Critical Infrastructure Security

Contact: Dr.-Ing. Aubrey-Derrick Schmidt

 

Application Center for Security aims to develop security, privacy and safety solutions for protecting Critical Infrastructures supporting modern industrial society. Application Center for Security follows the DAI-Labor philosophy Future in Touch, meaning that real-life products are developed in a Living Lab, which allows them to be experimented and evaluated in an open environment for researchers, industry and the public.

Critical Infrastructures, such as telecommunications, energy, transportation, health, education, water systems and emergency services, are key facilities of modern industrial society. These facilities currently undergo profound changes by employing ICT systems to decrease operational costs while increasing availability and efficiency.   Despite of their insecurity, standard IT platforms, TCP/IP Communications and Internet Access are being widely used in Supervisory Control and Data Acquisition (SCADA) and Distributed Control Systems (DCS) lying at the heart of these facilities. The threat exposure has increased further by interconnection of these systems with each other and to business networks. Furthermore, new developments in Ubiquitous Computing and Communication will pose new challenges that can not be met with conventional monolithic security and privacy approaches which depend on perimeter protection based on firewalls, VPN and classical intrusion detection and prevention systems.

Thus, Application Center for Security focuses on following questions: 

  • What are the security challenges that critical infrastructures of our modern industrial society face?
  • What security, privacy and safety solutions with what properties are required to cope with these challenges?
  • How to develop solutions that can find public acceptance? How to test and evaluate new solutions by including public opinion?

Application Center for Security has following development activities to solve above questions:

  • Network and Security Simulation
  • Grid and Data Security
  • Anomaly Detection and Early Warning
  • Security Solutions for Sensor Networks
  • Non-intrusive Security Solutions
  • Mobile Security