Module Elective courses 2, Computer Science (Bachelor) (ER 8)

Starting with clarifying the terminology of business process management, the lecture gives an introduction and analysis of various concepts for business process documentation and modeling. This includes a discussion of support through appropriate methodologies and software tools. Modern concepts such as process mining are also covered.

Using different tools, business processes are documented and subsequently simulated as part of a case study. Finally, aspects of process quality assurance, performance evaluation, and process cost accounting are addressed. Students are enabled to independently handle processes in a business environment, including documentation, modeling, and analysis.

Overview:

• The concept of processes and types of processes
• Methodologies in process management
• Process analysis (documenting processes)
• Process modeling (modifying processes)
• Tools for process modeling
• Process simulation
• Process mining
• Key performance indicators for evaluating business processes

The students learn

• the history of espionage and cyber espionage.
• what is meant by hybrid warfare and which techniques are techniques used by intelligence services, among others.
• how Germany's security architecture is organised.
• know the legal aspects of cyber espionage.
• know the espionage techniques used by intelligence and secret services.
• how cyber attacks are attributed to specific actors and espionage groups (APTs).
• what types of malware are used in the field of cyber espionage.
• how threats in the context of cyber espionage can be technically detected and categorised/analysed using various frameworks.
• know known cyber espionage cases from the past.
• know technical possibilities for covert communication.

Contents:

• History of espionage and secret services
• Security architecture in Germany (BND, MAD, BfV, LfV, ...)
• Legal aspects of cyber espionage (Article 10 law, BNDG, BVerfSchG, § 99 StGB, ...)
• Intelligence service espionage techniques
• Operational security
• Attribution procedures
• Critical infrastructures
• Advanced persistent threats
• Hybrid warfare
• Malware taxonomy
• Social engineering
• Stuxnet, SolarWinds, Pegasus, WannaCry, Krypto AG etc.
• Threat intelligence
• Covert communication
• Threats from artificial intelligence

Basic knowledge of ethical hacking is advantageous.

• Huber, E. (2019). Cybercrime: Eine Einführung. Springer VS.
• Oelmaier, F., Knebelsberger, U., & Naefe, A. (2023). Krisenfall Ransomware: Strategien für Wiederaufbau, Forensik und Kommunikation. Springer Fachmedien Wiesbaden.

HsKAmpus is intended to provide comprehensive functions for students of all faculties of the HsKA:

• https://www.h-ka.de/hskampus/
• https://www.youtube.com/watch?v=OcyRZrwXzVM

This primarily includes functions from the so-called. Online services based on the LSF server (events/schedule, facilities, people, student life), the QIS server (grade view) and other servers (canteen, KIT, KVV, ...). Other formats and functions are possible:

• Creation or further development for Android, iOS, Windows, Web and our Broker/Server as well as the new Ersti-Hilfe
• Provision in Google Play, Apple App Store, Microsoft Windows Store and as a web app
• Marketing on various channels (website, FaceBook, Instagram, HsKA site, advertising material, ...)
• User support
• Communication at the university (campus day).

http://www.hskampus.de

https://www.facebook.com/hskampus

https://www.instagram.com/hskampus/

First, students are given an overview of the international consulting market and learn the methodological principles of this industry as well as the main areas of work of IT consulting. Various approaches to strategy consulting, process consulting and IT system consulting are discussed, along with the respective consulting tools and methods.

Lecture material completely as pdf documents, blackboard notes for interactive development of central problem positions, instructions for interactive role play and case study material

Participation lecture, development of an interactive role play in the group, individual execution of a short case study.

Technological and topological mechanisms for securingnetworks, attack patterns and defense mechanisms againstthem. Basics of, variants of and defense against malicioussoftware. Analysis and judgement of security mechanismsand related activities. Excercies at the end of each semester provide practicalexperience in dealing with security topics.

Presentation with a lot of room for discussions andinteraction. Finalized by a hands-on session.

Students learn in a practical way about the architectural principle of microservices, which have established themselves alongside conventional, cumbersome application servers. Using a consistent example, microservices are developed with the following platform:

• Kubernetes (incl. Helm) and Docker images for virtualisation, orchestration, service registry, etc. The products Docker Desktop Community and Lens are used as administration tools.
• Spring Boot as a framework to implement microservices with REST and also GraphQL as an interface.
• Spring Data JPA to access relational database systems with Hibernate and the Jakarta Persistence standard.
• PostgreSQL, MySQL and Oracle XE are used as relational database systems with the administration tools pgadmin, phpMyAdmin and SQL Developer and are all installed and operated in Kubernetes.
• IntelliJ IDEA Ultimate is used as the IDE. For IntelliJ IDEA Ultimate - and other JetBrains products - HKA students have been able to obtain a free licence, valid for 1 year, on the initiative of the lecturer since 2014.
• Gradle with Cloud Native Buildpacks is used as a build system.

As a result, students acquire the skills to weigh up the advantages and disadvantages of microservices against monolithic architectures (WOZU).

"Spring Framework Documentation", https://docs.spring.io/spring/docs/current/spring-framework-reference

"Spring Boot Reference Guide", https://docs.spring.io/spring-boot/docs/current/reference/htmlsingle

"Spring GraphQL Reference", https://docs.spring.io/spring-graphql/docs/1.0.0-M2/reference/html

"Spring Data JPA", https://docs.spring.io/spring-data/jpa/docs/current/reference

Docker, https://www.docker.com/why-docker

Kubernetes, https://kubernetes.io/docs

This course covers the following areas.

1. Embedded software engineering

2. Programming language design and analysis.

   We will use the Go programming language to cover various aspects of programming language design and analysis.

• Introduction to Go, a C style language with garbage collection.
• Type inference
• Method overloading
  • Go interfaces
  • Connection to other overloading approaches
• Syntax analysis
• Program analysis
• Concurrency
  • Multi-threading
  • Message-passing
  • Shared memory and data races

• lectures notes and slides
• exercies
• online references

Prerequisistes:

    Softwareprojekt + Autonome Systeme

This lecture introduces various concepts and areas of sound design. Besides technical basics to:

• Sound theory and waves
• Recording technology, storage and processing
• sound synthesis

creative applications of sound design like:

• Audio processing
• music and audio production
• music theory
• use and effect of sound in applications or films

will also be thematized. The lecture teaches how professional soundscapes and moods can be created to achieve desired effects.

The lecture is accompanied by exercises in which the knowledge is practically applied. The content of the assignments ranges from editing audio tracks, sound synthesis and scoring of film scenes to the development of sound brands.