No abstract

To meet future challenges of energy grids, secure communication between involved control systems is necessary. Therefore the German Federal Office for Information Security (BSI) has published security standards concerning a central communication unit for energy grids called Smart Meter Gateway (SMGW). The present security concept of the SPIDER project takes these standards into consideration but extends their level of information security by integrating elements from the Trusted Computing approach. Additionally, a tamper resistant grid is integrated with chosen hardware modules and a trustworthy boot process is applied. To continually measure the SMGW and smart meter (SM) integrity the approach Trusted Network Connect (TNC) from the Trusted Computing Group (TCG) is used. Hereby a Trusted Core Network (TCN) can be established to protect the smart grid components against IT based attacks. That is necessary, especially by the use of wireless connections between the SMGW an d smart meter components

No abstract

The deployment of new security technologies in existing network topologies requires exhaustive testing before usage to avoid down time of the production systems. Nowadays, the required testing is in many cases omitted due to the complexity of creating test cases and experimental set ups. The VISA (Virtual IT Security Architectures) project [1], funded by the German Federal Ministry of Research, aims to provide a simulation environment for semi-automated deployment of experiments based on system models. Building Virtualised Security Appliances (VSA) for enterprise networks is the most important part of the VISA project, which offers the user the possibility to build and deploy secured virtual machines and services within the model to improve it. The developed VSAs are based on mobile scenarios to establish secure connections from an Android smartphone to an enterprise IT infrastructure as well as a meta-data client/server system to establish a higher security level for e xisting infrastructures. The approach of VISA is therefore to implement such complex security systems easily within the basic environment of small and medium enterprises (SME). This paper is intended to describe the final results of the project, before the analysis phase has been started

No abstract