Security for BASs (Building Automation Systems)

Building Automation Systems (BASs) support facilities management by connecting building actuators and sensors to data networks and enabling computer control. Such systems have great potential for applications, but many of these applications open new security risks because they increase the attack surface of the BAS. This project is developing security architectures and principles for BAS middleware, with a focus on strategies for limiting the risks in connecting the BAS to an enterprise information system.

Publications

Collaborative Recommender Systems for Building Automation,
Michael LeMay, Jason J. Haas, and Carl A. Gunter.
IEEE Hawaii International Conference on System Sciences (HICSS '09), Waikola, Hawaii, January 2009. [PPT] [BIB]

An Integrated Architecture for Demand Response Communications and Control (awarded best paper),
Michael LeMay, Rajesh Nelli, George Gross, and Carl A. Gunter.
IEEE Hawaii International Conference on System Sciences (HICSS '08), Waikola, Hawaii, January 2008. [PPT] [BIB]

Improving Multi-Tier Security Using Redundant Authentication
Jodie P. Boyer, Ragib Hasan, Lars E. Olson, Nikita Borisov, Carl A. Gunter and David Raila
ACM Computer Security Foundations Workshop (CSAW '07) Fairfax, VA, November2007. [PPT] [BIB] [PSTR]

PolicyMorph: Interactive Policy Transformations for a Logical Attribute-Based Access Control Framework,
Michael LeMay, Omid Fatemieh, and Carl A. Gunter.
ACM Symposium on Access Control Models And Technologies (SACMAT '07), Sophia Antipolis, France, Jun 2007. [PPT] [BIB]

Privacy Sensitive Location Information Systems in Smart Buildings,
Jodie P. Boyer, Kaijun Tan and Carl A. Gunter.
Springer Security in Pervasive Computing (SPC '06), LNCS, pages 149-164, York, UK, April 2006. [PPT ][BIB]

Related Resources

BAM White Paper
Janus's Map
OBIX Overview Slides
Risk Analysis Presentation
Monitoring and Surveillance , Lecture by Carl Gunter for UIUC course CS563.