Securing BACnet’s Pitfalls - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

Securing BACnet’s Pitfalls

Résumé

Building Automation Systems (BAS) are crucial for monitoring and controlling buildings, ranging from small homes to critical infrastructure, such as airports or military facilities. A major concern in this context is the security of BAS communication protocols and devices. The building automation and control networking protocol (BACnet) is integrated into products of more than 800 vendors worldwide. However, BACnet devices are vulnerable to attacks. We present a novel solution for the two most important BACnet layers, i.e. those independent of the data link layer technology, namely the network and the application layer. We provide the first implementation and evaluation of traffic normalization for BAS traffic. Our proof of concept code is based on the open source software Snort.
Fichier principal
Vignette du fichier
337885_1_En_41_Chapter.pdf (4 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01345153 , version 1 (13-07-2016)

Licence

Paternité

Identifiants

Citer

Jaspreet Kaur, Jernej Tonejc, Steffen Wendzel, Michael Meier. Securing BACnet’s Pitfalls. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. pp.616-629, ⟨10.1007/978-3-319-18467-8_41⟩. ⟨hal-01345153⟩
103 Consultations
729 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More