Assessing the security of internet‐connected critical infrastructures

Abstract

Because the Internet of Things (IoT) pervasively extends to all facets of life, the “things” are increasingly extending to include the interconnection of the Internet to critical infrastructures (CIs) such as telecommunication, power grid, transportation, e‐commerce systems, and others. The objective of this paper is twofold: (i) addressing IoT from a CI protection (CIP) and connectivity viewpoint, and (ii) highlighting the need for security quantification to improve the quality of protection (QoP) of CIs. Using a financial infrastructure as an example, a CIP and trust quantification perspective is built up. To this end, we are developing a novel security metrics‐based approach to assess and thereon enhance the CIP. We focus on the communication level of the CI where IoT is playing an increasingly important role with respect to sensing and communication across CI elements. Determining the security and dependability level of the communication over the CI constitutes a basic precondition for assessing the QoP of the whole CI, which is needed for any efforts to improve this QoP. Because metrics play a central role for such quantification, this paper develops their QoP use from an IoT perspective, and a reference implementation along with experimental results is presented. Copyright © 2012 John Wiley & Sons, Ltd.

Communications in Smart Grid: A Review with Performance, Reliability and Security Consideration

“…To support smart grids and to allow fine-grain command and control, development and deployment of sophisticated secure computer and communication infrastructures, in addition to complex software modules, are needed. Determining the security and dependability level of a communication system for a critical infrastructure such as the SG constitutes a basic precondition for assessing the quality of protection of such system [30]. Additionally, the energy information that flows through the smart grid is valuable to people who could use it for ill will.…”

Quantitative Assessment of Cloud Security Level Agreements - A Case Study

“…A metric-based approach for assessing the security level of Critical Infrastructures was presented in (Ghani H., et.al., 2010). In that article the authors define appropriate security metrics to monitor whether the established security requirements are fulfilled.…”

An access control management protocol for Internet of Things devices

“…Researchers had previously highlighted the need for security for IoTbased applications. 6,7,8 Although previous research had advocated multi-layer approaches to IoT security this had been limited to mainly theoretical examinations of multi-layer security at a generic level. 9,10 The originality of the research presented in this paper concerns a multi-tiered security approach for Internet of Things (IoT) devices that incorporates physical proximity controls, geo-location checking, instruction encryption, embedded controls, and exception reporting.…”