Cyber security risk to smart grids and intelligent buildings

ScienceDaily (Aug. 13, 2012) — Building owners and designers, and particularly members of the building services industry, are racing to implement intelligent buildings and smart grids, which are widely heralded as a boon in terms of both energy efficiency and facilities management. But many are overlooking the potential risk of malicious attacks on these highly networked control systems.

Writing in the latest issue of the journal Intelligent Buildings International, David Fisk of the Laing O'Rourke Centre for Systems Engineering and Innovation at Imperial College London warns that, as we have seen with the humble PC, the basic building blocks of intelligent buildings -- the process controllers that make up the distributed building management system (BMS) -- can be infected by malware, often through a 'backdoor' left ajar on a trusted network.

David Fisk notes that: "… the basic system -- for example, the bare minimum standby generators -- should normally be independent of the intelligent-building software (much as a warship still carries a sextant should the GPS be jammed)." And he warns:

"This is not current practice as far as can be discerned from existing ASHRAE and CIBSE standards."

Fisk's article, 'Cyber security, building automation, and the intelligent building' begins with a short history of the rise in intelligent control -- from the 1960s, when the only real threat was an irate engineer armed with a hammer, through the movement away from bespoke hardware and software to proprietary software such as the ubiquitous Windows system during the 1980s, to the post-9/11 emergence of the anonymous cyber-aggressor.

The middle section of the article then presents a review of a more recent attack, now known as Stuxnet, which demonstrated the wide-ranging havoc that could be caused by malicious software infecting plant controllers. This section also explains how such attacks now present a threat to the 'smart grid' and other open systems.

Finally, the article discusses how risks may be assessed and mitigated, using a hypothetical attack on the heating, ventilation and air-conditioning (HVAC) systems of a super-casino to illustrate the urgent need for the building systems design community to re-think traditional security strategies. As a minimum, building services professionals should deploy a 'whole-system design approach' and owners should plan for periods during which 'intelligence' is not available.

Share this story on Facebook, Twitter, and Google:

Other social bookmarking and sharing tools:

Story Source:

The above story is reprinted from materials provided by Taylor & Francis, via AlphaGalileo.

Note: Materials may be edited for content and length. For further information, please contact the source cited above.

Journal Reference:

David Fisk. Cyber security, building automation, and the intelligent building. Intelligent Buildings International, 2012; : 1 DOI: 10.1080/17508975.2012.695277

Note: If no author is given, the source is cited instead.

Disclaimer: Views expressed in this article do not necessarily reflect those of ScienceDaily or its staff.

View the original article here

Smart way of saving lives in natural disasters

ScienceDaily (Jan. 4, 2012) — Smartphones could help save hundreds of thousands of lives in the aftermath of a disaster or humanitarian crisis, research from University of Manchester academics has found.

Software developed by computer scientists could help to quickly and accurately locate missing people, rapidly identify those suffering from malnutrition and effectively point people towards safe zones simply by checking their phones.

It is hoped the smartphone technology could potentially not only help save lives but could also ease the financial and emotional burden on aid organisations.

The largest system developed by Dr Gavin Brown and his team Peter Sutton and Lloyd Henning in the Machine Learning and Optimisation group at The University of Manchester is the REUNITE mobile and web platform.

In the aftermath of a major disaster, aid workers typically interview people who have become separated from their families. These records are normally stored in paper form, which can be lost, damaged or illegible.

Although there are systems set up to solve this issue -- such as the public search facilities set up by charities such as the Red Cross -- there is no universal system to provide this vital task.

REUNITE records the initial interview using the smartphone, and uploads these onto a central server. These can then be accessed by trusted aid workers via computer away from the scene, who gather as much information as they can by liaising with other users in a similar manner to a social network, before passing details onto aid workers on the ground.

The interviews would be quickly transcribed into a web-searchable format which could be downloaded by relief workers on the ground, which can then relay the massage to survivors.

The unlimited amount of web users, called a 'crowd', would be a trusted network of individuals who access the information via an encrypted uplink -- which would address any issues of confidentiality.

As part of the same research, Dr Brown has also created software called 'Where's Safe', which quickly identifies safe areas for people to go to in the event of a natural disaster or terrorist attack.

Designed to replace the emergency radio broadcast system, which does not reach a large amount of people, the software allows people to find their nearest safe point simply by sending an SMS message.

Dr Brown's third software solution is HeightCatcher -- an innovative tool which can quickly calculate infants who are suffering from malnutrition and work out what quantity of fluids they need.

Levels of malnutrition are measured by Body Mass Index (BMI), which is calculated by a person's age, height and weight. The information is entered on a smartphone, which instantly calculates what food or fluids the child needs.

Dr Brown hopes the inventions could be of huge significance to victims of disaster as well as aid workers.

He said: "Our results have demonstrated that mobile intelligent systems can be deployed in low-power, high-risk environments, to the benefit of all involved.

"We believe the refugee aid community will be a strong beneficiary of such technology over the next few years."

Share this story on Facebook, Twitter, and Google:

Other social bookmarking and sharing tools:

Story Source:

The above story is reprinted from materials provided by University of Manchester.

Note: Materials may be edited for content and length. For further information, please contact the source cited above.

Note: If no author is given, the source is cited instead.

Disclaimer: Views expressed in this article do not necessarily reflect those of ScienceDaily or its staff.

View the original article here