The report describes the analysis of attack processes on computer systems by means of probabilistic graphic tools such as Bayesian networks. Various predictive and diagnostic analyses are presented for the identification of attacks in IT\/OT contexts and the defense of the system. The document also analyzes some of the cybersecurity aspects necessary to guarantee the resilience of IoT, Fog and Cloud infrastructures. The peculiarities of the different architectures have also been examined in terms of authentication, role management, securing the channel and the communication protocol.<\/p>\n","protected":false},"author":464,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[1315],"targets":[1317],"rapporti_tipologie":[762],"class_list":["post-195122","rapporti","type-rapporti","status-publish","hentry","tag-smart-grids-en","targets-research","rapporti_tipologie-report-en"],"acf":{"dont_show_hompage":true,"projects":{"ID":191051,"post_author":"464","post_date":"2024-07-10 16:51:29","post_date_gmt":"2024-07-10 14:51:29","post_content":"","post_title":"Application of Information Technology, Internet of Things, Peer-to-peer, to the electrical system in order to improve security and resilience","post_excerpt":"The project develops methods, tools, demonstrators and experiments to evaluate the application potential of the latest information and communication technologies for the benefit of the electro-energy system.","post_status":"publish","comment_status":"open","ping_status":"closed","post_password":"","post_name":"application-of-information-technology-internet-of-things-peer-to-peer-to-the-electrical-system-in-order-to-improve-security-and-resilience","to_ping":"","pinged":"","post_modified":"2024-08-09 15:59:29","post_modified_gmt":"2024-08-09 13:59:29","post_content_filtered":"","post_parent":0,"guid":"https:\/\/www.rse-web.it\/progetti\/application-of-information-technology-internet-of-things-peer-to-peer-to-the-electrical-system-in-order-to-improve-security-and-resilience\/","menu_order":0,"post_type":"progetti","post_mime_type":"","comment_count":"0","filter":"raw"},"order_posts":"","dont_show_search":false,"related_posts":false,"show_on_slider":false,"single_post_data":{"titolo_spot":"","post_content":"
An essential aspect for the correct functioning of electrical system control and monitoring applications is the ability to analyze and evaluate possible attack processes that target communications and components of the operational infrastructure. Often the attacker, starting from the corporate network (or in any case from an IT (Information Technology) host), is able to reach the OT (Operational Technology) systems through side movements and compromise of network nodes.<\/p>\n
Tools to study the evolution of attack processes are therefore needed in order to develop measures to intercept their intermediate steps and prevent their progress. The report presents an analysis methodology based on probabilistic graphic models such as Bayesian networks. The models allow preventive and diagnostic assessments to be performed in order to identify the criticality degree of each element of the system, the probability of compromise and the solutions to be implemented to improve the security of the infrastructure. Furthermore, if you know in advance the possible steps of the attacker in the attack process you can implement timely actions to deal with its effects.<\/p>\n
Regarding the measures needed to ensure the safety of the electricity and energy system, the cybersecurity aspects of emerging IoT (Internet of Things), Fog and Cloud Computing infrastructures are becoming increasingly important, as these paradigms are increasingly used by new architectures. However, along with clear advantages, these new technologies bring with them new vulnerabilities and pose new challenges in terms of cybersecurity.<\/p>\n
The following report lays the foundations for understanding the main features of the cybersecurity of these new paradigms, in order to identify which solutions can be applied in different environments, taking into account their peculiarities in terms of computational capacity, latency and number.<\/p>\n
In particular, in this report some solutions are analyzed to ensure the authorization aspects, in terms of role management, through attribute-based techniques, which are more suitable for emerging contexts than classic solutions. Solutions have also been evaluated to ensure secure communications, both by securing communication channels via VPN (Virtual Private Network), and by implementing security measures for communication protocols. The studies carried out in this line of activity represent the basis for new developments in the next two years of activity.<\/p>\n","link_estreno":false,"scarica_file":[{"download_option":"download","file_name":"Download Report","download":{"ID":105880,"id":105880,"title":"19012941-319135.pdf","filename":"19012941-319135.pdf","filesize":2224664,"url":"https:\/\/www.rse-web.it\/wp-content\/uploads\/2021\/03\/19012941-319135.pdf","link":"https:\/\/www.rse-web.it\/en\/rapporti\/19012941\/19012941-319135\/","alt":"","author":"464","description":"19012941-319135.pdf","caption":"","name":"19012941-319135","status":"inherit","uploaded_to":132869,"date":"2021-12-31 00:00:00","modified":"2021-03-17 12:50:24","menu_order":0,"mime_type":"application\/pdf","type":"application","subtype":"pdf","icon":"https:\/\/www.rse-web.it\/wp-includes\/images\/media\/document.png"}}],"button":{"text":"","link":""},"referente_group":false,"data_emissione":"2019-12-31","autori":"F. Garrone, R. Terruggia","rapporto":"","rif_rse":"19012941"},"satellite_post_url":""},"yoast_head":"\n