@incollection {BC2011Alcaraz, title = {Security Aspects of SCADA and DCS Environments}, booktitle = {Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense}, series = {Advances in Critical Infrastructure Protection: Information Infrastructure Models, Analysis, and Defense. LNCS 7130.}, volume = {7130}, year = {2012}, month = {September 2012}, pages = {120-149}, publisher = {Springer-Verlag}, organization = {Springer-Verlag}, address = {Heidelberger (Berlin, Alemania)}, abstract = {

SCADA Systems can be seen as a fundamental component in Critical Infrastructures, having an impact in the overall performance of other Critical Infrastructures interconnected. Currently, these systems include in their network designs different types of Information and Communication Technology systems (such as the Internet and wireless technologies), not only to modernize operational processes but also to ensure automation and real-time control. Nonetheless, the use of these new technologies will bring new security challenges, which will have a significant impact on both the business process and home users. Therefore, the main purpose of this Chapter is to address these issues and to analyze the interdependencies of Process Control Systems with ICT systems, to discuss some security aspects and to offer some possible solutions and recommendations.

}, keywords = {Critical Information Infrastructure Protection, SCADA Systems}, isbn = {ISBN:978-3-642-28919-4}, issn = {0302-9743}, author = {Cristina Alcaraz and Gerardo Fernandez and Fernando Carvajal}, editor = {Javier Lopez and Stephen. Wolthunsen and Roberto Setola} } @article {Alcaraz2011, title = {An Early Warning System based on Reputation for Energy Control Systems}, journal = {IEEE Transactions on Smart Grid}, volume = {2}, number = {4}, year = {2011}, month = {Nov 2011}, pages = {827-834}, publisher = {IEEE}, abstract = {

Most of energy control or SCADA (Supervisory Control and Data Acquisition) systems are very dependent on advanced technologies and on traditional security mechanisms for protecting the a system against anomalous events. Security mechanisms are not enough to be used in critical systems, since they can only detect anomalous events occurring at a certain moment in time. For this reason it becomes of paramount importance the usage of intelligent systems with capability for preventing anomalous situations and reacting against them on time. This type of systems are, for example, Early Warning Systems (EWS). In this paper, we propose an EWS based on Wireless Sensor Networks (WSNs) (under the ISA100.11a standard) and reputation for controling the network behaviour. The WSN are organized into clusters where a Cluster Head (CH) is designated. This CH will contain a Reputation Manager Module. The usability of this approach is also analyzed considering a Smart Grid scenario.} keywords = {Critical Information Infrastructures, Sensor Networks, Early Warning Systems, Reputation, SCADA Systems, Smart Grid.

}, keywords = {Early Warning Systems, Reputation, SCADA Systems, Smart Grid, wireless sensor networks}, issn = {1949-3053}, doi = {10.1109/TSG.2011.2161498}, author = {Cristina Alcaraz and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {1643, title = {Managing Incidents in Smart Grids {\`a} la Cloud}, booktitle = {IEEE CloudCom 2011}, year = {2011}, month = {Nov-Dec 2011}, pages = {527-531}, publisher = {IEEE Computer Society}, organization = {IEEE Computer Society}, address = {Athens, Greece}, abstract = {

During the last decade, the Cloud Computing paradigm has emerged as a panacea for many problems in traditional IT infrastructures. Much has been said about the potential of Cloud Computing in the Smart Grid context, but unfortunately it is still relegated to a second layer when it comes to critical systems. Although the advantages of outsourcing those kind of applications to the cloud is clear, data confidentiality and operational privacy stand as mayor drawbacks. In this paper, we try to give some hints on which security mechanisms and more specific, which cryptographic schemes, will help a better integration of Smart Grids and Clouds. We propose the use of Virtual SCADA in the Cloud (VS-Cloud) as a mean to improve reliability and efficiency whilst maintaining the same protection level as in traditional SCADA architectures.

