| 1. |
- Pinto, Rui, et al.
(författare)
-
Attack Detection in Cyber-Physical Production Systems using the Deterministic Dendritic Cell Algorithm
- 2020
-
Ingår i: Proceedings. - : IEEE. ; , s. 1552-1559
-
Konferensbidrag (refereegranskat)abstract
- Cyber-Physical Production Systems (CPPS) are key enablers for industrial and economic growth. The introduction of the Internet of Things (IoT) in industrial processes represents a new revolution towards the Smart Manufacturing oncept and is usually designated as the 4 th Industrial Revolution. Despite the huge interest from the industry to innovate their production systems, in order to increase revenues at lower costs, the IoT concept is still immature and fuzzy, which increases security related risks in industrial systems. Facing this paradigm and, since CPPS have reached a level of complexity, where the human intervention for operation and control is becoming increasingly difficult, Smart Factories require autonomic methodologies for security management and self-healing. This paper presents an Intrusion Detection System (IDS) approach for CPPS, based on the deterministic Dendritic Cell Algorithm (dDCA). To evaluate the dDCA effectiveness, a testing dataset was generated, by implementing and injecting various attacks on a OPC UA based CPPS testbed. The results show that these attacks can be successfully detected using the dDCA.
|
|
| 2. |
- Burmyakov, Artem, et al.
(författare)
-
Compositional Multiprocessor Scheduling: the GMPR interface
- 2014
-
Ingår i: Real-Time Systems. - : Springer Science and Business Media LLC. - 1573-1383 .- 0922-6443. ; 50:3, s. 342-376
-
Tidskriftsartikel (refereegranskat)abstract
- Composition is a practice of key importance in software engineering. When real-time applications are composed, it is necessary that their timing properties (such as meeting the deadlines) are guaranteed. The composition is performed by establishing an interface between the application and the physical platform. Such an interface typically contains information about the amount of computing capacity needed by the application. In multiprocessor platforms, the interface should also present information about the degree of parallelism. Therefore it is with no surprise that several interface proposals have recently been put forward in various research works. However, those interface proposals are either too complex to be handled or too pessimistic. In this paper we propose the Generalized Multiprocessor Periodic Resource model (GMPR) that is strictly superior to the MPR model without requiring a too detailed description. We describe a method to generate the interface from the application specification. This method has been implemented in Matlab routines that are publicly available.
|
|
| 3. |
- Burmyakov, Artem, et al.
(författare)
-
The Generalized Multiprocessor Periodic Resource Interface Model for Hierarchical Multiprocessor Scheduling
- 2012
-
Ingår i: [Host publication title missing]. - 9781450314091 ; , s. 131-139
-
Konferensbidrag (refereegranskat)abstract
- Composition is a practice of key importance in software engineering. When real-time applications are composed it is necessary that their timing properties (such as meeting the deadlines) are guaranteed. The composition is performed by establishing an interface between the application and the physical platform. Such an interface does typically contain information about the amount of computing capacity needed by the application. In multiprocessor platforms, the interface should also present information about the degree of parallelism. Recently there have been quite a few interface proposals. However, they are either too complex to be handled or too pessimistic. In this paper we propose the Generalized Multiprocessor Periodic Resource model (GMPR) that is strictly superior to the MPR model without requiring a too detailed description. We describe a method to generate the interface from the application specification. All these methods have been implemented in Matlab routines that are publicly available.
|
|
| 4. |
- Kreibich, Heidi, et al.
(författare)
-
Panta Rhei benchmark dataset : Socio-hydrological data of paired events of floods and droughts
- 2023
-
Ingår i: Earth System Science Data. - : Copernicus Publications. - 1866-3508 .- 1866-3516. ; 15:5, s. 2009-2023
-
Tidskriftsartikel (refereegranskat)abstract
- As the adverse impacts of hydrological extremes increase in many regions of the world, a better understanding of the drivers of changes in risk and impacts is essential for effective flood and drought risk management and climate adaptation. However, there is currently a lack of comprehensive, empirical data about the processes, interactions, and feedbacks in complex human-water systems leading to flood and drought impacts. Here we present a benchmark dataset containing socio-hydrological data of paired events, i.e. two floods or two droughts that occurred in the same area. The 45 paired events occurred in 42 different study areas and cover a wide range of socio-economic and hydro-climatic conditions. The dataset is unique in covering both floods and droughts, in the number of cases assessed and in the quantity of socio-hydrological data. The benchmark dataset comprises (1) detailed review-style reports about the events and key processes between the two events of a pair; (2) the key data table containing variables that assess the indicators which characterize management shortcomings, hazard, exposure, vulnerability, and impacts of all events; and (3) a table of the indicators of change that indicate the differences between the first and second event of a pair. The advantages of the dataset are that it enables comparative analyses across all the paired events based on the indicators of change and allows for detailed context- and location-specific assessments based on the extensive data and reports of the individual study areas. The dataset can be used by the scientific community for exploratory data analyses, e.g. focused on causal links between risk management; changes in hazard, exposure and vulnerability; and flood or drought impacts. The data can also be used for the development, calibration, and validation of socio-hydrological models. The dataset is available to the public through the GFZ Data Services (Kreibich et al., 2023, 10.5880/GFZ.4.4.2023.001).
|
|
| 5. |
- Kreibich, Heidi, et al.
(författare)
-
The challenge of unprecedented floods and droughts in risk management
- 2022
-
Ingår i: Nature. - : Springer Nature. - 0028-0836 .- 1476-4687. ; 608:7921, s. 80-86
-
Tidskriftsartikel (refereegranskat)abstract
- Risk management has reduced vulnerability to floods and droughts globally, yet their impacts are still increasing. An improved understanding of the causes of changing impacts is therefore needed, but has been hampered by a lack of empirical data4,5. On the basis of a global dataset of 45 pairs of events that occurred within the same area, we show that risk management generally reduces the impacts of floods and droughts but faces difficulties in reducing the impacts of unprecedented events of a magnitude not previously experienced. If the second event was much more hazardous than the first, its impact was almost always higher. This is because management was not designed to deal with such extreme events: for example, they exceeded the design levels of levees and reservoirs. In two success stories, the impact of the second, more hazardous, event was lower, as a result of improved risk management governance and high investment in integrated management. The observed difficulty of managing unprecedented events is alarming, given that more extreme hydrological events are projected owing to climate change.
|
|
| 6. |
- Kunert, Kristina
(författare)
-
Architectures and Protocols for Performance Improvements of Real-Time Networks
- 2010
-
Doktorsavhandling (övrigt vetenskapligt/konstnärligt)abstract
- When designing architectures and protocols for data traffic requiring real-time services, one of the major design goals is to guarantee that traffic deadlines can be met. However, many real-time applications also have additional requirements such as high throughput, high reliability, or energy efficiency. High-performance embedded systems communicating heterogeneous traffic with high bandwidth and strict timing requirements are in need of more efficient communication solutions, while wireless industrial applications, communicating control data, require support of reliability and guarantees of real-time predictability at the same time. To meet the requirements of high-performance embedded systems, this thesis work proposes two multi-wavelength high-speed passive optical networks. To enable reliable wireless industrial communications, a framework incorporating carefully scheduled retransmissions is developed. All solutions are based on a single-hop star topology, predictable Medium Access Control algorithms and Earliest Deadline First scheduling, centrally controlled by a master node. Further, real-time schedulability analysis is used as admission control policy to provide delay guarantees for hard real-time traffic. For high-performance embedded systems an optical star network with an Arrayed Waveguide Grating placed in the centre is suggested. The design combines spatial wavelength reuse with fixed-tuned and tuneable transceivers in the end nodes, enabling simultaneous transmission of both control and data traffic. This, in turn, permits efficient support of heterogeneous traffic with both hard and soft real-time constraints. By analyzing traffic dependencies in this multichannel network, and adapting the real-time schedulability analysis to incorporate these traffic dependencies, a considerable increase of the possible guaranteed throughput for hard real-time traffic can be obtained. Most industrial applications require using existing standards such as IEEE 802.11 or IEEE 802.15.4 for interoperability and cost efficiency. However, these standards do not provide predictable channel access, and thus real-time guarantees cannot be given. A framework is therefore developed, combining transport layer retransmissions with real-time analysis admission control, which has been adapted to consider retransmissions. It can be placed on top of many underlying communication technologies, exemplified in our work by the two aforementioned wireless standards. To enable a higher data rate than pure IEEE 802.15.4, but still maintaining its energy saving properties, two multichannel network architectures based on IEEE 802.15.4 and encompassing the framework are designed. The proposed architectures are evaluated in terms of reliability, utilization, delay, complexity, scalability and energy efficiency and it is concluded that performance is enhanced through redundancy in the time and frequency domains.
|
|
| 7. |
- Pinto, Rui, et al.
(författare)
-
Enabling data-driven anomaly detection by design in cyber-physical production systems
- 2022
-
Ingår i: Cybersecurity. - : Springer Nature. - 2523-3246. ; 5
-
Tidskriftsartikel (refereegranskat)abstract
- Designing and developing distributed cyber-physical production systems (CPPS) is a time-consuming, complex, and error-prone process. These systems are typically heterogeneous, i.e., they consist of multiple components implemented with different languages and development tools. One of the main problems nowadays in CPPS implementation is enabling security mechanisms by design while reducing the complexity and increasing the system’s maintainability. Adopting the IEC 61499 standard is an excellent approach to tackle these challenges by enabling the design, deployment, and management of CPPS in a model-based engineering methodology. We propose a method for CPPS design based on the IEC 61499 standard. The method allows designers to embed a bio-inspired anomaly-based host intrusion detection system (A-HIDS) in Edge devices. This A-HIDS is based on the incremental Dendritic Cell Algorithm (iDCA) and can analyze OPC UA network data exchanged between the Edge devices and detect attacks that target the CPPS’ Edge layer. This study’s findings have practical implications on the industrial security community by making novel contributions to the intrusion detection problem in CPPS considering immune-inspired solutions, and cost-effective security by design system implementation. According to the experimental data, the proposed solution can dramatically reduce design and code complexity while improving application maintainability and successfully detecting network attacks without negatively impacting the performance of the CPPS Edge devices.
|
|
| 8. |
- Pinto, Rui, et al.
(författare)
-
Incremental Dendritic Cell Algorithm for Intrusion Detection in Cyber-Physical Production Systems
- 2021
-
Ingår i: Intelligent Computing. - Cham : Springer. ; , s. 664-680
-
Konferensbidrag (refereegranskat)abstract
- Cyber-Physical Production Systems (CPPS) are becoming increasingly more susceptible to security vulnerabilities, specially with the introduction of IoT principles in manufacturing scenarios. Since security is crucial to the development and acceptance of CPPS, flexible adaptation to real CPPS security environment and reasonable response to real-time CPPS security events are needed. This paper presents an Intrusion Detection System (IDS) approach for CPPS, based on an extended version of the Dendritic Cell Algorithm (DCA), designated as Incremental Dendritic Cell Algorithm (iDCA). Facing the industrial requirements for intrusion detection and response, the proposed solution enables online incremental detection in an unsupervised manner. Results show that the approach is a viable solution to detect anomalies in (near) real-time, specially in environments with little a priori system knowledge for intrusion detection.
|
|
| 9. |
|
|
| 10. |
- Sámano-Robles, Ramiro, et al.
