• search hit 15 of 15
Back to Result List

Work in Progress: Security Analysis for Safety-critical Systems

  • Internet of Thing (IoT) and Smart Grid (SG) are separate technologies. The digital transformation of the energy industry and the increasing digitalization in the private sector connect these technologies. Currently in Germany, the SG is under construction. In order to use future innovative services, SG and IoT must be combined. For this, we connect the SG Infrastructure with the IoT. A potential insecure device and network (IoT) should be able to transfer data to and from a critical infrastructure (SG). Open research question in this context are the security requirements architecture SG and IoT and the mechanism for authentication and authorisation in future application (SG and IoT). Due to the increasing networking of the systems (SG and IoT) new threats and attack vectors arise. The attacks to the architecture influence the target of authenticity, security and privacy. For the security analysis we focus on two communication points: the communication between the smart meter gateway, and the IoT device. In our example, a connected charging station with cloud services is connected with a SG infrastructure. To create a really smart service, the charging station needs a connection to the SG to get the current amount of renewable energy in the grid. With this two connections, new threats emerge. A security analysis over all the connections, including the vulnerability and the ability of an attacker, is developed in this paper. The analysis shows us challenges of the communication between IoT and SG. For this, we defined technical and organizational requirements for authentication and authorization. Current authentication and authorization mechanisms are no longer sufficient for the defined requirements. We present the Role-based trust model for Safety-critical Systems for these defined requirements. The new trust model is integrated into a role-based access control model. It defines data classes, which separate the sensitive and non-sensitive information.

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Katrin Neubauer, Sebastian Fischer, Rudolf Hackenberg
ISBN:978-3-8007-4957-7
Parent Title (English):ARCS Workshop 2019; 32nd International Conference on Architecture of Computing Systems, May 2019, Copenhagen, Denmark, Workshop FORMUS³IC
Subtitle (English):Smart Grid and IoT
Publisher:VDE Verlag GmbH
Place of publication:Berlin
Editor:Carsten Trinitis, Thilo Pionteck
Document Type:conference proceeding (article)
Language:English
Year of first Publication:2019
Release Date:2022/01/28
Tag:Internet of Things (IoT); safety-critical infrastructure; security analysis;; smart grid; trust model
First Page:101
Last Page:106
Institutes:Fakultät Informatik und Mathematik
Fakultät Informatik und Mathematik / Labor Informationssicherheit und Complience (ISC)
Begutachtungsstatus:begutachtet
research focus:Digitalisierung
Licence (German):Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG