| Approved
|
Pending +
|
| DueDate
|
1 November 2014 +
|
| Keywords
|
Risk analysis +
, Sensor Security +
, Sensornett +
, Industrial Automation +
|
| Methods
|
The tools and methods in this thesis are b … The tools and methods in this thesis are based on
* A set of scenario, describing the challenges
* A list of requirements being extracted from the scenarios
* A description and evaluation of technologies and tools being candidates for solutions
* A functional architecture/description of the envisaged system
* An implementation of the core concepts
* A demonstration of the solution
* An evaluation of the solution, including a critical review of the descisions taken earlier
* Conclusions
* Referencess taken earlier
* Conclusions
* References +
|
| Objective
|
The thesis focuses on the evaluation of to … The thesis focuses on the evaluation of tools and methodologies in the area of risk assessment with the aim to evaluate whether the tools/standards/methodologies are suitable for use in the areas of IACS. The thesis will also reach some conclusions on the applicability of selected suitable methodology based on evaluation criteria (if there are suitable ones that exist). If no suitable evaluation criteria exist, thesis will propose such criteria. Additionally, the student is expected to propose modifications to an existing methodology so that it is even more suitable for IACS.
The student will first conduct a state of the art investigation to get an overview over relevant risk assessment methodologies and tools. Based on a set of evaluation criteria, one or more methodologies and tools will be selected for further evaluation and analysis.
The state of the art investigation should include methodologies and best practices developed by the research/academic community, relevant International standards focusing IACS (e.g. ISA99/IEC 62443) as well as generic information security risk assessment or management standards (e.g. ISO 27000 series).In addition to International standards, the thesis will evaluate relevant information security guidelines and best practices proposed by organizations such as NIST, CERTs, ENISA etc. Regional standards such as Norwegian Oil and Gas guidelines (old OLF) should also be studied.
While evaluating risk assessment methodologies, the student may propose extensions or modifications to a selected suitable methodology in order to improve the methodology so that it is even more suitable for IACS.
The thesis will identify the most relevant risk assessment tools and will investigate thoroughly the available open source tools. Some of these tools may contain software components to assess risks. While performing the detailed evaluation works, this work will shed lights on how to use these tools and conduct a strength and weakness analysis.
The outcome of the thesis will be a detailed review of standards and tools from risk assessment point of view in the areas of Industrial Automation and Control Systems, and the evaluation of 1-2 specific packages.d the evaluation of 1-2 specific packages. +
|
| Pre-Knowledge
|
This thesis includes a reasonable amount of programming. The envisaged thesis is based on radio communications, thus expects the user to have followed at least two radio-related courses +
|
| Schedule
|
- Finalize the report +
|
| Supervisor
|
Mohammad Mushfiqur Rahman Chowdhury +
, Judith Rossebø +
, Josef Noll +
|
| ThesisStatus
|
Planned +
|
| Titel
|
Risk Assessment tool analysis for Industrial Automation and Control Systems +
|
| User
|
N.n. +
|
| Creation dateThis property is a special property in this wiki.
|
23 April 2014 08:44:22 +
|
| Has improper value forThis property is a special property in this wiki.
|
"Property:The_envisaged_time_schedule_(for_a_short_thesis/30_ECTS)_is:
:T0_0_starting_month,_T0+m_denotes_the_month_where_the_contribution_to_a_certain_chapter_shalle_be_finalized
:T0-T1:" cannot be used as a page name in this wiki.
|
| Categories |
Thesis +
|
| Modification dateThis property is a special property in this wiki.
|
7 January 2016 10:05:50 +
|
