Fraune, Bastian
Lade...
5 Ergebnisse
Gerade angezeigt 1 - 5 von 5
- Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, ANALYSE — Learning to attack cyber–physical energy systems with intelligent agents(Elsevier Science, 2023); ; ; ; The ongoing penetration of energy systems with information and communications technology (ICT) and the introduction of new markets increase the potential for malicious or profit-driven attacks that endanger system stability. To ensure security-of-supply, it is necessary to analyze such attacks and their underlying vulnerabilities, to develop countermeasures and improve system design. We propose ANALYSE, a machine-learning-based software suite to let learning agents autonomously find attacks in cyber–physical energy systems, consisting of the power system, ICT, and energy markets. ANALYSE is a modular, configurable, and self-documenting framework designed to find yet unknown attack types and to reproduce many known attack strategies in cyber–physical energy systems.Wissenschaftlicher ArtikelHeft:2354 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Modern ICT Network Simulator for Co-Simulations in Smart Grid Applications(Academic Conferences International Limited, 2022); ; ; The current transformation of power grids towards smart grids and the associated increase in the use of ICT technologies lead to an increased attack surface via the communication network. Holistic, multi-domain co-simulations can be used to evaluate the possibilities for, and impacts of, ICT-based attacks on these grids. This paper presents an ICT network simulator that can be used in co-simulation environments. It outlines requirements for this kind of simulation tool and provides insight into how these requirements can be met. In addition, co-simulation use cases for the simulator arising from different research projects are laid out. Finally, the simulator’s functionalities in co-simulation environments are verified with a practical application example. This application shows that our simulator (rettij) is able to exchange data with other simulators through a co-simulation interface. It also demonstrates our simulators capabilities to perform real-world ICT attacks on realistic network topologies.Wissenschaftlicher Artikel123 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Automated monitoring of operational technology security and compliance for power gridsIT security standards can increase trust in a system or component if compliance to the standard can be proven to third parties. Those standards usually specify requirements for security features, which then lead to a certain configuration of an industrial control system. Continuous monitoring of IT security configurations on intelligent electronic devices is difficult because there is no standardised way to query the security configurations of those devices. The objective of this PhD project is to enable automatic querying of security settings from industrial control system in the use case of the power grid infrastructure for remote monitoring. This opens up the possibility of automatically comparing the actual security state on the device against the defined IT security standard configurations. In such cases, industrial control systems that do not comply with defined security standards can thus be identified directly by monitoring systems in the control centre.Wissenschaftlicher Artikel84 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Analyzing Power Grid, ICT, and Market Without Domain Knowledge Using Distributed Artificial IntelligenceModern cyber-physical systems (CPS), such as our energy infrastructure, are becoming increasingly complex: An ever-higher share of Artificial Intelligence (AI)-based technologies use the Information and Communication Technology (ICT) facet of energy systems for operation optimization, cost efficiency, and to reach CO2 goals worldwide. At the same time, markets with increased flexibility and ever shorter trade horizons enable the multi-stakeholder situation that is emerging in this setting. These systems still form critical infrastructures that need to perform with highest reliability. However, today’s CPS are becoming too complex to be analyzed in the traditional monolithic approach, where each domain, e.g., power grid and ICT as well as the energy market, are considered as separate entities while ignoring dependencies and side-effects. To achieve an overall analysis, we introduce the concept for an application of distributed artificial intelligence as a self-adaptive analysis tool that is able to analyze the dependencies between domains in CPS by attacking them. It eschews preconfigured domain knowledge, instead exploring the CPS domains for emergent risk situations and exploitable loopholes in codices, with a focus on rational market actors that exploit the system while still following the market rules.Bericht109 - Some of the metrics are blocked by yourconsent settings
Item-typ:Veröffentlichung, Integration of Remote Attestation into IEC 61850The continuing integration of decentralized energy generators requires a more flexible power grid, which necessitates the use of stronger automation and more communication technologies between the control systems. This is accompanied by an increase in the attack surface of the power grid, such as attacks on firmware of intelligent electronic devices. This publication aims to secure intelligent electronic devices by monitoring their firmware. To achieve this aim, Trusted Computing technology such as remote attestation are integrated into the power grid domain specific communication standards to improve security in the current power grid architecture. The outcome is an appropriate conceptual information model for the IEC 61850 standard in order to be qualified to transfer remote attestation information and exchange them with the control centre. Such a solution is perfectly designed for automatic remote monitoring.Wissenschaftlicher Artikel73