(författare)
-
The DEWI High-Level Architecture : Guidelines for Structuring Wireless Sensor Networks in Industrial Applications
- 2016
-
Ingår i: 2016 Eleventh International Conference on Digital Information Management (ICDIM). - New York : IEEE. - 9781509026418 - 9781509026425 ; , s. 274-280
-
Konferensbidrag (refereegranskat)abstract
- This paper presents the high-level architecture (HLA) of the research project DEWI (dependable embedded wireless infrastructure). The objective of this HLA is to serve as a reference for the development of industrial wireless sensor and actuator networks (WSANs) based on the concept of the DEWI Bubble. The DEWI Bubble is defined here as a high-level abstraction of an industrial WSAN with enhanced interoperability (via standardized interfaces), technology reusability, and cross-domain development. This paper details the design criteria used to define the HLA and the organization of the infrastructure internal and external to the DEWI Bubble. The description includes the different perspectives, models or views of the architecture: the entity model, the layered model, and the functional view model (including an overview of interfaces). The HLA constitutes an extension of the ISO/IEC SNRA (sensor network reference architecture) towards the support of industrial applications. To improve interoperability with existing approaches the DEWI HLA also reuses some features from other standardized technologies and architectures. The HLA will allow networks with different industrial sensor technologies to exchange information between them or with external clients via standard interfaces, thus providing a consolidated access to sensor information of different domains. This is an important aspect for smart city applications, Big Data and internet-of-things (IoT). © Copyright 2016 IEEE
|
|
| 11. |
- Sámano-Robles, Ramiro, et al.
(författare)
-
The DEWI high-level architecture : Wireless sensor networks in industrial applications
- 2021
-
Ingår i: Technologies. - : MDPI. - 2227-7080. ; 9:4
-
Tidskriftsartikel (refereegranskat)abstract
- This paper presents the High-Level Architecture (HLA) of the European research project DEWI (Dependable Embedded Wireless Infrastructure). The objective of this HLA is to serve as a reference framework for the development of industrial Wireless Sensor and Actuator Networks (WSANs) based on the concept of the DEWI Bubble. The DEWI Bubble constitutes a set of architecture design rules and recommendations that can be used to integrate legacy industrial sensor networks with a modern, interoperable and flexible IoT (Internet-of-Things) infrastructure. The DEWI Bubble can be regarded as a high-level abstraction of an industrial WSAN with enhanced interoperability (via standardized interfaces), dependability, technology reusability and cross-domain development. The DEWI Bubble aims to resolve the issue on how to integrate commercial WSAN technology to match the dependability, interoperability and high criticality needs of industrial domains. This paper details the criteria used to design the HLA and the organization of the infrastructure internal and external to the DEWI Bubble. The description includes the different perspectives, models, or views of the architecture: the entity model, the layered perspective of the entity model and the functional model. This includes an overview of software and hardware interfaces. The DEWI HLA constitutes an extension of the ISO/IEC 29182 SNRA (Sensor Network Reference Architecture) towards the support of wireless industrial applications in different domains: aeronautics, automotive, railway and building. To improve interoperability with existing approaches, the DEWI HLA also reuses some features from other standardized technologies and architectures. The DEWI HLA and the concept of Bubble allow networks with different industrial sensor technologies to exchange information between them or with external clients via standard interfaces, thus providing consolidated access to sensor information of different industrial domains. This is an important aspect for smart city applications, Big Data, Industry 4.0 and the Internet-of-Things (IoT). The paper includes a non-exhaustive review of the state of the art of the different interfaces, protocols and standards of this architecture. The HLA has also been proposed as the basis of the European projects SCOTT (Secure Connected Trustable Things) for enhanced security and privacy in the IoT and InSecTT (Intelligent Secure Trustable Things) for the convergence of artificial intelligence (AI) and the IoT.
|
|
| 12. |
- Tovar, Eduardo, et al.
(författare)
-
Networked Embedded Systems for Active Flow Control in Aircraft
- 2012
-
Rapport (refereegranskat)abstract
- Abstract— Aerodynamic drag is known to be one of the factorscontributing more to increased aircraft fuelconsumption. Theprimary source of skin friction drag during flight is theboundary layer separation. This is the layer ofair movingsmoothly in the immediate vicinity of the aircraft. In this paperwe discuss a cyber-physical system approachable ofperforming an efficient suppression of the turbulent flow byusing a dense sensing deployment to detect the lowpressureregion and a similarly dense deployment of actuators tomanage the turbulent flow. With this concept, onlytheactuators in the vicinity of a separation layer are activated,minimizing power consumption and also the induced drag.
|
|
