Security in Building Automation Systems

Granzer, Wolfgang; Praus, Fritz; Kästner, Wolfgang

doi:10.1109/tie.2009.2036033

Cited by 112 publications

(69 citation statements)

References 30 publications

(30 reference statements)

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Note that protocols used in BAS (e.g., KNX [13]) do not include security features, because of limited resources or legacy deployments. Therefore, passwords employed to authenticate valid commands are sent in cleartext on the network, thus allowing key sniffing [14] and the possibility of actively subverting the correct functioning of appliances. In our example, to guarantee the integrity of the server, it is necessary to ensure the correct functioning of the HVAC located in the server room.…”

Section: Adaptive Security In Cyber-physical Systemsmentioning

confidence: 99%

On the Interplay Between Cyber and Physical Spaces for Adaptive Security

Tsigkanos

Pasquale

Ghezzi

et al. 2018

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

Abstract-Ubiquitous computing is resulting in a proliferation of cyber-physical systems that host or manage valuable physical and digital assets. These assets can be harmed by malicious agents through both cyber-enabled or physically-enabled attacks, particularly ones that exploit the often ignored interplay between the cyber and physical world. The explicit representation of spatial topology is key to supporting adaptive security policies. In this paper we explore the use of Bigraphical Reactive Systems to model the topology of cyber and physical spaces and their dynamics. We utilise such models to perform speculative threat analysis through model checking to reason about the consequences of the evolution of topological configurations on the satisfaction of security requirements. We further propose an automatic planning technique to identify an adaptation strategy enacting security policies at runtime to prevent, circumvent, or mitigate possible security requirements violations. We evaluate our approach using a case study concerned with countering insider threats in a building automation system.

show abstract

Section: Adaptive Security In Cyber-physical Systemsmentioning

confidence: 99%

On the Interplay Between Cyber and Physical Spaces for Adaptive Security

Tsigkanos

Pasquale

Ghezzi

et al. 2018

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

show abstract

“…Information security in building automation systems has been studied in [4], [5], [13] and [14]. Demonstrations of working breaches have been shown in [15] with discussion over the attack motivations, methodology and possible damages as well as the difficulty of improving the situation quickly.…”

Section: Related Workmentioning

confidence: 99%

Security Assessment of a Distributed, Modbus-Based Building Automation System

Tenkanen¹,

Hämäläinen

2017

2017 IEEE International Conference on Computer and Information Technology (CIT)

View full text Add to dashboard Cite

Abstract-Building automation systems were designed in an era when security was not a concern as the systems were closed from outside access. However, multiple benefits can be found in connecting such systems over the Internet and controlling a number of buildings from a single location. Security breaches towards building automation systems are increasing and may cause direct or indirect damages to the target organization or even the residents of the building. This work presents an approach to apply a method of data flow recognition and environment analysis to building automation through a case study on a distributed building automation system utilizing the Modbus protocol at the sites and presents suggested methods for mitigating the risks.

show abstract

“…Extensive research has been conducted in the field of security in Building Automation Systems (BASes) [3,4,5,2]. In [5], some well established open BASs have been analyzed regarding their individual security properties.…”

Section: Related Workmentioning

confidence: 99%

On the security of security extensions for IP-based KNX networks

Judmayer

Krammer

Kästner

2014

2014 10th IEEE Workshop on Factory Communication Systems (WFCS 2014)

Self Cite

View full text Add to dashboard Cite

The traditional areas of application for building automation systems (BAS) like heating, ventilation and air conditioning as well as lighting and shading are more and more extended by services requiring a more robust security infrastructure like alarm-and access control systems. Additionally, building automation networks get integrated into existing IP-based networks, or even communicate directly over the Internet. Therefore, the attack surface of BAS has increased dramatically. This requires a solid security architecture and a profound knowledge of possible attack vectors. This work reviews two security extensions for KNXnet/IP regarding their individual security properties. Thereby, it is pointed out that the current version of the draft specification, called KNXnet/IP Secure, lacks some relevant details and has certain limitations concerning the provided level of security.

show abstract

Security in Building Automation Systems

Cited by 112 publications

References 30 publications

On the Interplay Between Cyber and Physical Spaces for Adaptive Security

On the Interplay Between Cyber and Physical Spaces for Adaptive Security

Security Assessment of a Distributed, Modbus-Based Building Automation System

On the security of security extensions for IP-based KNX networks

Contact Info

Product

Resources

About