The Experts below are selected from a list of 33936 Experts worldwide ranked by ideXlab platform
Steffen Wendzel - One of the best experts on this subject based on the ideXlab platform.
-
HCI (22) - Visualizing BACnet Data to Facilitate Humans in Building-Security Decision-Making
Lecture Notes in Computer Science, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems BAS are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol BACnet which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile Android based application for displaying application data and as tools to analyze the communication flows using directed graphs.
-
securing bacnet s pitfalls
Information Security Conference, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
Securing BACnet’s Pitfalls
2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
SEC - Securing BACnet’s Pitfalls
ICT Systems Security and Privacy Protection, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
visualizing bacnet data to facilitate humans in building security decision making
arXiv: Cryptography and Security, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems (BAS) are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol (BACnet) which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile (Android) based application for displaying application data and as tools to analyze the communication flows using directed graphs.
Jaspreet Kaur - One of the best experts on this subject based on the ideXlab platform.
-
HCI (22) - Visualizing BACnet Data to Facilitate Humans in Building-Security Decision-Making
Lecture Notes in Computer Science, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems BAS are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol BACnet which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile Android based application for displaying application data and as tools to analyze the communication flows using directed graphs.
-
Securing BACnet’s Pitfalls
2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
securing bacnet s pitfalls
Information Security Conference, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
SEC - Securing BACnet’s Pitfalls
ICT Systems Security and Privacy Protection, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
visualizing bacnet data to facilitate humans in building security decision making
arXiv: Cryptography and Security, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems (BAS) are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol (BACnet) which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile (Android) based application for displaying application data and as tools to analyze the communication flows using directed graphs.
Jernej Tonejc - One of the best experts on this subject based on the ideXlab platform.
-
HCI (22) - Visualizing BACnet Data to Facilitate Humans in Building-Security Decision-Making
Lecture Notes in Computer Science, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems BAS are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol BACnet which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile Android based application for displaying application data and as tools to analyze the communication flows using directed graphs.
-
Securing BACnet’s Pitfalls
2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
securing bacnet s pitfalls
Information Security Conference, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
SEC - Securing BACnet’s Pitfalls
ICT Systems Security and Privacy Protection, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
visualizing bacnet data to facilitate humans in building security decision making
arXiv: Cryptography and Security, 2015Co-Authors: Jernej Tonejc, Jaspreet Kaur, Adrian Karsten, Steffen WendzelAbstract:Building automation systems (BAS) are interlinked networks of hardware and software, which monitor and control events in the buildings. One of the data communication Protocols used in BAS is Building Automation and Control Networking Protocol (BACnet) which is an internationally adopted ISO standard for the communication between BAS devices. Although BAS focus on providing safety for inhabitants, decreasing the energy consumption of buildings and reducing their operational cost, their security suffers due to the inherent complexity of the modern day systems. The issues such as monitoring of BAS effectively present a significant challenge, i.e., BAS operators generally possess only partial situation awareness. Especially in large and inter-connected buildings, the operators face the challenge of spotting meaningful incidents within large amounts of simultaneously occurring events, causing the anomalies in the BAS network to go unobserved. In this paper, we present the techniques to analyze and visualize the data for several events from BAS devices in a way that determines the potential importance of such unusual events and helps with the building-security decision making. We implemented these techniques as a mobile (Android) based application for displaying application data and as tools to analyze the communication flows using directed graphs.
Michael Meier - One of the best experts on this subject based on the ideXlab platform.
-
Securing BACnet’s Pitfalls
2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
securing bacnet s pitfalls
Information Security Conference, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
-
SEC - Securing BACnet’s Pitfalls
ICT Systems Security and Privacy Protection, 2015Co-Authors: Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael MeierAbstract:Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication Protocols and devices. The building automation and control Networking Protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
Horst Hellbruck - One of the best experts on this subject based on the ideXlab platform.
-
ccn wsn a lightweight flexible content centric Networking Protocol for wireless sensor networks
International Conference on Intelligent Sensors Sensor Networks and Information Processing, 2013Co-Authors: Mohamed Ahmed Hail, Horst HellbruckAbstract:In future Internet research, content centric Networking (CCN) is a new promising approach. CCNx has been introduced recently as an open source Protocol suite for CCN and implementation base for practical research. In wireless sensor networks (WSNs) research, data or content centric approaches like in-network processing and data aggregation are important. While the principle of CCN is a suitable approach in WSNs, the CCNx Protocol suite designed for PCs is not applicable to resource-constrained WSNs. Therefore, we design, implement and evaluate a lightweight variant of a CCN Protocol specifically for WSNs called CCN-WSN as a lightweight alternative to implementing IP for sensor networks. Key concepts of CCNx Protocol are integrated but a variety of aspects are revised to meet the memory and computational constraints of sensor nodes and communication patterns in WSNs. E.g. the message format is simplified and some fields are omitted completely. Instead, we propose a flexible naming strategy which extends the functionality of content names to add small amount of data in interest messages. For performance evaluation a challenging time-synchronization application was implemented with CCN-WSN to demonstrate the flexibility of the approach and a comparison with a reference Protocol for data dissemination called AutoCast is presented.