Supporting the integration of new security features in embedded control devices through the digitalization of production

Tobias Rauter, Johannes Iber, Michael Krisper, Christian Kreiner

Research output: Chapter in Book/Report/Conference proceedingConference contributionResearchpeer-review

Abstract

Security is a vital property of Industrial Control Systems (ICS), especially in the context of critical infrastructure. In this work, we focus on distributed control devices for hydro-electric power plants. Much work has been done for specific lifecylce phases of distributed control devices such as development or operational phase. Our aim here is to consider the entire product lifecycle and the consequences of security feature implementations for a single lifecycle stage on other stages. At the same time, recent trends such as the digitization of production is an enabler of production process extensions that support the integration of such security features during the operational phase of a control devices. In particular, we propose a security concept that enables assurance of the integrity of software components and product configuration of other control devices in the same network. Moreover, we show how these concepts result in additional requirements for the production stages. We show how we meet these requirements and focus on a production process by extending previously proposed methods that enable the commissioning of secrets such as private keys during the manufacturing phase. We extend this process by extracting information about the configurations of the actually produced devices during production. Based on this information, the proposed security techniques can be integrated without considerable overhead for bootstrapping.

LanguageEnglish
Title of host publicationSystems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings
PublisherSpringer-Verlag Italia
Pages360-371
Number of pages12
Volume748
ISBN (Print)9783319642178
DOIs
StatusPublished - 2017
Event24th European Conference on Systems, Software and Services Process Improvement, EuroSPI 2017 - VSB - Technical University of Ostrava, Ostrava, Czech Republic
Duration: 6 Sep 20178 Sep 2017
Conference number: 24
http://2017.eurospi.net/

Publication series

NameCommunications in Computer and Information Science
Volume748
ISSN (Print)1865-0929

Conference

Conference24th European Conference on Systems, Software and Services Process Improvement, EuroSPI 2017
Abbreviated titleEuroSPI 2017
CountryCzech Republic
CityOstrava
Period6/09/178/09/17
Internet address

Fingerprint

Distributed Control
Life Cycle
Hydroelectric power plants
Critical infrastructures
Critical Infrastructure
Digitization
Configuration
Commissioning
Analog to digital conversion
Bootstrapping
Requirements
Power Plant
Software Components
Integrity
Manufacturing
Control System
Entire
Control systems
Concepts
Trends

ASJC Scopus subject areas

  • Computer Science(all)
  • Mathematics(all)

Cite this

Rauter, T., Iber, J., Krisper, M., & Kreiner, C. (2017). Supporting the integration of new security features in embedded control devices through the digitalization of production. In Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings (Vol. 748, pp. 360-371). (Communications in Computer and Information Science; Vol. 748). Springer-Verlag Italia. DOI: 10.1007/978-3-319-64218-5_30

Supporting the integration of new security features in embedded control devices through the digitalization of production. / Rauter, Tobias; Iber, Johannes; Krisper, Michael; Kreiner, Christian.

Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings. Vol. 748 Springer-Verlag Italia, 2017. p. 360-371 (Communications in Computer and Information Science; Vol. 748).

Research output: Chapter in Book/Report/Conference proceedingConference contributionResearchpeer-review

