@inproceedings {Alcaraz2009, title = {Adaptive Dispatching of Incidences Based on Reputation for SCADA Systems}, booktitle = {6th International Conference on Trust, Privacy and Security in Digital Business (TrustBus{\textquoteright}09)}, series = {LNCS}, year = {2009}, month = {September}, pages = {86-94}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Linz, Austria}, abstract = {

SCADA systems represent a challenging scenario where the management of critical alarms is crucial. Their response to these alarms should be efficient and fast in order to mitigate or contain undesired effects. This work presents a mechanism, the Adaptive Assignment Manager (AAM) that will aid to react to incidences in a more efficient way by dynamically assigning alarms to the most suitable human operator. The mechanism uses various inputs for identifying the operators such as their availability, workload and reputation. In fact, we also define a reputation component that stores the reputation of the human operators and uses feedback from past experiences.

}, keywords = {Critical Control Systems, Reputation, Supervisory Control and Data Acquisition Systems}, isbn = {978-3-642-03747-4}, doi = {10.1007/978-3-642-03748-1_9}, author = {Cristina Alcaraz and Isaac Agudo and Carmen Fernandez-Gago and Rodrigo Roman and Gerardo Fernandez and Javier Lopez} } @article {Alcaraz2008a, title = {Gesti{\'o}n segura de redes SCADA}, journal = {Nuevas tendencias en gesti{\'o}n de redes, Nov{\'a}tica}, number = {196}, year = {2008}, month = {December}, pages = {20-25}, publisher = {CEPIS}, abstract = {

En el momento que se introduce en el mercado nuevas tecnolog\ías basadas en entornos distribuidos comienzan a surgir en paralelo nuevos problemas de seguridad en los sistemas SCADA (Supervisory Control and Data Acquisition), los cuales monitorizan y gestionan otras infraestructuras de gran complejidad y escala. Un fallo o una interrupci\ón en uno de sus componentes podr\ía suponer un impacto negativo sobre la funcionalidad de otras infraestructuras, por lo que se hace necesario realizar frecuentes an\álisis de seguridad para as\í mantener actualizado el conocimiento y proveer recomendaciones y/o soluciones para mitigar o evitar futuras ocurrencias, garantizando una gesti\ón de red fiable y siempre disponible.

}, keywords = {An{\'a}lisis de Seguridad, Gesti{\'o}n de red SCADA, Supervisory Control and Data Acquisition Systems}, issn = {0211-2124}, url = {http://www.ati.es/novatica/indice.html$\#$196}, author = {Cristina Alcaraz and Gerardo Fernandez and Rodrigo Roman and Angel Balastegui and Javier Lopez} } @article {Alcaraz2008b, title = {Secure Management of SCADA Networks}, journal = {Novatica, New Trends in Network Management}, volume = {9}, number = {6}, year = {2008}, month = {December}, pages = {22-28}, publisher = {Cepis UPGRADE}, abstract = {

When a Supervisory Control and Data Acquisition (SCADA) system monitors and manages other complex infrastructures through the use of distributed technologies, it becomes a critical infrastructure by itself: A failure or disruption in any of its components could implicate a serious impact on the performance of the other infrastructures. The connection with other systems makes a SCADA system more vulnerable against attacks, generating new security problems. As a result, it is essential to perform diverse security analysis frequently in order to keep an updated knowledge and to provide recommendations and/or solutions to mitigate or avoid anomalous events. This will facilitate the existence of a suitable, reliable, and available control network.

}, keywords = {SCADA network management, Security Analysis, Supervisory Control and Data Acquisition Systems}, issn = {1684-5285}, url = {http://www.upgrade-cepis.org/issues/2008/6/up9-6Alcaraz.pdf}, author = {Cristina Alcaraz and Gerardo Fernandez and Rodrigo Roman and Angel Balastegui and Javier Lopez} }