}, keywords = {Cloud Computing, Cryptography, Incident Management, SCADA Systems, Searchable Encryption, Smart Grid}, isbn = {978-0-7695-4622-3}, doi = {10.1109/CloudCom.2011.79}, author = {Cristina Alcaraz and Isaac Agudo and David Nu{\~n}ez and Javier Lopez} } @article {Alcaraz2011a, title = {Secure SCADA Framework for the Protection of Energy Control Systems}, journal = {Concurrency and Computation Practice \& Experience}, volume = {23}, number = {12}, year = {2011}, month = {Aug 2011}, pages = {1414-1430}, publisher = {John Wiley \& Sons, Inc.}, abstract = {

Energy distribution systems are becoming increasingly widespread in today{\textquoteright}s society.\ One of the elements that is used to monitor and control these systems are the SCADA\ (Supervisory Control and Data Acquisition) systems. In particular, these control systems\ and their complexities, together with the emerging use of the Internet and wireless\ technologies, bring new challenges that must be carefully considered. Examples of such\ challenges are the particular bene{\textasciimacron}ts of the integration of those new technologies, and\ also the e{\textregistered}ects they may have on the overall SCADA security. The main task of this\ paper is to provide a framework that shows how the integration of di{\textregistered}erent state-of-the-art technologies in an energy control system, such as Wireless Sensor Networks (WSNs),\ Mobile Ad-Hoc Networks (MANETs), and the Internet, can bring some interesting\ benefits such as status management and anomaly prevention, while maintaining the\ security of the whole system.

}, keywords = {Energy Distribution and Control Systems, SCADA Systems, Sensor Networks}, isbn = {23(12)1311-1464 (2011)}, issn = {1532-0626}, doi = {10.1002/cpe.1679}, author = {Cristina Alcaraz and Javier Lopez and Jianying Zhou and Rodrigo Roman} } @inproceedings {Alcaraz2010b, title = {Early Warning System for Cascading Effect Control in Energy Control Systems}, booktitle = {5th International conference on Critical Information Infrastructures Security (CRITIS{\textquoteright}10)}, series = {LNCS}, volume = {6712}, year = {2010}, month = {September}, pages = {55-67}, publisher = {Springer}, organization = {Springer}, address = {Athens, Greece}, abstract = {

A way of controlling a cascading effect caused by a failure or a threat in a critical system is using intelligent mechanisms capable of predicting anomalous behaviours and also capable of reacting against them in advance. These mechanisms are known as Early Warning Systems (EWS) and this will be precisely the main topic of this paper. Specially, we present an EWS design based on a Wireless Sensor Network (using the ISA100.11a standard) that constantly supervise the application context. This EWS is also based on forensic techniques to provide dynamic learning capacities. As a result, this new approach will aid to provide a reliable control of incidences by offering a dynamic alarm management, identification of the most suitable field operator to attend an alarm, reporting of causes and responsible operators, and learning from new anomalous situations.

}, keywords = {Cascading Effect, Early Warning System, Energy Control Systems, Forensic Techniques, SCADA Systems, Wireless Sensor Network}, isbn = {978-3-642-21693-0}, issn = {0302-9743}, url = {http://critis.net/2010/}, author = {Cristina Alcaraz and Angel Balastegui and Javier Lopez} } @article {Alcaraz2010a, title = {A Security Analysis for Wireless Sensor Mesh Networks in Highly Critical Systems}, journal = {IEEE Transactions on Systems, Man, and Cybernetics, Part C: Applications and Reviews}, volume = {40}, number = {4}, year = {2010}, month = {July}, pages = {419-428}, publisher = {IEEE}, abstract = {

Nowadays, critical control systems are a fundamental component contributing to the overall performance of critical infrastructures in our society, most of which belong to the industrial sector. These complex systems include in their design different types of information and communication technology systems, such as wireless (mesh) sensor networks, to carry out control processes in real time. This fact has meant that several communication standards, such as Zigbee PRO, WirelessHART, and ISA100.11a, have been specified to ensure coexistence, reliability, and security in their communications. The main purpose of this paper has been to review these three standards and analyze their security. We have identified a set of threats and potential attacks in their routing protocols, and we consequently provide recommendations and countermeasures to help Industry protect its infrastructures.

}, keywords = {Critical Control Systems, Critical Infrastructure Protection, SCADA Systems, Wireless Sensor Mesh Network}, issn = {1094-6977}, doi = {10.1109/TSMCC.2010.2045373}, url = {http://ieeexplore.ieee.org/search/srchabstract.jsp?tp=\&arnumber=5443456\&queryText\%253DC.+Alcaraz\%2526openedRefinements\%253D*\%2526searchField\%253DSearch+All\&fromGateway=true}, author = {Cristina Alcaraz and Javier Lopez} }