required to validate the design and to analyze the various aspects of the architecture or its components. This is typically addressed by measurements using real hardware, via simulations or emulations or by using a combination thereof. In this paper we present our development framework to implement and validate our WiBACK architecture. Our key focus is to implement the architecture on real embedded hardware. But, in order to validate protocols or to analyze possible scalability issues, larger scenarios must be considered while validating the same source code implementation. Our approach combines real hardware radio interfaces with emulated wireless interfaces in real-time and thus allows us to use well-known measurement tools to inject and analyze network traffic pattern or protocols. We will discuss our decision, describe the framework, present results and discuss experiences gained by using our NetEMU-based framework as a basis for multiple larger, i.e. EU, projects.

Iterative prototyping process in the development of graphical user interface (GUI) software is a considerable challenge for test automation. The maintenance work required for updating the test suites because of the constant changes in the GUI decreases the benefits gained from test automation and a large part of GUI software is still tested manually. In this paper we present a method and tool support for automatically creating and iteratively enhancing models of Java GUI applications, using the models for test case generation and automatically executing the generated test cases. During the first step the GUI Driver tool generates models presenting the state and behavior of the GUI application that is executed and observed automatically. Then the user can provide valid test data for the input fields of the GUI application and the GUI Driver tool uses the information to automatically enhance the generated GUI models. The enhanced models can be used for model-based testing (MBT) purposes.

Enterprise Mashups usually comprise services from different service domains that often differ vastly from each other regarding their protocols, data or programming models. This fact poses a challenge especially for non-professional developers who want to quickly create a complex service composition because they are required to know the technical details of the involved service domains in order to use them in their composite application. In this paper we describe an extensible framework that allows for enhanced interoperability of arbitrary service types by introducing a unified way to interact with disparate Web services and an intuitive model for handling heterogeneous data types within a composition. Our framework forms the basis for building extensive tool support for end-users that allows easy creation of Mashups with diversified services, collaboration with other users and distributed execution of a service composition.

This paper presents a formal model that enables us to define five distinct types of burden of proof in legal argumentation. Four standards of proof are shown to play a vital role in defining each type of burden. These standards of proof are defined in a precise way suitable for computing in argumentation studies generally, but are based on a long tradition of their use in law. The paper presents a computational model based on these notions that represents a dialectical process that goes from initial claims where issues to be decided are set, and produces a justification for arriving at a decision for one side or the other that can withstand a critical evaluation by a particular audience. The role of the audience can be played by the respondent in some instances, or by a neutral third party audience, depending on the type of dialogue. The paper builds on previous work (Gordon, Prakken and Walton, 2007; Gordon and Walton, 2009) that has applied the Carneades model to studying burden of proof in legal argumentation.

Digital Mock-Up (DMU) is a widely introduced technology to virtually investigate geometrical and mechanical product properties. Functional Digital Mock-Up (FunctionalDMU) is a combination of traditional DMU with behavioral simulation in mechatronics. Enhancing DMU with functional aspects, considerably more insight in product properties can be gained. To enable FunctionalDMU two main tasks have to be solved: a) simulators in the areas of mechanics, electronics, and software simulation have to talk to each other (coupling) and b) the simulation results have to be visualized in an interactive DMU environment. In this paper we present an independent and open approach to a FunctionalDMU framework including co-simulation. Starting with proprietary and natively given behavior and geometric models (in formats like JT), we wrap the behavior models into SysML to enable data exchange on an agreed and standardized format. The native behavior models still are executed in thecorresponding simulators. The simulators are linked to the FunctionalDMU framework using a wrapping approach. Currently we support simulators such as Matlab/Simulink, Dymola, Saber, Rhapsody, SimPack, ANSYS with our framework. During simulation a simulator coupling algorithm controls the simulation processes. A dedicated visualization environment enables the user to interact with the simulation, i.e., to send simulation stimuli, change parameters, observe the simulation run etc. This paper introduces the components of the FunctionalDMU framework and illustrates the approach with an application example.

