Key set management in networked building automation systems using multiple key servers

Denial-of-service in automation systems

“…This includes a detailed design of the IDS and the communication protocol that manages an isolation and redundant path activation. Furthermore, the DoS prevention and detection mechanisms shall be evaluated with the help of a prototype implementation and a simulation framework of a secure building automation system [5]. Finally, the automatic generation of tree graphs out of the engineering tools will be assessed.…”

“…A protection against interception (e.g., network sniffing), modification (e.g., man-in-the-middle attacks), and fabrication (e.g., replay attacks) can be achieved by guaranteeing integrity, freshness, and confidentiality [5] of the transmitted control data. To achieve these security objectives, a secured channel has to be provided.…”

“…This secured channel can be established by using physical and/or cryptographic techniques. Possible solutions to secure the transmitted control data in automation systems can be found in [8,5].…”

Security in Building Automation Systems

“…Moreover, the use of a single key server introduces a single point of failure. Therefore, a scheme based on multiple key servers is desirable [22]. To support all kinds of applications, the use of different communication models shall be possible.…”

Communication services for secure building automation networks

“…A communication group is denoted as G x where ID Gx holds the unique ID within the network. Based on these three different types of communication relationship, all six communication types typically found in building automation [7] can be supported by the SAL: secure point-to-point control data communication and device management are performed within sessions using secure unicast, secure loose group communication and network management are handled by network relationships using secure broadcast, and secure strict group communication and group management are provided by communication groups using secure multicast.…”