Forensic-related Application Security Controls for RHEL in Critical Infrastructure
dc.contributor.author | Bajramovic, Edita | |
dc.contributor.author | Lainer, Andreas | |
dc.contributor.editor | Eibl, Maximilian | |
dc.contributor.editor | Gaedke, Martin | |
dc.date.accessioned | 2017-08-28T23:46:57Z | |
dc.date.available | 2017-08-28T23:46:57Z | |
dc.date.issued | 2017 | |
dc.description.abstract | Industrial cyber security is an avid area of research. Incident response and forensic investigations are complex activities. Due to the complexity of critical infrastructures, such as Nuclear Power Plants (NPPs), preparation is vital. Manual approaches still tend to be favored mainly because of (physical) safety assurances. The tasks and actions required and the outcomes to expect need to be documented. Application Security Controls (ASCs) are a good way to document forensic controls for which an extended model is proposed. However, ASCs must be tested further on forensic applicability and there are also considerable alternatives. In terms of possible additional security measures and to apply the gained insights, one exemplary operational Instrumentation & Control (I&C) server system is analyzed in order to derive recommendations. | en |
dc.identifier.doi | 10.18420/in2017_101 | |
dc.identifier.isbn | 978-3-88579-669-5 | |
dc.identifier.pissn | 1617-5468 | |
dc.language.iso | en | |
dc.publisher | Gesellschaft für Informatik, Bonn | |
dc.relation.ispartof | INFORMATIK 2017 | |
dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-275 | |
dc.subject | application security controls | |
dc.subject | forensics | |
dc.subject | critical infrastructure | |
dc.subject | RHEL | |
dc.subject | standards | |
dc.title | Forensic-related Application Security Controls for RHEL in Critical Infrastructure | en |
gi.citation.endPage | 999 | |
gi.citation.startPage | 987 | |
gi.conference.date | 25.-29. September 2017 | |
gi.conference.location | Chemnitz | |
gi.conference.sessiontitle | 2nd GI/ACM Industry4.0 Security Standardisation Workshop on Industrial Automation and Control Systems (IACS) |
Dateien
Originalbündel
1 - 1 von 1