Forensic readiness of smart buildings: Preconditions for subsequent cybersecurity tests

Bajramovic, Edita; Waedt, Karl; Ciriello, Antonio; Gupta, Deeksha

doi:10.1109/isc2.2016.7580754

Cited by 25 publications

(24 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Developing a knowledge management methodology to collect and organize security data is important for forensics purposes [75]. However, it is also a very important component for predicting and protecting from future security attacks.…”

Section: B Security Protection Improvementsmentioning

confidence: 99%

Data-Driven Security for Smart City Systems: Carving a Trail

et al. 2020

View full text Add to dashboard Cite

Smart cities rely heavily on collecting and using data. Smart systems are implemented and deployed to provide intelligent features that help improve efficiency and quality of life. This creates a huge repository of data representing many aspects of smart city operations. Many data-driven applications can take advantage of this data to further improve the "smartness" of a smart city. At the same time, smart city systems, being very large-scale distributed systems and highly integrated with the physical infrastructure and residents of the city, pose immense security challenges as well. So why don't we take advantage of this data to improve security measures? In this paper we propose the use of data-driven security approaches to secure smart city systems. To illustrate the significance of this approach we first identify the different challenges for securing smart city systems given the unique characteristics of these systems. Then we discuss the benefits of using data-driven security. Furthermore, we categorize the different types of security applications (features) needed to help capitalize on the data needs and benefits. We also discuss the how these categories of applications can alleviate some of the challenges. In addition, we highlight possible future research directions to incorporate effective data-driven security in smart city systems.

show abstract

Section: B Security Protection Improvementsmentioning

confidence: 99%

Data-Driven Security for Smart City Systems: Carving a Trail

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Although integrated security systems are transformational to Smart Buildings, myriad of sensors are used to increase automation without appropriate security testing in favour of ease of use [18]. For example, in 2016 guests in an Austrian hotel were locked out of their room subject to a ransom payment [19] whilst in Finland, a DDoS targeted the heating system [20].…”

Section: A Inherent and Emerging Threats Facing Cps In The Workmentioning

confidence: 99%

Federated Blockchain-Based Tracking and Liability Attribution Framework for Employees and Cyber-Physical Objects in a Smart Workplace

Ahmadi-Assalemi

Al-Khateeb

Epiphaniou

et al. 2019

2019 IEEE 12th International Conference on Global Security, Safety and Sustainability (ICGS3)

View full text Add to dashboard Cite

The systematic integration of the Internet of Things (IoT) and Cyber-Physical Systems (CPS) into the supply chain to increase operational efficiency and quality has also introduced new complexities to the threat landscape. The myriad of sensors could increase data collection capabilities for businesses to facilitate process automation aided by Artificial Intelligence (AI) but without adopting an appropriate Securityby-Design framework, threat detection and response are destined to fail. The emerging concept of Smart Workplace incorporates many CPS (e.g. Robots and Drones) to execute tasks alongside Employees both of which can be exploited as Insider Threats. We introduce and discuss forensic-readiness, liability attribution and the ability to track moving Smart SPS Objects to support modern Digital Forensics and Incident Response (DFIR) within a defence-in-depth strategy. We present a framework to facilitate the tracking of object behaviour within Smart Controlled Business Environments (SCBE) to support resilience by enabling proactive insider threat detection. Several components of the framework were piloted in a company to discuss a real-life case study and demonstrate anomaly detection and the emerging of behavioural patterns according to objects' movement with relation to their job role, workspace position and nearest entry or exit. The empirical data was collected from a Bluetooth-based Proximity Monitoring Solution. Furthermore, a key strength of the framework is a federated Blockchain (BC) model to achieve forensic-readiness by establishing a digital Chain-of-Custody (CoC) and a collaborative environment for CPS to qualify as Digital Witnesses (DW) to support post-incident investigations.

show abstract

“…The ability to identify and track security incidents considerably depends on the effort invested in preparatory forensic readiness efforts [20][21] [22].…”

Section: Reporting Of Security Incidentsmentioning

confidence: 99%

Security culture for nuclear facilities

Gupta¹,

Bajramovic²

2017

AIP Conference Proceedings

Self Cite

View full text Add to dashboard Cite

Abstract. Natural radioactive elements are part of our environment and radioactivity is a natural phenomenon. There are numerous beneficial applications of radioactive elements (radioisotopes) and radiation, starting from power generation to usages in medical, industrial and agriculture applications. But the risk of radiation exposure is always attached to operational workers, the public and the environment. Hence, this risk has to be assessed and controlled. The main goal of safety and security measures is to protect human life, health, and the environment. Currently, nuclear security considerations became essential along with nuclear safety as nuclear facilities are facing rapidly increase in cybersecurity risks. Therefore, prevention and adequate protection of nuclear facilities from cyberattacks is the major task. Historically, nuclear safety is well defined by IAEA guidelines while nuclear security is just gradually being addressed by some new guidance, especially the IAEA Nuclear Security Series (NSS), IEC 62645 and some national regulations. At the overall level, IAEA NSS 7 describes nuclear security as deterrence and detection of, and response to, theft, sabotage, unauthorized access, illegal transfer or other malicious acts involving nuclear, other radioactive substances and their associated facilities. Nuclear security should be included throughout nuclear facilities. Proper implementation of a nuclear security culture leads to staff vigilance and a high level of security posture. Nuclear security also depends on policy makers, regulators, managers, individual employees and members of public. Therefore, proper education and security awareness are essential in keeping nuclear facilities safe and secure..

show abstract

Forensic readiness of smart buildings: Preconditions for subsequent cybersecurity tests

Cited by 25 publications

References 3 publications

Data-Driven Security for Smart City Systems: Carving a Trail

Data-Driven Security for Smart City Systems: Carving a Trail

Federated Blockchain-Based Tracking and Liability Attribution Framework for Employees and Cyber-Physical Objects in a Smart Workplace

Security culture for nuclear facilities

Contact Info

Product

Resources

About