CT-ISG: Security for Building Automation Systems

这个项目的重点是建筑物的网络控制系统，通常称为楼宇自动化系统（BASs）。在现代“智能”建筑中，BASs越来越多地用于控制照明、暖通空调（即供暖、通风和空调）和（物理）安全，并将其功能扩展到包括资源定位和网状网络等高级功能。将这样的系统开放给企业网络和Internet会带来危害和恶意活动的重大风险，而好处是提供了灵活性、生存性和可负担性的新功能。网络化计算机控制系统提高了控制物理过程的便利性和功能性。这类系统的安全性通常是通过将控制网络与受损计算机隔离开来，但这种策略是有成本的，而且这种保护是不够的。更好的解决方案将取决于控制系统的类型及其使用环境，如车辆、输电网和工厂自动化。本研究项目首先考察了计算机安全中众所周知的技术可以专门用于改善BASs的连通性而不会使其暴露于过度风险的方式。具体来说，该项目将为商业BASs开发外围控制、隐私和内部威胁以及审计和入侵检测技术。这个项目的目标是表明，这种系统的外围控制可以有效地利用基于服务器的分层系统，在应用程序支持和控制系统命令处理之间划分责任。

This project focuses on network control systems for buildings, typically called Building Automation Systems (BASs). BASs are increasingly used for the control of lighting, HVAC (i.e., heating, ventilation, and air conditioning), and (physical) security, in modern "smart" buildings and are extending their functionality to include advanced features like resource location and mesh networking. Opening such systems to the enterprise network and Internet entails significant risks for compromise and malicious activities while the benefits offer new capabilities for flexibility, survivability, and affordability. Networked computer control systems enhance the convenience and functionality of controlling physical processes. Security of such systems is often by isolating the control network from compromised computers but there are costs to this strategy and this kind of protection is insufficient. Better solutions will depend upon the type of control system and the context of its usage such as for vehicles, power transmission grids and factory automation.This research project begins with an examination of the way in which well-known techniques in computer security can be specialized to improve the connectivity of BASs without exposing them to undue risk. Specifically, the project will develop techniques for perimeter control, privacy and insider threats, and audit and intrusion detection for commercial BASs. The objective of this project is to show that perimeter control for such systems can profitably exploit a tiered system based on servers that divide responsibility between application support and control-system command processing.