Cyber-Physical Threat Intelligence for Critical Infrastructures Security

Modern critical infrastructures can be considered as large scale Cyber Physical Systems (CPS). Therefore, when designing, implementing, and operating systems for Critical Infrastructure Protection (CIP), the boundaries between physical security and cybersecurity are blurred. Emerging systems for Critical Infrastructures Security and Protection must therefore consider integrated approaches that emphasize the interplay between cybersecurity and physical security techniques. Hence, there is a need for a new type of integrated security intelligence i.e., Cyber-Physical Threat Intelligence (CPTI). This book presents novel solutions for integrated Cyber-Physical Threat Intelligence for infrastructures in various sectors, such as Industrial Sites and Plants, Air Transport, Gas, Healthcare, and Finance. The solutions rely on novel methods and technologies, such as integrated modelling for cyber-physical systems, novel reliance indicators, and data driven approaches including BigData analytics and Artificial Intelligence (AI). Some of the presented approaches are sector agnostic i.e., applicable to different sectors with a fair customization effort. Nevertheless, the book presents also peculiar challenges of specific sectors and how they can be addressed. The presented solutions consider the European policy context for Security, Cyber security, and Critical Infrastructure protection, as laid out by the European Commission (EC) to support its Member States to protect and ensure the resilience of their critical infrastructures. Most of the co-authors and contributors are from European Research and Technology Organizations, as well as from European Critical Infrastructure Operators. Hence, the presented solutions respect the European approach to CIP, as reflected in the pillars of the European policy framework. The latter includes for example the Directive on security of network and information systems (NIS Directive), the Directive on protecting European Critical Infrastructures, the General Data Protection Regulation (GDPR), and the Cybersecurity Act Regulation. The sector specific solutions that are described in the book have been developed and validated in the scope of several European Commission (EC) co-funded projects on Critical Infrastructure Protection (CIP), which focus on the listed sectors. Overall, the book illustrates a rich set of systems, technologies, and applications that critical infrastructure operators could consult to shape their future strategies. It also provides a catalogue of CPTI case studies in different sectors, which could be useful for security consultants and practitioners as well

Risk-based intervention profiling in complex environments (impacted by time-restricted conditions)

Security in the aviation environment is an evolving concept. Security risk profiling is an issue of significant importance in the aviation spectrum. This study examined the profiling undertaken on Australia’s bio-security border, with specific attention given to the Australian Quarantine Inspection Service (AQIS) and the officers that use risk-based profiling within the complex environment found on the border—and how effectiveness is impacted by time. Aviation security is a real and current issue for Australia and the international community as a whole. Given recent outbreaks, and the relative ease of international air travel, of such pests and diseases (SARS, Swine Flu, Avian Influenza, Foot and Mouth Disease) in countries around the globe, the risk assessment process at the border is of vital importance. Failure in this context could result in significant, critical impacts to the Australian environment and economy. This study examined the efficacy of border-profiling techniques, and how those techniques are impacted by time, behaviour and risk attitude under certain circumstances. The objective was to obtain an accurate empirical understanding of the impact, effectiveness and risk attitude in both officers and clients profiling interactions in the Australian bio-security border under certain circumstances. Those circumstances were placed in context of behaviour altering due to time restrictions. From the literature reviewed, as well as the results of the study, it is clear that there is an impact upon effectiveness given restrictions under certain conditions, such as time. This impact exposed incoming passengers to greater levels of scrutiny during busier months, in order to adequately intercept non-compliant individuals. Clearly, the time-restricted environment impacts the ideal profile. The farther from the perceived ideal, based on statistical profiles or not, the likelier it is that non-ideal objects would be considered for scrutiny. This unnecessary scrutiny is only exacerbated in periods of intense activity within the complex environment

Enhancing data and processes integration and interoperability in emergency situations: a SWS based emergency management system

In this paper we describe a powerful use case application in the area of emergency situations management in which to illustrate the benefits of a system based on Semantic Web Services (SWS), through the automation of the business processes involved. After creating Web services to provide spatial data to third parties through the Internet, semantics and domain ontologies were added to represent the business processes involved, allowing: ease of access and combination of heterogeneous data from different providers; and automatic discovery, access and composition to perform more complex tasks. In this way, our prototype contributes to better management of emergency situations by those responsible. The work described is supported by the DIP (Data, Information and Process Integration with Semantic Web Services) project. DIP (FP6 � 507483), an Integrated Project funded under the European Union�s IST programme

