TY - CHAP A1 - Schuster, Franka A1 - Mehner, Stefan ED - Rudel, Steffi ED - Lechner, Ulrike T1 - Das SICIA-Verfahren: Messung & Bewertung der IT-Sicherheit – mit oder ohne ISMS T2 - IT-Sicherheit für Kritische Infrastrukturen - State of the Art : Ergebnisse des Förderschwerpunkts IT-Sicherheit für Kritische Infrastrukturen ITS/KRITIS des BMBF Y1 - 2018 SN - 978-3-943207-33-0 SN - 978-3-943207-34-7 SP - 98 EP - 99 PB - Professur für Wirtschaftsinformatik, Universität der Bundeswehr Münche CY - Neubiberg ET - 1. Auflage ER - TY - GEN A1 - Schuster, Franka A1 - Paul, Andreas A1 - Mehner, Stefan A1 - König, Hartmut A1 - Kanisch, Heiko T1 - IT-Sicherheit im Kraftwerk - Methoden zur automatisierten Sicherheitsbewertung und Anomalieerkennung in hochsensiblen Netzen T2 - 51. Kraftwerkstechnisches Kolloquium, 21. - 23. Oktober 2019, Dresden N2 - Die zunehmende Digitalisierung auch in Kraftwerken erfordert entsprechend auf diesen Bereich zugeschnittene IT-Sicherheitsverfahren und -technologien. Aktuell stellt die obligatorische Implementierung eines angemessenen Sicherheitsprozesses, wie eines Informationssicherheitsmanagementsystems (ISMS), Betreiber von Erzeugungsanlagen, Energienetzen und anderen kritischen Infrastrukturen vor eine große Herausforderung, denn es gilt, zahlreiche Anforderungen bei der Implementierung zu erfüllen, ohne dass konkrete Methoden zur Umsetzung verfügbar sind. Gleichzeitig ist derEinsatz von IT-Sicherheitstechnologien aus der Bürowelt aufgrund gänzlich anderer Eigenschaften und Anforderungen industrieller Netze kaum möglich. Zur Adressierung dieser Problematik wurden von der Brandenburgischen Technischen Universität Cottbus-Senftenberg (BTU) und der Lausitz Energie Kraftwerke AG (LEAG) innovative Verfahren zur (1) systematischen Bewertung sowie (2) Verbesserung der IT-Sicherheit in hochsensiblen Netzen konzipiert und prototypisch implementiert, die ein diesem Beitrag mit den zugehörigen Forschungsprojekten vorgestellt werden. Um eine Beeinflussung empfindlicher Kraftwerksanlagen auszuschließen, wurde für alle Methoden ein nichtintrusiver Entwicklungsansatz verfolgt, der sich durch eine passive und vom jeweiligen industriellen Prozess vollständig entkoppelte Analyse auszeichnet und sich daher für einen breiten Einsatz in Netzen mit hohen Verfügbarkeitsanforderungen eignet. Y1 - 2019 UR - https://tu-dresden.de/ing/maschinenwesen/ifvu/evt/kraftwerkstechnisches-kolloquium/51-kraftwerkstechnisches-kolloquium-2019 SN - 978-3-934409-94-1 SN - 978-3-934409-93-4 SP - 680 EP - 703 PB - SAXONIA Standortentwicklungs- und -verwaltungsgesellschaft mbH CY - Freiberg ER - TY - GEN A1 - Schweissguth, Eike A1 - Parzyjegla, Helge A1 - Danielis, Peter A1 - Mühl, Gero A1 - Timmermann, Dirk A1 - Mehner, Stefan A1 - Hohlfeld, Oliver A1 - Hellmanns, David A1 - Falk, Jonathan T1 - TSN Scheduler Benchmarking T2 - 2023 IEEE 19th International Conference on Factory Communication Systems (WFCS) N2 - Time-Sensitive Networking (TSN) disrupts realtime communication technology by making IEEE Ethernet realtime-capable. For time-triggered, hard realtime traffic, TSN provides standardized mechanisms to reserve communication paths as well as individual transmission time slots for data frames. By leveraging these means in a precomputed network schedule, TSN allows for bounded end-to-end delays and minimal jitter. Not being part of the IEEE standard, corresponding scheduling algorithms are an active field of research. Unfortunately, due to differing model assumptions, evaluation setups, and key metrics, a fair comparison of schedulers is impossible so far. In this paper, we present a systematic and reproducible approach to benchmark TSN schedulers. First, we provide a scheduler taxonomy that enables to cluster schedulers by their characteristics. Second, we analyze interactions of input parameters and scheduler results to derive a benchmarking parcour for quantitative comparisons. Finally, we use the approach to benchmark existing schedulers and show subtle interaction effects. This way, our approach enables—for the first time-comparability between schedulers, fueled by the public availability of our benchmarking scenarios. KW - Schedules KW - Systematics KW - Scheduling algorithms KW - Taxonomy KW - Process control KW - Standardization KW - Benchmark testing Y1 - 2023 UR - https://ieeexplore.ieee.org/document/10144227/authors#full-text-header SN - 978-1-6654-6432-1 SN - 978-1-6654-6433-8 U6 - https://doi.org/10.1109/WFCS57264.2023.10144227 SN - 2835-8414 SN - 2835-8511 PB - IEEE ER - TY - CHAP A1 - Mehner, Stefan A1 - Klauck, Ronny A1 - König, Hartmut ED - Makedon, Fillia ED - Betke, Margrit ED - Seif El-Nasr, Magy ED - Maglogiannis, Ilias T1 - Location-independent fall detection with smartphone T2 - The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013 N2 - Due to demographic