Resource federation is a concept for sharing information and communication technology (ICT) resources beyond administrative domains. The aim is to implement some common service drawing upon the resources committed by participating organizations. This concept is currently applied in a number of projects to provide large scale experimental facilities serving Future Internet research and development. In this paper we show how federated distributed resources can be described in terms of a common information model to support distributed resource management and Future Internet experimentation.

Currently, a number of research activities worldwide focus on resource federations to enable remote resource access and the setup of large scale experiments. With the global efforts in sharing experimental facility resources across organizational boundaries, interoperability issues are becoming increasingly important. To this end, this paper describes a model that defines the necessary entities for inter resource federation scenarios. The model is then discussed by means of a concrete use case federating Panlab and PlanetLab resources. In this respect Panlab and PlanetLab are considered to be federations themselves. Our findings show that the two approaches can be matched following the general model. This allows for federating resources not only across the boundaries of administrative (organizational) domains but even across the boundaries of federations. Those federations in themselves provide collections of resources offered by several administrative domains and use different control frameworks to enable resource access and management.

In this paper we present an insight on the IPv6 features and a few examples of propositions for Extensions to IPv6 protocols, which enable autonomic network set-up and operation. The concept of autonomicity-realized through control-loop structures embedded within node/device architectures and the overall network architecture as a whole is an enabler for advanced self-manageability of network devices and the network as a whole. GANA Model for Autonomic networking introduces autonomic manager components at various levels of abstraction of functionality within device architectures and the overall network architecture, which are capable of performing autonomic management and control of their associated Managed-Entities (MEs) e.g. protocols, as well as co-operating with each other in driving the self-managing features of the Network(s). MEs are started, congured, constantly monitored and dynamically regulated by the autonomic managers towards optimal and reliable network services. This amounts to what we call autonomic setup and operation of the network. We present how to achieve this, and also present the features that IPv6 protocols exhibit, that are fundamental to designing and building self-conguring, self-optimizing and self-healing networks i.e. IPv6 based autonomic networks.

This paper proposes a common ontology for ratings, i.e. for quantitative user feedback data. Such a framework allows for semantic interoperability of data that adheres to it, which in turn enables the re-use, by making it independent from the original system. In contrast to prior attempts to establish an unambiguous vocabulary, this approach introduces two components that are in our view necessary to formally understand what a userâs rating actually means. The first is the aspect or facet, i.e. the viewing angle that was chosen to look at the rated thing. The second is the meta-model of scales following the scales of measurement that are widely used in descriptive statistics. So in plain words, we allow to formally specify how many out of how many score points something gets and with re gards to what. We follow the open world assumption of the Web Ontology Language (OWL) and design a vocabulary that is not specific to any domain. In turn, we rely on the premise that all domain specific concepts are available as semantic web resources with appropriate URIs.

In this paper we report an insight of our experiences gained in devising a methodology for validating Scenarios demonstrating autonomic/self-managing network behaviors required in Future Networks - powered by IPv6 and its evolution along the path to the Self-Managing Future Internet. Autonomic networking introduces "autonomic manager components" at various levels of abstraction of functionality within device architectures and the overall network architecture, which are capable of performing autonomic management and control of their associated Managed-Entities (MEs) e.g. protocols and mechanisms, as well as co-operating with each other in driving the self-managing features of the Network(s). MEs are started, configured, constantly monitored and dynamically regulated by the autonomic managers towards optimal and reliable network services. There are some challenges involved when designing and applying a framework for integrating and validating Scenarios demonstrating autonomic behaviors we share in this paper, and show how we have addressed them. In this paper, we present the EU funded FP7 EFIPSANS Integration and Validation Framework that we designed for demonstrating a substantial selection of essential autonomic behaviors of "autonomic managers" whose implementations are based on the principles of the GANA architectural Reference Model for Autonomic Networking and Self-Management, and on the IPv6 protocols and associated extensions proposed and developed in the frame of the EC funded FP7 EFIPSANS Project.