Cyber-Physical Threat Intelligence for Critical Infrastructures Security

Modern critical infrastructures can be considered as large scale Cyber Physical Systems (CPS). Therefore, when designing, implementing, and operating systems for Critical Infrastructure Protection (CIP), the boundaries between physical security and cybersecurity are blurred. Emerging systems for Critical Infrastructures Security and Protection must therefore consider integrated approaches that emphasize the interplay between cybersecurity and physical security techniques. Hence, there is a need for a new type of integrated security intelligence i.e., Cyber-Physical Threat Intelligence (CPTI). This book presents novel solutions for integrated Cyber-Physical Threat Intelligence for infrastructures in various sectors, such as Industrial Sites and Plants, Air Transport, Gas, Healthcare, and Finance. The solutions rely on novel methods and technologies, such as integrated modelling for cyber-physical systems, novel reliance indicators, and data driven approaches including BigData analytics and Artificial Intelligence (AI). Some of the presented approaches are sector agnostic i.e., applicable to different sectors with a fair customization effort. Nevertheless, the book presents also peculiar challenges of specific sectors and how they can be addressed. The presented solutions consider the European policy context for Security, Cyber security, and Critical Infrastructure protection, as laid out by the European Commission (EC) to support its Member States to protect and ensure the resilience of their critical infrastructures. Most of the co-authors and contributors are from European Research and Technology Organizations, as well as from European Critical Infrastructure Operators. Hence, the presented solutions respect the European approach to CIP, as reflected in the pillars of the European policy framework. The latter includes for example the Directive on security of network and information systems (NIS Directive), the Directive on protecting European Critical Infrastructures, the General Data Protection Regulation (GDPR), and the Cybersecurity Act Regulation. The sector specific solutions that are described in the book have been developed and validated in the scope of several European Commission (EC) co-funded projects on Critical Infrastructure Protection (CIP), which focus on the listed sectors. Overall, the book illustrates a rich set of systems, technologies, and applications that critical infrastructure operators could consult to shape their future strategies. It also provides a catalogue of CPTI case studies in different sectors, which could be useful for security consultants and practitioners as well

Unified Theory of Relativistic Identification of Information in a Systems Age: Proposed Convergence of Unique Identification with Syntax and Semantics through Internet Protocol version 6

Unique identification of objects are helpful to the decision making process in many domains. Decisions, however, are often based on information that takes into account multiple factors. Physical objects and their unique identification may be one of many factors. In real-world scenarios, increasingly decisions are based on collective information gathered from multiple sources (or systems) and then combined to a higher level domain that may trigger a decision or action. Currently, we do not have a globally unique mechanism to identify information derived from data originating from objects and processes. Unique identification of information, hence, is an open question. In addition, information, to be of value, must be related to the context of the process. In general, contextual information is of greater relevance in the decision making process or in decision support systems. In this working paper, I shall refer to such information as decisionable information. The suggestion here is to utilize the vast potential of internet protocol version six (IPv6) to uniquely identify not only objects and processes but also relationships (semantics) and interfaces (sensors). Convergence of identification of diverse entities using the globally agreed structure of IPv6 offers the potential to identify 3.4x10[subscript 38] instances based on the fact that the 128-bit IPv6 structure can support 3.4x10[subscript 38] unique addresses. It is not necessary that all instances must be connected to the internet or routed or transmitted simply because an IP addressing scheme is suggested. This is a means for identification that will be globally unique and offers the potential to be connected or routed via the internet. In this working paper, scenarios offer [1] new revenue potential from data routing (P2P traffic track and trace) for telecommunication industries, [2] potential for use in healthcare and biomedical community, [3] scope of use in the semantic web structure by transitioning URIs used in RDF, [4] applications involving thousands of mobile ad hoc sensors (MANET) that demand dynamic adaptive auto-reconfiguration. This paper presents a confluence of ideas

