<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>2512</id>
    <completedYear/>
    <publishedYear>2019</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>101</pageFirst>
    <pageLast>106</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject</type>
    <publisherName>VDE Verlag GmbH</publisherName>
    <publisherPlace>Berlin</publisherPlace>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2022-01-22</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Work in Progress: Security Analysis for Safety-critical Systems</title>
    <abstract language="eng">Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. Currently in Germany, the SG is under construction. In order to use future innovative services, SG and IoT must be combined. For this, we connect the SG Infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). Open research question in this context are the security requirements architecture SG and IoT and the mechanism for authentication and authorisation in future application (SG and IoT). Due to the increasing networking of the systems (SG and IoT) new threats and attack vectors arise. The attacks to the architecture influence the target of authenticity, security and privacy. For the security analysis we focus on two communication points: the communication between the smart meter gateway, and the IoT device. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. With this two connections, new threats emerge. A security analysis over all the connections, including the vulnerability and the ability of an attacker, is developed in this paper. The analysis shows us challenges of the communication between IoT and SG. For this, we defined technical and organizational requirements for authentication and authorization. Current authentication and authorization mechanisms are no longer sufficient for the defined requirements. We present the Role-based trust model for Safety-critical Systems for these defined requirements. The new trust model is integrated into a role-based access control model. It defines data classes, which separate the sensitive and non-sensitive information.</abstract>
    <parentTitle language="eng">ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC</parentTitle>
    <subTitle language="eng">Smart Grid and  IoT</subTitle>
    <identifier type="isbn">978-3-8007-4957-7</identifier>
    <identifier type="old">https://www.vde-verlag.de/proceedings-en/564957014.html</identifier>
    <enrichment key="opus.source">publish</enrichment>
    <enrichment key="BegutachtungStatus">begutachtet</enrichment>
    <licence>Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG</licence>
    <author>Katrin Neubauer</author>
    <author>Sebastian Fischer</author>
    <author>Rudolf Hackenberg</author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>smart grid</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Internet of Things (IoT)</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>security analysis;</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>safety-critical infrastructure</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>trust model</value>
    </subject>
    <collection role="institutes" number="FakIM">Fakultät Informatik und Mathematik</collection>
    <collection role="othforschungsschwerpunkt" number="16311">Digitalisierung</collection>
    <collection role="institutes" number="">Labor Informationssicherheit und Complience (ISC)</collection>
  </doc>
  <doc>
    <id>2511</id>
    <completedYear/>
    <publishedYear>2019</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>82</pageFirst>
    <pageLast>87</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject</type>
    <publisherName>IARIA</publisherName>
    <publisherPlace/>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>0</belongsToBibliography>
    <completedDate>2022-01-22</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Risk Analysis of the Cloud Infrastructure of Smart Grid and Internet of Things</title>
    <abstract language="eng">Cloud Computing (CC), Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. At the moment, CC is used as a service provider for IoT. Currently in Germany, the SG is under construction and a cloud connection to the infrastructure has not been implemented yet. To build the SG cloud, the new laws for privacy must be implemented and therefore it’s important to know which data can be stored and distributed over a cloud. In order to be able to use future&#13;
innovative services, SG and IoT must be combined. For this, in&#13;
the next step we connect the SG infrastructure with the IoT.&#13;
A potential insecure device and network (IoT) should be able&#13;
to transfer data to and from a critical infrastructure (SG). In&#13;
detail, we focus on two different connections: the communication&#13;
between the smart meter switching box and the IoT device and the data transferred between the IoT and SG cloud. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. Private data, such as name, address and payment details, should not be transferred to the IoT cloud. With these two connections, new threads emerge. In this case, availability, confidentiality and integrity must be ensured. A risk analysis over all the cloud connections, including the vulnerability and the ability of an attacker and the resulting risk are developed in this paper.</abstract>
    <parentTitle language="eng">The Tenth International Conference on Cloud Computing, GRIDs, and Virtualization, (CLOUD COMPUTING 2019), 10th Mai 2019, Venice, Italy</parentTitle>
    <identifier type="url">https://www.thinkmind.org/articles/cloud_computing_2019_6_20_28013.pdf</identifier>
    <identifier type="isbn">978-1-61208-703-0</identifier>
    <identifier type="issn">2308-4294</identifier>
    <enrichment key="opus.source">publish</enrichment>
    <licence>Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG</licence>
    <author>Katrin Neubauer</author>
    <author>Sebastian Fischer</author>
    <author>Rudolf Hackenberg</author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Smart Grid</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>Internet of Things</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>security analysis</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>cloud computing</value>
    </subject>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>safety-critical infrastructure</value>
    </subject>
    <collection role="institutes" number="FakIM">Fakultät Informatik und Mathematik</collection>
    <collection role="othforschungsschwerpunkt" number="16311">Digitalisierung</collection>
    <collection role="institutes" number="">Labor Informationssicherheit und Complience (ISC)</collection>
  </doc>
</export-example>