A major feature of the Future Internet is the federation of resources, e.g. for forming application-specific routing slices. Currently this can be done by using overlay technologies. Network virtualization techniques, as investigated in the VINI project, further advances this concept to allow the combination of partial resources on network nodes and links. While we do not yet have standard solutions for the general Internet, federation concepts are currently tested across testbeds in Europe, USA and Asia in order to combine testbed resources for experiments like FIRE and GENI. As network scientists we need such testbeds in order to validate theoretical results for large-scale highly distributed environments and under real network conditions. But since testbeds nowadays are typically customized to particular user groups and offer different capabilities some experiments require the federation of testbeds to profit from a broader set of characteristics and functions.

The challenging and ever increasing requirements of future applications demand new concepts for better control and management of network resources. The Third Generation Partnership Project (3GPP) introduced in their latest specifications the Evolved Packet Core (EPC) architecture for transparently unifying the parameters of different technologies, like the UMTS, WLAN, non-3GPP access technologies and a future Evolved Radio Access Network, called Long Term Evolution (LTE), with the use of multiple application platforms such as IP Multimedia Subsystem (IMS) and the Internet. This paper describes a testbed implementation of the Evolved Packet Core named OpenEPC which provides a reference implementation of 3GPPs EPC developed by the Fraunhofer Institute FOKUS. OpenEPC is a set of software com ponents offering advanced IP mobility schemes, policy-based QoS control, and integration with different application platforms in converging network environments. This initiative, in addition to fostering research and development, enables academic and industry researchers to rapidly realize state-of-the-art NGMN infrastructures and application testbeds.

Mobility in a wireless heterogeneous scenario in which the mobile devices are able to connect to more than one access technology available in their vicinity requires a re-consideration of the access network reselection mechanisms as to ensure seamless handovers for real deployments. This paper describes and evaluates a new proactive vertical handover optimization which enables a fast reselection, independent and in addition to the classic proactive procedures, using as a central concept that in specific conditions, the access network selection functionality located in the network should trigger a network internal proactive procedure which does not imply a high usage of the target access network resources according to the probability that a handover will be necessary in the near future as t o reduce the actual handover delay. This concept is exemplified on the 3GPP Evolved Packet Core and evaluated on a minimal prototype implementation.

Wireless Mesh Networks (WMNs) are often seen as an affordable solution to bring Internet connectivity into rural and previously unconnected regions. To date, the main focus has been to provide access to classical services such as the WWW or email which requires the users to use a personal computer or a recent smart phone. In many developing regions, however, the prevailing end user device is a mobile phone. In order to connect mobile phones to an IP-based wireless back-haul networks, the network access points must provide a mobile phone air interface, compatible with GSM or UMTS specifications. Avoiding dependence on a costly mobile operator infrastructure, we propose to deploy GSM or 3GPP nano cells in order to terminate the mobile phone protocols immediately at the local network access points. Therefore, voice or data traffic can be carried over wireless back-haul networks using open protocols such as SIP and RTP. In this paper we present a meshed wireless back-haul n etworkarchitecture whose access points have been equipped with GSM nano-cells. The voice packets generated by mobile phones are carried across the back-haul network in parallel to typical web or video traffic. We evaluate the QoS handling received by the voice calls across our multi-hop wireless testbed and show that our architecture can provide the resource isolation required to offer uninterrupted VoIP services in parallel to regular Internet traffic.

This paper presents a solution to ensure arbitrarily secure communication in a large computer network by using secret sharing and multiple parties mistrusting each other instead of relying on some trusted party or a web of trust. In contrast to other solutions that use a PKI and require asymmetric encryption, this concept can guarantee to provide secure communication even after any possible advance in cryptanalysis and even if unlimited calculation power was available to attack it. But this solution requires the computer network to have special properties. It is mainly intended to be used in the S-Network, a repository for reliable publications.