A Building Information Modeling (BIM)-centric Digital Ecosystem for Smart Airport Life Cycle Management

An increasing number of new airport infrastructure construction and improvement projects are being delivered in today\u27s modern world. However, value creation is a recurring issue due to inefficiencies in managing capital expenditures (CapEx) and operating expenses (OpEx), while trying to optimize project constraints of scope, time, cost, quality, and resources. In this new era of smart infrastructure, digitalization transforms the way projects are planned and delivered. Building Information Modeling (BIM) is a key digital process technique that has become an imperative for today\u27s Architecture, Engineering, Construction and Operations (AECO) sector. This research suggests a BIM-centric digital ecosystem by detailing technical and strategic aspects of Airport BIM implementation and digital technology integration from a life cycle perspective. This research provides a novel approach for consistent and continuous use of digital information between business and functional levels of an airport by developing a digital platform solution that will enable seamless flow of information across functions. Accordingly, this study targets to achieve three objectives: 1- To provide a scalable know-how of BIM-enabled digital transformation; 2- To guide airport owners and major stakeholders towards converging information siloes for airport life cycle data management by an Airport BIM Framework; 3- To develop a BIM-based digital platform architecture towards realization of an airport digital twin for airport infrastructure life cycle management. Airport infrastructures can be considered as a System of Systems (SoS). As such, Model Based Systems Engineering (MBSE) with Systems Modeling Language (SysML) is selected as the key methodology towards designing a digital ecosystem. Applying MBSE principles leads to forming an integrating framework for managing the digital ecosystem. Furthermore, this research adopts convergent parallel mixed methods to collect and analyze multiple forms of data. Data collection tools include extensive literature and industry review; an online questionnaire; semi-structured interviews with airport owner parties; focus group discussions; first-hand observations; and document reviews. Data analysis stage includes multiple explanatory case study analyses, thematic analysis, project mapping, percent coverage analysis for coded themes to achieve Objective 1; thematic analysis, cluster analysis, framework analysis, and non-parametric statistical analysis for Objective 2; and qualitative content analysis, non-parametric statistical analysis to accomplish Objective 3. This research presents a novel roadmap toward facilitation of smart airports with alignment and integration of disruptive technologies with business and operational aspects of airports. Multiple comprehensive case study analyses on international large-hub airports and triangulation of organization-level and project-level results systematically generate scalable technical and strategic guidelines for BIM implementation. The proposed platform architecture will incentivize major stakeholders for value-creation, data sharing, and control throughout a project life cycle. Introducing scalability and minimizing complexity for end-users through a digital platform approach will lead to a more connected environment. Consequently, a digital ecosystem enables sophisticated interaction between people, places, and assets. Model-driven approach provides an effective strategy for enhanced decision-making that helps optimization of project resources and allows fast adaptation to emerging business and operational demands. Accordingly, airport sustainability measures -economic vitality, operational efficiency, natural resources, and social responsibility- will improve due to higher levels of efficiency in CapEx and OpEx. Changes in business models for large capital investments and introducing sustainability to supply chains are among the anticipated broader impacts of this study

An ontology-based spatial group decision support system for site selection application

This paper presents a new ontology-based multicriteria spatial group decision support system (GDSS) dedicated to site selection problems. Site selection is one of the most complex problems in the construction of a new building. It presents a crucial problem in terms of selecting the appropriate site among a group of decision makers with multiple alternatives (sites); in addition, the site must satisfy several criteria. To deal with this, the present paper introduces an ontology based multicriteria analysis method to solve semantic heterogeneity in vocabulary used by participants in spatial group decision support systems. The advantages of using ontology in GDSS are many: i) it enables the integration of heterogeneous sources of data available on the web and ii) it enables to facilitate meaning and sharing of data used in GDSS by participants. In order to facilitate cooperation and collaboration between participants in GDSS, our work aims to apply ontology at the model's structuration phase. The proposed system has been successfully implemented and exploited for a personalized environment

MusA: Using Indoor Positioning and Navigation to Enhance Cultural Experiences in a museum

