IoTSec:IoTSec Consortium ITS 2017

From its-wiki.no

Revision as of 10:54, 1 September 2017 by Josef.Noll (Talk | contribs)

Jump to: navigation, search
Security in IoT for Smart Grids
Home Research Security Centre Publications Student corner About
English-Language-icon.png


IoTSec:IoTSec Consortium ITS 2017

Title IoTSec Consortium ITS 2017
Place ITS-UiO
Date, Time 2017/08/30, 1000-1600
Contact Person Cristian
Participants Cristian, Heidi Tuiskula, Håkon Duus, Josef Noll, Stian LøvoldStian Løvold, Peder Aursand, Habtamu Abie, Manish Shrestha, Shukun Tokas, Adam Szekeres, Konstantin Lenchik
related to Project IoTSec
Keywords
this page was created by Special:FormEdit/Meeting, and can be edited by Special:FormEdit/Meeting/IoTSec:IoTSec Consortium ITS 2017
Category:Meeting


Participants

Note that the Google forms take some time (many minutes and refreshes) before you can see your name listed.


If you have not done so already, please register through

Introduction

For presenting please announce yourself to the organizer.

Logistics

The Institut for Technology Systems (ITS) of the University of Oslo (http://its.uio.no) is located in the Building of UNIK, Gunnar Randers vei 19, 2027 Kjeller.

By public transport you either take the train to Lillestrøm, and then "whatever" bus going to Kjeller. Closest bus stop is "Forskningsparken (Skedsmo)".
Alternatively take a bus going directly from Oslo to Kjeller. ITS has also an own bus schedules for students coming from Ifi to Kjeller, the schedule is available on http://its.uio.no

Networks:

  • UNIK_Apple
  • Eduroam

Agenda and Minutes

Minutes of the meeting IoTAdmin:20170030MeetingITS_Notes

Agenda 30August2017

Under Construction Send in your suggestions: Security Ontologies, Topics for Operators, Workshop results from Remmen workshop, Security developments, Trends in Security (1hour)

10:00 Welcome (Christian)
10:15 Presentations from Partners
10:15 Adam Szekeres on Updates on Human modelling for Security
10:30 Manish Shrestha on Security Classification for Smart Grid
11:00 coffee break
11:30 Peder Aursand on An evolutionary game for confidentiality attacks on an Advanced Metering Infrastructure
12:00 Lunch
13:00 Feedback from industry on challenges for the Smart Grid Security Centre
14:00 Konstantin Lenchik on Updates on IoTSec Ecosystem
14:30 Coffee-break
15:00 Ongoing trends, Preparation of 2nd year review,
revisit of project partner activities,
Security hub, interactions with Digital Norway (Toppindustrisenteret), Energy Norway
Deliverables
16:00 Finishing

 PresenterPresentation File
An evolutionary game for confidentiality attacksPeder AursandClick to Open
Analysis of IoT Sec EcosystemKonstantin LenchikClick to Open
Human modeling for IoTSecAdam SzekeresClick to Open
Security ClassificationManish ShresthaClick to Open
Topics for Master Thesis related to Security in IoTJosef NollClick to Open


Other Ideas/Follow up

The success of the Industrial Workshop on the Smart Grid Security Centre initiated the discuss on dedicated workshops with a focus on work

Topics for IoTSec Workmeetings

During the IoTSec meeting in August 2017 we decided to establish monthly meetings with a specific topic. The identified areas were:

1. Human - Technological Ecosystem

1.1 Organisational aspects: security focus, education, ...
1.2 Technology aspects: Reference architecture, information flow, security/privacy handling
1.3 Human-Technology aspects

2. Ecosystem and Partners

based on the D4.1.1 report from Konstantin, addressing
2.1 The ecosystem for the Smart Grid Security Centre (SGSC),
e.g. NEK, IKT Norge, Energi Norge, Digital Norway, and
examples of services for the SGSC, e.g. meeting place, collaboration platform
2.2 The contacts to authorities like NVE, Datatilsynet, NISK...
2.3 The ecosystem for DSOs
Note: we should build small teams and visit the various individuals

3. Real system analysis

based on security analysis and white paper from NR in collaboration with a DSO, including the security classes established by Manish:


from high-level recommendations
scenarios for dynamic and semantic attribute-based access control (S-ABAC)

Note on 3. Real system analysis

  • NVE and Datatilsynet are the two main authorities, who might give fines for non-compliance with respect to security and privacy
  • Security handlingsplan should address: security analysis, security check and gap analysis
  • The SGSC can be a mediator for discussion between NVE, DSOs and academia

4. Ontologies for semantic assessment

security ontology as basis for our work
privacy labelling

5. Energy modelling

together with e.g. eSmart Systems and UiO Energy
addressing grid stability
applying e.g. game theory

All partners are asked to add ideas and take ownership of workshops

Action Items