NAMar 13, 2017
Computing the stochastic $H^\infty$-normTobias Damm, Peter Benner, Jan Hauth
The stochastic $H^\infty$-norm is defined as the $L^2$-induced norm of the input-output operator of a stochastic linear system. Like the deterministic $H^\infty$-norm it is characterised by a version of the bounded real lemma, but without a frequency domain description or a Hamiltonian condition. Therefore, we base its computation on a parametrised algebraic Riccati-type matrix equation.
NAMar 13, 2017
Numerical solution of Lyapunov equations related to Markov jump linear systemsTobias Damm, Kazuhiro Sato, Axel Vierling
We suggest and compare different methods for the numerical solution of Lyapunov like equations with application to control of Markovian jump linear systems. First, we consider fixed point iterations and associated Krylov subspace formulations. Second, we reformulate the equation as an optimization problem and consider steepest descent, conjugate gradient, and a trust-region method. Numerical experiments illustrate that for large-scale problems the trust-region method is more effective than the steepest descent and the conjugate gradient methods. The fixed-point approach, however, is superior to the optimization methods. As an application we consider a networked control system, where the Markov jumps are induced by the wireless communication protocol.
13.7CRApr 30
Breaking ECDSA with Electromagnetic Side-Channel Attacks: Challenges and Practicality on Modern SmartphonesFelix Oberhansl, Marc Schink, Nisha Jacob Kabakci et al.
Smartphones handle sensitive tasks such as messaging and payment and may soon support critical electronic identification through initiatives such as the European Digital Identity (EUDI) wallet, currently under development. Yet the susceptibility of modern smartphones to physical side-channel analysis (SCA) is underexplored, with recent work limited to pre-2019 hardware. Since then, smartphone system on chip (SoC) platforms have grown more complex, with heterogeneous processor clusters, sub 10 nm nodes, and frequencies over 2 GHz, potentially complicating SCA. In this paper, we assess the feasibility of electromagnetic (EM) SCA on a Raspberry Pi 4, featuring a Broadcom BCM2711 SoC and a Fairphone 4 featuring a Snapdragon 750G 5G SoC. Using new attack methodologies tailored to modern SoCs, we recover ECDSA secrets from OpenSSL by mounting the Nonce@Once attack of Alam et al. (Euro S&P 2021) and show that the libgcrypt countermeasure does not fully mitigate it. We present case studies illustrating how hardware and software stacks impact EM SCA feasibility. Motivated by use cases such as the EUDI wallet, we survey Android cryptographic implementations and define representative threat models to assess the attack. Our findings show weaknesses in ECDSA software implementations and underscore the need for independently certified secure elements (SEs) in all smartphones.
8.2LGMar 10
Impact of Markov Decision Process Design on Sim-to-Real Reinforcement LearningTatjana Krau, Jorge Mandlmaier, Tobias Damm et al.
Reinforcement Learning (RL) has demonstrated strong potential for industrial process control, yet policies trained in simulation often suffer from a significant sim-to-real gap when deployed on physical hardware. This work systematically analyzes how core Markov Decision Process (MDP) design choices -- state composition, target inclusion, reward formulation, termination criteria, and environment dynamics models -- affect this transfer. Using a color mixing task, we evaluate different MDP configurations and mixing dynamics across simulation and real-world experiments. We validate our findings on physical hardware, demonstrating that physics-based dynamics models achieve up to 50% real-world success under strict precision constraints where simplified models fail entirely. Our results provide practical MDP design guidelines for deploying RL in industrial process control.
DSApr 8, 2015
Dual pairs of generalized Lyapunov inequalities and balanced truncation of stochastic linear systemsPeter Benner, Tobias Damm, Yolanda Rocio Rodriguez Cruz
We consider two approaches to balanced truncation of stochastic linear systems, which follow from different generalizations of the reachability Gramian of deterministic systems. Both preserve mean-square asymptotic stability, but only the second leads to a stochastic H-infinity-type bound for the approximation error of the truncated system.