@incollection {1844, title = {Risk Assessment for IoT-Enabled Cyber-Physical Systems}, booktitle = {Advances in Core Computer Science-Based Technologies}, year = {2021}, pages = {157-173}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, address = {Cham}, abstract = {

Internet of Things (IoT) technologies have enabled Cyber-Physical Systems (CPS) to become fully interconnected. This connectivity however has radically changed their threat landscape. Existing risk assessment methodologies often fail to identify various attack paths that stem from the new connectivity/functionality features of IoT-enabled CPS. Even worse, due to their inherent characteristics, IoT systems are usually the weakest link in the security chain and thus many attacks utilize IoT technologies as their key enabler. In this paper we review risk assessment methodologies for IoT-enabled CPS. In addition, based on our previous work (Stellios et al. in IEEE Commun Surv Tutor 20:3453{\textendash}3495, 2018, [47]) on modeling IoT-enabled cyberattacks, we present a high-level risk assessment approach, specifically suited for IoT-enabled CPS. The mail goal is to enable an assessor to identify and assess\ non-obvious(indirect or subliminal) attack paths introduced by IoT technologies, that usually target mission critical components of an CPS.

}, keywords = {Critical Infrastructures, Cyber Physical Systems (CPS), Internet of Things (IoT), Risk assessment Attack paths}, isbn = {978-3-030-41196-1}, doi = {10.1007/978-3-030-41196-1_8}, url = {https://doi.org/10.1007/978-3-030-41196-1_8}, author = {Ioannis Stellios and Panayiotis Kotzanikolaou and Mihalis Psarakis and Cristina Alcaraz} } @incollection {BC2011Alcaraz, title = {Security Aspects of SCADA and DCS Environments}, booktitle = {Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense}, series = {Advances in Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense. LNCS 7130.}, volume = {7130}, year = {2012}, month = {September 2012}, pages = {120-149}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Heidelberger (Berlin, Alemania)}, abstract = {

SCADA Systems can be seen as a fundamental component in Critical Infrastructures, having an impact in the overall performance of other Critical Infrastructures interconnected. Currently, these systems include in their network designs different types of Information and Communication Technology systems (such as the Internet and wireless technologies), not only to modernize operational processes but also to ensure automation and real-time control. Nonetheless, the use of these new technologies will bring new security challenges, which will have a significant impact on both the business process and home users. Therefore, the main purpose of this Chapter is to address these issues and to analyze the interdependencies of Process Control Systems with ICT systems, to discuss some security aspects and to offer some possible solutions and recommendations.

}, keywords = {Critical Information Infrastructure Protection, SCADA Systems}, isbn = {ISBN:978-3-642-28919-4}, issn = {0302-9743}, author = {Cristina Alcaraz and Gerardo Fernandez and Fernando Carvajal}, editor = {Javier Lopez and Stephen. Wolthunsen and Roberto Setola} } @incollection {Roman2009b, title = {Trust and Reputation Systems for Wireless Sensor Networks}, booktitle = {Security and Privacy in Mobile and Wireless Networking}, year = {2009}, pages = {105-128}, publisher = {Troubador Publishing Ltd}, organization = {Troubador Publishing Ltd}, abstract = {

The concept of trust has become very relevant in the late years as a consequence of the growth of fields such as internet transactions or electronic commerce. In general, trust has become of paramount importance for any kind of distributed networks, such as wireless sensor networks (WSN in the following). In this chapter of the book, we try to give a general overview of the state of the art on trust management systems for WSN and also try to identify the main features of the architectures of these trust management systems.

}, isbn = {978-1905886-906}, author = {Rodrigo Roman and Carmen Fernandez-Gago and Javier Lopez and Hsiao Hwa Chen}, editor = {Stefanos Gritzalis and Tom Karygiannis and Charalabos Skianis} } @incollection {Roman2008, title = {On the Hardware Implementation Efficiency of Cryptographic Primitives}, booktitle = {Wireless Sensor Network Security}, year = {2008}, publisher = {IOS Press}, organization = {IOS Press}, abstract = {

Security has been proven a crucial factor in the provision of data services and especially in the computer-related environments. While wired and wireless networks come to all sectors of everyday life, security tries to satisfy the growing needs for confidentiality, integrity and non-repudiation. There are many instances of security primitives and each one of them has different requirements in terms of processing power, word size, etc. Therefore, it is important to review the functionality of the less resource-demanding encryption algorithms in order to analyze their theoretical suitability to the existent sensor node hardware. Still, the constraints inherent to the sensor nodes advise against the total dependence on software-based implementations, even more in the case of expensive primitives.

}, isbn = {978-1-58603-813-7}, author = {Rodrigo Roman and Cristina Alcaraz and Nicolas Sklavos}, editor = {Javier Lopez and Jianying Zhou} }