Prioritized access control enabling weighted, fine-grained protection in cyber-physical systems

AbstractThis work aims to review literature related to the latest cyber-physical systems (CPS) for manufacturing in the revolutionary Industry 4.0 for a comprehensive understanding of the challenges, approaches, and used techniques in this domain. Different published studies on CPS for manufacturing in Industry 4.0 paradigms through 2010 to 2019 were searched and summarized. We, then, analyzed the studies at a different granularity level inspecting the title, abstract, and full text to include in the prospective study list. Out of 626 primarily extracted relevant articles, we scrutinized 78 articles as the prospective studies on CPS for manufacturing in Industry 4.0. First, we analyzed the articles’ context to identify the major components along with their associated fine-grained constituents of Industry 4.0. Then, we reviewed different studies through a number of synthesized matrices to narrate the challenges, approaches, and used techniques as the key-enablers of the CPS for manufacturing in Industry 4.0. Although the key technologies of Industry 4.0 are the CPS, Internet of Things (IoT), and Internet of Services (IoS), the human component (HC), cyber component (CC), physical component (PC), and their HC-CC, CC-PC, and HC-PC interfaces need to be standardized to achieve the success of Industry 4.0.

Download Full-text

CHERI Macaroons: Efficient, host-based access control for cyber-physical systems

2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) ◽

10.1109/eurospw51379.2020.00099 ◽

2020 ◽

Author(s):

Michael Dodson ◽

Alastair R. Beresford ◽

Alexander Richardson ◽

Jessica Clarke ◽

Robert N. M. Watson

Keyword(s):

Access Control ◽

Cyber Physical Systems ◽

Physical Systems

Download Full-text

Ananke

Proceedings of the VLDB Endowment ◽

10.14778/3430915.3430928 ◽

2020 ◽

Vol 14 (3) ◽

pp. 391-403

Author(s):

Dimitris Palyvos-Giannas ◽

Bastian Havers ◽

Marina Papatriantafilou ◽

Vincenzo Gulisano

Keyword(s):

Bipartite Graph ◽

Online Monitoring ◽

Cyber Physical Systems ◽

Parallel Analysis ◽

Data Streaming ◽

Physical Systems ◽

Fine Grained ◽

Provenance Data ◽

Source Data

Data streaming enables online monitoring of large and continuous event streams in Cyber-Physical Systems (CPSs). In such scenarios, fine-grained backward provenance tools can connect streaming query results to the source data producing them, allowing analysts to study the dependency/causality of CPS events. While CPS monitoring commonly produces many events, backward provenance does not help prioritize event inspection since it does not specify if an event's provenance could still contribute to future results. To cover this gap, we introduce Ananke , a framework to extend any fine-grained backward provenance tool and deliver a live bipartite graph of fine-grained forward provenance. With Ananke , analysts can prioritize the analysis of provenance data based on whether such data is still potentially being processed by the monitoring queries. We prove our solution is correct, discuss multiple implementations, including one leveraging streaming APIs for parallel analysis, and show Ananke results in small overheads, close to those of existing tools for fine-grained backward provenance.

Download Full-text

GeneaLog: Fine-grained data streaming provenance in cyber-physical systems

Parallel Computing ◽

10.1016/j.parco.2019.102552 ◽

2019 ◽

Vol 89 ◽

pp. 102552

Author(s):

Dimitris Palyvos-Giannas ◽

Vincenzo Gulisano ◽

Marina Papatriantafilou

Keyword(s):

Cyber Physical Systems ◽

Data Streaming ◽

Physical Systems ◽

Fine Grained

Download Full-text

A constraint and risk-aware approach to attribute-based access control for cyber-physical systems

Computers & Security ◽

10.1016/j.cose.2020.101802 ◽

2020 ◽

Vol 96 ◽

pp. 101802

Author(s):

Nuray Baltaci Akhuseyinoglu ◽

James Joshi

Keyword(s):

Access Control ◽

Cyber Physical Systems ◽

Physical Systems ◽

Attribute Based Access Control

Download Full-text

Efficient Medium Access Control for Cyber–Physical Systems With Heterogeneous Networks

IEEE Systems Journal ◽

10.1109/jsyst.2013.2253421 ◽

2015 ◽

Vol 9 (1) ◽

pp. 22-30 ◽

Cited By ~ 17

Author(s):

Sudip Misra ◽

P. Venkata Krishna ◽

V. Saritha ◽

Harshit Agarwal ◽

Lei Shu ◽

...

Keyword(s):

Access Control ◽

Medium Access Control ◽

Heterogeneous Networks ◽

Cyber Physical Systems ◽

Medium Access ◽

Physical Systems

Download Full-text

Secure Interoperability in Cyber-Physical Systems

Cyber Warfare and Terrorism ◽

10.4018/978-1-7998-2466-4.ch032 ◽

2020 ◽

pp. 521-542

Author(s):

Cristina Alcaraz ◽

Javier Lopez

Keyword(s):

Access Control ◽

Network Architecture ◽

Cyber Physical Systems ◽

The Internet ◽

Policy System ◽

Physical Systems ◽

Enforcement Policy ◽

Secure Network ◽

Secure Interoperability ◽

Authorized Access

Transparency in control transactions under a secure network architecture is a key topic that must be discussed when aspects related to interconnection between heterogeneous cyber-physical systems (CPSs) arise. The interconnection of these systems can be addressed through an enforcement policy system responsible for managing access control according to the contextual conditions. However, this architecture is not always adequate to ensure a rapid interoperability in extreme crisis situations, and can require an interconnection strategy that permits the timely authorized access from anywhere at any time. To do this, a set of interconnection strategies through the Internet must be studied to explore the ability of control entities to connect to the remote CPSs and expedite their operations, taking into account the context conditions. This research constitutes the contribution of this chapter, where a set of control requirements and interoperability properties are identified to discern the most suitable interconnection strategies.

Download Full-text