Now showing 1 - 10 of 21
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    A Security Cost Modelling Framework for Cyber-Physical Systems
    (ACM, 2022-05)
    ;
    ;
    Gouglidis, Antonios 
    ;
    Mauthe, Andreas 
    ;
    Cyber-Physical Systems (CPS) are formed through interconnected components capable of computation, communication, sensing and changing the physical world. The development of these systems poses a significant challenge since they have to be designed in a way to ensure cyber-security without impacting their performance. This article presents the Security Cost Modelling Framework (SCMF) and shows supported by an experimental study how it can be used to measure, normalise and aggregate the overall performance of a CPS. Unlike previous studies, our approach uses different metrics to measure the overall performance of a CPS and provides a methodology for normalising the measurement results of different units to a common Cost Unit. Moreover, we show how the Security Costs can be extracted from the overall performance measurements which allows to quantify the overhead imposed by performing security-related tasks. Furthermore, we describe the architecture of our experimental testbed and demonstrate the applicability of SCMF in an experimental study. Our results show that measuring the overall performance and extracting the security costs using SCMF can serve as basis to redesign interactions to achieve the same overall goal at less costs.
      2Scopus© Citations 3  178
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    Towards a Cloud-Based Smart Office Solution for Shared Workplace Individualization
    (SCITEPRESS - Science and Technology Publications, 2024)
    Hasiwar, Dominik
    ;
    Gruber, Andreas
    ;
    Dragschitz, Christian
    ;
      8
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
      5
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    A Cost-Benefit Analysis of Additive Manufacturing as a Service
    (SCITEPRESS - Science and Technology Publications, 2025)
    ;
    Buhmann, Tobias
    ;
    List, Burkhard
    Scopus© Citations 2  2
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    Towards a Security Cost Model for Cyber-Physical Systems
    (IEEE, 2019-01)
    ;
    Mauthe, Andreas 
    ;
    In times of Industry 4.0 and cyber-physical systems (CPS) providing security is one of the biggest challenges. A cyber attack launched at a CPS poses a huge threat, since a security incident may affect both the cyber and the physical world. Since CPS are very flexible systems, which are capable of adapting to environmental changes, it is important to keep an overview of the resulting costs of providing security. However, research regarding CPS currently focuses more on engineering secure systems and does not satisfactorily provide approaches for evaluating the resulting costs. This paper presents an interaction-based model for evaluating security costs in a CPS. Furthermore, the paper demonstrates in a use case driven study, how this approach could be used to model the resulting costs for guaranteeing security.
      1Scopus© Citations 5  474
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    Towards a Security Baseline for IaaS-Cloud Back-Ends in Industry 4.0
    (IEEE (UK), 2017-12)
    ;
    ;
    ;
    ;
    The popularity of cloud based Infrastructure-as-a- Service (IaaS) solutions is becoming increasingly popular. However, since IaaS providers and customers interact in a flexible and scalable environment, security remains a serious concern. To handle such security issues, defining a set of security parameters in the service level agreements (SLA) between both, IaaS provider and customer, is of utmost importance. In this paper, the European Network and Information Security Agency (ENISA) guidelines are evaluated to extract a set of security parameters for IaaS. Furthermore, the level of applicability and implementation of this set is used to assess popular industrial and open-source IaaS cloud platforms, respectively VMware and OpenStack. Both platforms provide private clouds, used as backend infrastructures in Industry 4.0 application scenarios. The results serve as initial work to identify a security baseline and research needs for creating secure cloud environments for Industry 4.0.
    Scopus© Citations 7  171
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    Automated and Secure Onboarding for System of Systems
    (IEEE, 2021-08-03)
    ;
    ;
    ;
    ;
    Péceli, Bálint 
    The Internet of Things (IoT) is rapidly changing the number of connected devices and the way they interact with each other. This increases the need for an automated and secure onboarding procedure for IoT devices, systems and services. Device manufacturers are entering the market with internet connected devices, ranging from small sensors to production devices, which are subject of security threats specific to IoT. The onboarding procedure is required to introduce a new device in a System of Systems (SoS) without compromising the already onboarded devices and the underlying infrastructure. Onboarding is the process of providing access to the network and registering the components for the first time in an IoT/SoS framework, thus creating a chain of trust from the hardware device to its hosted software systems and their provided services. The large number and diversity of device hardware, software systems and running services raises the challenge to establish a generic onboarding procedure. In this paper, we present an automated and secure onboarding procedure for SoS. We have implemented the onboarding procedure in the Eclipse Arrowhead framework. However, it can be easily adapted for other IoT/SoS frameworks that are based on Service-oriented Architecture (SoA) principles. The automated onboarding procedure ensures a secure and trusted communication between the new IoT devices and the Eclipse Arrowhead framework. We show its application in a smart charging use case and perform a security assessment.
      1Scopus© Citations 25  155
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    Towards a Security-Aware Benchmarking Framework for Function-as-a-Service
    (SCITEPRESS, 2018)
    ;
    ;
    In a world, where complexity increases on a daily basis the Function-as-a-Service (FaaS) cloud model seams to take countermeasures. In comparison to other cloud models, the fast evolving FaaS increasingly abstracts the underlying infrastructure and refocuses on the application logic. This trend brings huge benefits in application and performance, but comes with difficulties for benchmarking cloud applications. In this position paper, we present an initial investigation of benchmarking FaaS in close to reality production systems. Furthermore, we outline the architectural design including the necessary benchmarking metrics. We also discuss the possibility of using the proposed framework for identifying security vulnerabilities.
      1Scopus© Citations 3  235
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    On the Cost of Cyber Security in Smart Business
    (IEEE (UK) - 12th International Conference for Internet Technology and Secured Transactions (ICITST-2017), 2017-12)
    ;
    ;
    ;
    In a world, as complex and constantly changing as ours cloud computing is a driving force for shaping the IT landscape and changing the way we do business. Current trends show a world of people, things and services all digitally interconnected via the Internet of Things (IoT). This applies in particular to an industrial environment where smart devices and intelligent services pave the way for smart factories and smart businesses. This paper investigates in a use case driven study the potential of making use of smart devices to enable direct, automated and voice-controlled smart businesses. Furthermore, the paper presents an initial investigation on methodologies for measuring costs of cyber security controls for cloud services.
    Scopus© Citations 5  149
  • Thumbnail Image
    Some of the metrics are blocked by your 
    Item type:Publication,
    A Security Evaluation Framework for Software-Defined Network Architectures in Data Center Environments
    (2023)
    ;
    Thiede, Dominik
    ;
    Race, Nicholas
    ;
    Broadbent, Matthew
    ;
    Gouglidis, Antonios
    Data Center (DC) network requirements. Virtualisation is one of the key drivers of that transformation and enables a massive deployment of computing resources, which exhausts server capacity limits. Furthermore, the increased network endpoints need to be handled dynamically and centrally to facilitate cloud computing functionalities. Traditional DCs barely satisfy those demands because of their inherent limitations based on the network topology. Software-Defined Networks (SDN) promise to meet the increasing network requirements for cloud applications by decoupling control functionalities from data forwarding. Although SDN solutions add more flexibility to DC networks, they also pose new vulnerabilities with a high impact due to the centralised architecture. In this paper we propose an evaluation framework for assessing the security level of SDN architectures in four different stages. Furthermore, we show in an experimental study, how the framework can be used for mapping SDN threats with associated vulnerabilities and necessary mitigations in conjunction with risk and impact classification. The proposed framework helps administrators to evaluate the network security level, to apply countermeasures for identified SDN threats, and to meet the networks security requirements.
      2Scopus© Citations 3  24