In recent years there has been a growing interest into the use of multimedia mobile guides in museum environments. Mobile devices have the capabilities to detect the user context and to provide pieces of information suitable to help visitors discovering and following the logical and emotional connections that develop during the visit. In this scenario, location based services (LBS) currently represent an asset, and the choice of the technology to determine users' position, combined with the definition of methods that can effectively convey information, become key issues in the design process. In this work, we present MusA (Museum Assistant), a general framework for the development of multimedia interactive guides for mobile devices. Its main feature is a vision-based indoor positioning system that allows the provision of several LBS, from way-finding to the contextualized communication of cultural contents, aimed at providing a meaningful exploration of exhibits according to visitors' personal interest and curiosity. Starting from the thorough description of the system architecture, the article presents the implementation of two mobile guides, developed to respectively address adults and children, and discusses the evaluation of the user experience and the visitors' appreciation of these application

The Penetration of Internet of Things in Robotics: Towards a Web of Robotic Things

As the Internet of Things (IoT) penetrates different domains and application areas, it has recently entered also the world of robotics. Robotics constitutes a modern and fast-evolving technology, increasingly being used in industrial, commercial and domestic settings. IoT, together with the Web of Things (WoT) could provide many benefits to robotic systems. Some of the benefits of IoT in robotics have been discussed in related work. This paper moves one step further, studying the actual current use of IoT in robotics, through various real-world examples encountered through a bibliographic research. The paper also examines the potential ofWoT, together with robotic systems, investigating which concepts, characteristics, architectures, hardware, software and communication methods of IoT are used in existing robotic systems, which sensors and actions are incorporated in IoT-based robots, as well as in which application areas. Finally, the current application of WoT in robotics is examined and discussed

Outdoor-Indoor tracking systems through geomatic techniques: data analysis for marketing and safety management