Security and model-based testing are no new topics but still under development and of high interest. In particular, their combination is still a challenge for academic work and industrial applications. Systematic and automated security testing include e.g. security functional testing, Model-based fuzzing, Risk-oriented testing and the usage of security test pattern. National and international standardization committees provide significant efforts by their working groups in the context of security testing. They cover fundamental frameworks but also detailed test specifications for concrete technologies. The range of activities is very large and includes classical concepts from security evaluation using common criteria (CCRA) but also European activities from ETSI addressing TVRA. The cont ribution gives an overview about important standardization taxonomies and activities as well as sample innovative industrial case studies, including tools and techniques that have been selected in the European ITEA project DIAMONDS.

Unter der Leitung von Herrn Dr. Both (Senatsverwaltung für Wirtschaft, Technologie und Frauen) setzen Fraunhofer FOKUS und BerlinOnline ein Portal für Berliner Daten um. Vorbilder sind dabei die englische Seite data.gov.uk und data.wien.gv.at aus Österreich. Die Kernidee der OpenData-Bewegung klingt banal, ist jedoch revolutionär: die Daten zu veröffentlichen, die den öffentlichen Institutionen ohnehin vorliegen. Dabei ist wichtig, dass die Informationen frei zugänglich und maschinenlesbar sind. Denn wenn sie von Dritten in neuen Visualierungen oder Anwendungen eingesetzt werden können, profitieren die Bürger in zweifacher Hinsicht: Erstens wird die Verwaltung transparent, Erfolge und Defizite sind für jeden einsehbar und nachvollziehbar. Zweitens können auf Grundlage der Daten Dienste erbracht werden, die ohne sie nicht möglich oder unwirtschaftlich wären. Auch und insbesondere mobile Anwendungen hängen stark von Umfang, Qualität und Aktualität der verwendeten Datenbestände ab. Als Beispiel sei hier ein mobiles Navigationssystem genannt, das Geographische Informationen, Öffnungszeiten und Mobilitätseinschränkungen von öffentlichen Institutionen zur Routenplanung berücksichtigt. Ein zentrales Verzeichnis maschinenlesbarer Daten, wie in diesem Projekt realisiert, ermöglicht es Entwicklern und Datenjournalisten vorhandene Bestände zu sichten und davon inspiriert neuartige Anwendungen zu erfinden. Entscheidend ist hier die Verschiebung der Innovation: nicht die Besitzer der Daten stellen diese für einen genau bestimmten Zweck zur Verfügung, sondern zunächst werden Informationen zweckfrei bereitgestellt, und jede Idee für deren Einsatz kann ausgeführt werden. Die Projektteilnehmer gehen dabei die ersten beiden Schritte des 5-Sterne-Prinzip von Tim Berners-Lee: Zunächst werden Datensätze zentral verzeichnet und unter möglichst offene Lizenzen gestellt. Nach Möglichkeit kommen Formate zum Einsatz, die von Maschinen verarbeitet werden können, wie XLS im Gegensatz zu PDF, DOC und HTML. Auch ist die Anzahl der Datensätze zunächst gering. Doch bis zur Vision von Berners-Lee Linked Open Data ist es noch ein weiter Weg: Danach werden alle geeigneten Datensätze in einem offenen, sematischen Standard zeitnah und qualitätsgeprüft veröffentlicht.

ETSI has provided a practical Evaluation Methodology, called the TVRA Methodology, with respect to three kinds of system: Threats, Vulnerabilities and Risks (TVR) of a system to be analyzed (thus being identified) by executing seven (basic version 2009) respectively 10 steps (advanced version 2010) according to recent ETSI TS 102 165-1 V4.2.x (2010) TISPAN specification. ETSI's Evaluation Philosophy behind the TVR-Analysis Methodology is that any security-sensitive system or module must be evaluated and tested against the security perimeter by which a module fortifies her assets. An example of fortification is the so-called Cryptographic Module according the specification of the NIST standard FIPS PUB 140-2. By this contribution we demonstrate ETSI's TVRA security evaluation approach b y applying model-based testing techniques and, where appropriate - implementations by applying TTCN-3 notation to systems being subject of vulnerabilities and threats in a hostile environment.

General considerations; Security testing activities; Model-based security testing;The DIAMONDS project; Summary This document lists approaches dedicated to testing software security.