Rauter, T, Iber, J, Krisper, M & Kreiner, C 2017, Supporting the integration of new security features in embedded control devices through the digitalization of production. in Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings. vol. 748, Communications in Computer and Information Science, vol. 748, Springer-Verlag Italia, pp. 360-371, 24th European Conference on Systems, Software and Services Process Improvement, EuroSPI 2017, Ostrava, Czech Republic, 6/09/17. DOI: 10.1007/978-3-319-64218-5_30
Rauter T, Iber J, Krisper M, Kreiner C. Supporting the integration of new security features in embedded control devices through the digitalization of production. In Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings. Vol. 748. Springer-Verlag Italia. 2017. p. 360-371. (Communications in Computer and Information Science). Available from, DOI: 10.1007/978-3-319-64218-5_30
Rauter, Tobias ; Iber, Johannes ; Krisper, Michael ; Kreiner, Christian. / Supporting the integration of new security features in embedded control devices through the digitalization of production. Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings. Vol. 748 Springer-Verlag Italia, 2017. pp. 360-371 (Communications in Computer and Information Science).
@inproceedings{75bbb5b1ff5f40ebbcf0b26a7b3ed485,
title = "Supporting the integration of new security features in embedded control devices through the digitalization of production",
abstract = "Security is a vital property of Industrial Control Systems (ICS), especially in the context of critical infrastructure. In this work, we focus on distributed control devices for hydro-electric power plants. Much work has been done for specific lifecylce phases of distributed control devices such as development or operational phase. Our aim here is to consider the entire product lifecycle and the consequences of security feature implementations for a single lifecycle stage on other stages. At the same time, recent trends such as the digitization of production is an enabler of production process extensions that support the integration of such security features during the operational phase of a control devices. In particular, we propose a security concept that enables assurance of the integrity of software components and product configuration of other control devices in the same network. Moreover, we show how these concepts result in additional requirements for the production stages. We show how we meet these requirements and focus on a production process by extending previously proposed methods that enable the commissioning of secrets such as private keys during the manufacturing phase. We extend this process by extracting information about the configurations of the actually produced devices during production. Based on this information, the proposed security techniques can be integrated without considerable overhead for bootstrapping.",
author = "Tobias Rauter and Johannes Iber and Michael Krisper and Christian Kreiner",
year = "2017",
doi = "10.1007/978-3-319-64218-5_30",
language = "English",
isbn = "9783319642178",
volume = "748",
series = "Communications in Computer and Information Science",
publisher = "Springer-Verlag Italia",
pages = "360--371",
booktitle = "Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings",
address = "Italy",

}

TY - GEN

T1 - Supporting the integration of new security features in embedded control devices through the digitalization of production

AU - Rauter,Tobias

AU - Iber,Johannes

AU - Krisper,Michael

AU - Kreiner,Christian

PY - 2017

Y1 - 2017

N2 - Security is a vital property of Industrial Control Systems (ICS), especially in the context of critical infrastructure. In this work, we focus on distributed control devices for hydro-electric power plants. Much work has been done for specific lifecylce phases of distributed control devices such as development or operational phase. Our aim here is to consider the entire product lifecycle and the consequences of security feature implementations for a single lifecycle stage on other stages. At the same time, recent trends such as the digitization of production is an enabler of production process extensions that support the integration of such security features during the operational phase of a control devices. In particular, we propose a security concept that enables assurance of the integrity of software components and product configuration of other control devices in the same network. Moreover, we show how these concepts result in additional requirements for the production stages. We show how we meet these requirements and focus on a production process by extending previously proposed methods that enable the commissioning of secrets such as private keys during the manufacturing phase. We extend this process by extracting information about the configurations of the actually produced devices during production. Based on this information, the proposed security techniques can be integrated without considerable overhead for bootstrapping.

AB - Security is a vital property of Industrial Control Systems (ICS), especially in the context of critical infrastructure. In this work, we focus on distributed control devices for hydro-electric power plants. Much work has been done for specific lifecylce phases of distributed control devices such as development or operational phase. Our aim here is to consider the entire product lifecycle and the consequences of security feature implementations for a single lifecycle stage on other stages. At the same time, recent trends such as the digitization of production is an enabler of production process extensions that support the integration of such security features during the operational phase of a control devices. In particular, we propose a security concept that enables assurance of the integrity of software components and product configuration of other control devices in the same network. Moreover, we show how these concepts result in additional requirements for the production stages. We show how we meet these requirements and focus on a production process by extending previously proposed methods that enable the commissioning of secrets such as private keys during the manufacturing phase. We extend this process by extracting information about the configurations of the actually produced devices during production. Based on this information, the proposed security techniques can be integrated without considerable overhead for bootstrapping.

UR - http://www.scopus.com/inward/record.url?scp=85030625072&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-64218-5_30

DO - 10.1007/978-3-319-64218-5_30

M3 - Conference contribution

SN - 9783319642178

VL - 748

T3 - Communications in Computer and Information Science

SP - 360

EP - 371

BT - Systems, Software and Services Process Improvement - 24th European Conference, EuroSPI 2017, Proceedings

PB - Springer-Verlag Italia

ER -