changes in developed industrial countries and a better medical care system, the number of elderly people who still live in their home environment is rapidly growing because there they feel more comfortable and independent as in a clinical environment or in a residential care home. The elderly often live alone and receive only irregular visits. Due to impaired physical skills the probability of falls significantly increases. The detection of falls is a crucial aspect in the care of elderly. Falls are often detected very late with severe consequential damages. There are existing approaches for automatic fall detection. They usually deploy special external devices. Elderly people often do not accept these devices because they expose their frailty. In this paper, we present a location-independent fall detection method implemented as a smartphone application for an inconspicuous use in nearly every situation of the daily life. The difficulty of our approach is in the low resolution range of integrated acceleration sensors and the limited energy supply of the smartphone. As solution, we apply a modular threshold-based algorithm which uses the acceleration sensor with moderate energy consumption. Its fall detection rate is in the average of current relevant research. Y1 - 2013 SN - 978-1-4503-1973-7 U6 - https://doi.org/10.1145/2504335.2504346 PB - ACM CY - New York, NY ER - TY - GEN A1 - Mehner, Stefan A1 - Schuster, Franka A1 - Hohlfeld, Oliver T1 - Lights on Power Plant Control Networks T2 - Passive and Active Measurement : 23rd International Conference, PAM 2022, Virtual Event, March 28–30, 2022, Proceedings N2 - Industrial Control Systems (ICS) are critical systems to our society. Yet they are less studied given their closed nature and often the unavailability of data. While few studies focus on wide-area SCADA systems, e.g., power or gas distribution networks, mission critical networks that control power generation are not yet studied. To address this gap, we perform the first measurement study of Distributed Control System (DCS) by analyzing traces from all network levels from several operational power plants. We show that DCS networks feature a rather rich application mix compared to wide-area SCADA networks and that applications and sites can be fingerprinted with statistical means. While traces from operational power plants are hard to obtain, we analyze to which extent easier to access training facilities can be used as vantage points. Our study aims to shed light on traffic properties of critical industries that were not yet analyzed given the lack of data. Y1 - 2022 SN - 978-3-030-98784-8 SN - 978-3-030-98785-5 U6 - https://doi.org/10.1007/978-3-030-98785-5_21 SN - 0302-9743 SN - 1611-3349 SP - 470 EP - 484 PB - Springer ER - TY - GEN A1 - Mehner, Stefan A1 - König, Hartmut ED - Perdisci, Roberto ED - Maurice, Clémentine ED - Giacinto, Giorgio ED - Almgren, Magnus T1 - No Need to Marry to Change Your Name! Attacking Profinet IO Automation Networks Using DCP T2 - Detection of Intrusions and Malware, and Vulnerability Assessment 16th International Conference, DIMVA 2019, Gothenburg, Sweden, June 19–20, 2019, Proceedings N2 - Current developments in digitization and industry 4.0 bear new challenges for automation systems. In order to enable interoperability and vertical integration of corporate management systems, these networks have evolved from formerly proprietary solutions to the application of Ethernet-based communication and internet standards. This development is accompanied by an increase in the number of threats. Although the most critical IT protection objective for automation systems is availability, usually no security mechanisms have been integrated into automation protocols. Also Ethernet offers no protection by design for these protocols. One of the most popular real-time protocols for industrial applications is Profinet IO. In this paper, we describe a Denial-of-Service attack on Profinet IO that exploits a vulnerability in the Discovery and Basic Configuration Protocol (DCP) which interrupts the Application Relationship between an IO Controller and an IO Device, and thus prevents the system from being repaired by the operator. The attack combines port stealing with the sending of forged DCP packets and causes a system downtime, which in affected production networks probably lead to a serious financial damage and, in case of critical infrastructures, even represents a high risk for the supply of society. We demonstrate the practical feasibility of the attack using realistic hardware and scenarios and discuss its significance for also other setups. Y1 - 2019 UR - https://link.springer.com/chapter/10.1007/978-3-030-22038-9_19 SN - 978-3-030-22037-2 SN - 978-3-030-22038-9 U6 - https://doi.org/10.1007/978-3-030-22038-9_19 SP - 396 EP - 414 PB - Springer ER -