Negli ultimi decenni, l'utilizzo di sistemi di gestione delle informazioni nel trattamento dei dati edilizi ha portato a cambiamenti radicali nei metodi di produzione, documentazione e archiviazione dei dati. Dato il crescente interesse per i dati e la loro gestione, l'obiettivo di questa tesi è quello di creare un flusso di lavoro efficace e chiaro a partire dai rilievi geomatici in un'ottica di miglioramento dei dati raccolti sul territorio, sugli edifici circostanti e su quelli relativi al comportamento umano, in modo che possano essere meglio sfruttati e integrati in modelli di gestione intelligenti. Come primo passo, questa tesi mira a comprendere i limiti dell'interoperabilità e dell'integrazione dei dati nei GIS. Per promuovere l'interoperabilità dei dati GIS, è necessario analizzare i metodi di conversione nei diversi modelli di archiviazione dei dati, come CityGML e IndoorGML, definendo un dominio ontologico. Questo ha portato alla creazione di un nuovo modello arricchito, basato sulle connessioni tra i diversi elementi del modello urbano in GIS. Il secondo passo consiste nel raccogliere tutti i dati tradotti in un database a grafo sfruttando il web semantico. Il risultato offrirà vantaggi sostanziali durante l'intero ciclo di vita del progetto. Questa metodologia può essere applicata anche al patrimonio culturale, dove la gestione delle informazioni gioca un ruolo fondamentale. Un altro lavoro di ricerca è stato quello di sviluppare un sistema di gestione SMART per le attività di conservazione dei borghi storici attraverso la gestione di tipologie eterogenee di dati, dal rilievo alla documentazione tecnica. Il flusso di lavoro è stato strutturato come segue: (i) acquisizione dei dati; (ii) modellazione 3D; (iii) modellazione della conoscenza; (iv) modellazione della gestione SMART. Questa ricerca apre la strada allo sviluppo di una piattaforma web in cui importare i dati GIS per un approccio di digital twin. Tutte le ricerche svolte fino a questo punto sono state finalizzate a comprendere la capacità di creare modelli e sistemi informativi intelligenti per capire la fattibilità di ospitare dati eterogenei che potrebbero essere inclusi in futuro. Il passo successivo consiste nel comprendere il comportamento umano in uno spazio. Finora sono pochi i lavori di ricerca che si occupano di sistemi di mappatura e posizionamento che tengono conto sia degli spazi esterni che di quelli interni. Questo argomento, anche se ha pochi articoli di ricerca, rappresenta un aspetto cruciale per molte ragioni, soprattutto quando si tratta di gestire la sicurezza degli edifici danneggiati. Angelats e il suo gruppo di ricerca al CTTC hanno lavorato su questo aspetto, fornendo un sistema in grado di seguire in tempo reale le persone dall'esterno all'interno di spazi chiusi e viceversa. L'uso di sensori GNSS combinato con l'odometria inerziale visiva fornisce una traiettoria continua senza perdere il percorso seguito dall'utente monitorato. Una parte di questa tesi si è concentrata sul miglioramento della traiettoria finale ottenuta con il sistema appena descritto, effettuando test sulla traiettoria esterna del GNSS per capire il comportamento della traiettoria quando si avvicina agli edifici o quando l'utente si sposta in indoor. L'ultimo aspetto su cui si concentrerà la tesi è il tracciamento delle persone in ambienti chiusi. Il comportamento umano è al centro di numerosi studi in diversi campi, come quello scientifico, sociale ed economico. A differenza del precedente caso di studio sul tracciamento delle persone in aree esterne/interne, l'obiettivo è stato quello di raccogliere informazioni sul posizionamento dinamico delle persone in ambienti indoor, sulla base del segnale WiFi. Verrà effettuata una breve analisi dei dati per dimostrare il corretto funzionamento del sistema, per sottolineare l'importanza della conoscenza dei dati e l'uso che se ne può fare.In the last decades, the use of information management systems in the building data processing led to radical changes to the methods of data production, documentation and archiving. Given the ever-increasing interest in data and their management, the aim of this thesis is to create an effective and clear workflow starting from geomatic surveys in a perspective of improving the collected data on the territory, surrounding buildings and those related to human behaviour so they can be better exploited and integrated into smart management models As first step this thesis aims to understand the limits of data interoperability and integration in GIS filed. Before that, the data must be collected as raw data, then processed and interpret in order to obtain information. At the end of this first stage, when the information is well organized and can be well understanded and used it becomes knowledge. To promote the interoperability of GIS data, it is necessary at first to analyse methods of conversion in different data storage models such as CityGML and IndoorGML, defining an ontological domain. This has led to the creation of a new enriched model, based on connections among the different elements of the urban model in GIS environment, and to the possibility to formulate queries based on these relations. The second step consists in collecting all data translated into a specific format that fill a graph database in a semantic web environment, while maintaining those relationships. The outcome will offer substantial benefits during the entire project life cycle. This methodology can also be applied to cultural heritage where the information management plays a key role. Another research work, was to develop a SMART management system for preservation activities of historical villages through the management of heterogeneous types of data, from the survey to the technical documentation. The workflow was structured as follows: (i) Data acquisition; (ii) 3D modelling; (iii) Knowledge modelling; (iv) SMART management modelling. This research paves the way to develop a web platform where GIS data would be imported for a digital twin approach. All the research done up to this point was to understand the capability of creating smart information models and systems in order to understand the feasibility to host heterogeneous data that may be included in the future. The next step consist of understanding human behaviour in a space. So far only a few research papers are addressed towards mapping and positioning systems taking into account both outdoor and indoor spaces. This topic, even though it has few research articles, represents a crucial aspect for many reasons, especially when it comes to safety management of damaged building. Angelats and his research team at CTTC have been working on this aspect providing a system able to track in real time people from outdoor to indoor areas and vice-versa. The use of GNSS sensors combined with Visual Inertial Odometry provide a continuous trajectory without losing the path followed by the monitored user. A part of this thesis focused on enhancing the final trajectory obtained with the described system above, carrying out tests on the outdoor trajectory of GNSS in order to understand behaviour of the trajectory when it gets close to buildings or when the user moves indoor. The last aspect this thesis will focus on is the tracking of people indoor. Human behaviour is at the centre of several studies in different fields such as scientific subjects, social and economics. Differently from the previous case study of tracking people in outdoor/indoor areas, the scope was to collect information about the dynamic indoor positioning of people, based on the WiFi signal. A brief analysis of the data will be made to demonstrate the correct functioning of the system, to emphasise the importance of data knowledge and the use that can be made of it