Design and implementation of a mediation system enabling secure communication among Critical Infrastructures

Castrucci, Marco; Neri, Alessandro; Caldeira, Filipe; Aubert, Jocelyn; Khadraoui, Djamel; Aubigny, Matthieu; Harpes, Carlo; Simões, Paulo; Suraci, Vincenzo; Capodieci, Paolo

doi:10.1016/j.ijcip.2012.04.001

Cited by 15 publications

(8 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The security services provided by the SMGW include the authentication, authorisation, confidentiality, and integrity for publication and subscription of services in intraSMGW and interSMGW domains. The work in Mahmoud et al (2015), which is based on a previous studies (Castrucci et al, 2012) similarly proposes a gateway that provides an abstraction to allow information mediation. Its functionality is further extended to enable heterogeneous Critical Infrastructures (CIs) to predict service failures.…”

Section: Iot Gateway or An Edgementioning

confidence: 99%

Risk and threat mitigation techniques in internet of things (IoT) environments: a survey

Salayma

2024

Front. Internet Things

View full text Add to dashboard Cite

Security in the Internet of Things (IoT) remains a predominant area of concern. Although several other surveys have been published on this topic in recent years, the broad spectrum that this area aims to cover, the rapid developments and the variety of concerns make it impossible to cover the topic adequately. This survey updates the state of the art covered in previous surveys and focuses on defences and mitigations against threats rather than on the threats alone, an area that is less extensively covered by other surveys. This survey has collated current research considering the dynamicity of the IoT environment, a topic missed in other surveys and warrants particular attention. To consider the IoT mobility, a life-cycle approach is adopted to the study of dynamic and mobile IoT environments and means of deploying defences against malicious actors aiming to compromise an IoT network and to evolve their attack laterally within it and from it. This survey takes a more comprehensive and detailed step by analysing a broad variety of methods for accomplishing each of the mitigation steps, presenting these uniquely by introducing a “defence-in-depth” approach that could significantly slow down the progress of an attack in the dynamic IoT environment. This survey sheds a light on leveraging redundancy as an inherent nature of multi-sensor IoT applications, to improve integrity and recovery. This study highlights the challenges of each mitigation step, emphasises novel perspectives, and reconnects the discussed mitigation steps to the ground principles they seek to implement.

show abstract

Section: Iot Gateway or An Edgementioning

confidence: 99%

Risk and threat mitigation techniques in internet of things (IoT) environments: a survey

Salayma

2024

Front. Internet Things

View full text Add to dashboard Cite

show abstract

“…the capability of a computer to adapt to the changes in size or volume. Castrucci et al (2012) proposed another framework called Secure Mediation Gateway (SMGW) for critical infrastructures. This approach is an abstraction of IoT as it can work in all infrastructures.…”

Section: Ics 272mentioning

confidence: 99%

A survey on the Internet of Things security

Yousuf

Mir

2019

ICS

View full text Add to dashboard Cite

Purpose Internet of Things (IoT) is a challenging and promising system concept and requires new types of architectures and protocols compared to traditional networks. Security is an extremely critical issue for IoT that needs to be addressed efficiently. Heterogeneity being an inherent characteristic of IoT gives rise to many security issues that need to be addressed from the perspective of new architectures such as software defined networking, cryptographic algorithms, federated cloud and edge computing. Design/methodology/approach The paper analyzes the IoT security from three perspectives: three-layer security architecture, security issues at each layer and security countermeasures. The paper reviews the current state of the art, protocols and technologies used at each layer of security architecture. The paper focuses on various types of attacks that occur at each layer and provides the various approaches used to countermeasure such type of attacks. Findings The data exchanged between the different devices or applications in the IoT environment are quite sensitive; thus, the security aspect plays a key role and needs to be addressed efficiently. This indicates the urgent needs of developing general security policy and standards for IoT products. The efficient security architecture needs to be imposed but not at the cost of efficiency and scalability. The paper provides empirical insights about how the different security threats at each layer can be mitigated. Originality/value The paper fulfills the need of having an extensive and elaborated survey in the field of IoT security, along with suggesting the countermeasures to mitigate the threats occurring at each level of IoT protocol stack.

show abstract

“…Drawing on existing emergency management ontologies, Li et al introduce a novel ontology that considers additional information such as the types of hazards and emergencies, as well as meteorological factors. Castrucci et al [6] have developed a mediation system that enables secure communications between critical infrastructures, implements fault mitigation strategies and supports information discovery while overcoming information exchange and data heterogeneity problems.…”

Section: Information Sharingmentioning

confidence: 99%

Exploiting Web Ontologies for Automated Critical Infrastructure Data Retrieval

Galbusera

Giannopoulos

2017

Critical Infrastructure Protection XI

View full text Add to dashboard Cite

Semantic web technologies play a significant role in many open data initiatives, including geo-mapping projects and platforms. At the same time, semantic principles are also promoted as a key enabling factor for multi-domain analyses of critical infrastructures as well as for improved emergency response. This chapter reviews the recent literature on ontology-based analysis and management of critical infrastructures, and proposes the use of ontology processing techniques to bridge the gap between infrastructure knowledge representation and available (often general-purpose) open data sources. In particular, it discusses an approach for matching a given critical infrastructure ontology to an ontology built on OpenStreetMap (OSM) tags that enables structured access to the associated geographical dataset.

show abstract

Design and implementation of a mediation system enabling secure communication among Critical Infrastructures

Cited by 15 publications

References 13 publications

Risk and threat mitigation techniques in internet of things (IoT) environments: a survey

Risk and threat mitigation techniques in internet of things (IoT) environments: a survey

A survey on the Internet of Things security

Exploiting Web Ontologies for Automated Critical Infrastructure Data Retrieval

Contact Info

Product

Resources

About