Search

In this paper, we present a side-channel resilient moving target defence mechanism against power-/electromagnetic-based side-channel attacks. Recent countermeasures use fresh re-keying after every encryption/decryption process; this causes major overhead in synchronizing the communicating parties. In contrast to prior work, our mechanism integrates fresh re-keying and masking techniques at an interval, where these techniques are driven by the maximum number of side-channel leakage traces required towards a successful embedded attack. Hence, the mechanism tracks the effect of attacks on the number of traces, and consequently applies re-keying at suitable intervals to reduce the computational/communication overhead, while increasing the attack cost. The mechanism scalability was evaluated against an advanced attack model based on machine learning methods that reduces significantly the number of traces required for a successful attack under masking implementation.

Cyber physical assets are being widely deployed. An asset could be a device or object in Cyber physical system (CPS). Many of them are subjected to compromise due to insecure implementations and configuration. Existing authentication techniques are not effective in detecting compromised assets given the massive scale of deployment. In this paper, we present a system for detecting compromised CPS assets effectively. In contrast to prior work, we propose an asset authentication framework that uses device-specific and network information with weight vectors, called slanted fingerprints, to validate assets. In particular, we perform asset fingerprinting with environmental effects to detect the cyber-physical emulation attacks on authentication. The framework tracks the effect of changes in the physical environment on fingerprints and uses unique CPS environmental effects features to detect both cyber-physical emulation and advanced stealthy attacks.

Smart cities offer a variety of services to provide citizens with efficient transport, water distribution, crime prevention, and traffic control. Such services are personalized by automatically capturing, storing, and processing personally identifiable data. The disclosure of such data to a service provider raises privacy concerns for application users. As a result, research has recognized the need for privacy aware services in smart cities. In this paper we present PrivacyZones, a privacy awareness framework which requires the service provider to share meaningful features of the data collected by their application (such as the number of users in proximity to a location). Using this information an application user will know the potential privacy risk prior to sharing their data. The framework can also recommend the actions a user can take to mitigate privacy risks, such as when, where and what data to share with a service provider. We demonstrate how PrivacyZones could work for two services. First, a Hail-A-Taxi service, with real cell phone and taxi-cab GPS data from the Chinese city, Shenzhen. Second, a Get-A-Discount service with census-income data where inferred income level determines the type of discounts offered to users as they explore a city.

This paper describes a low-energy test-bed installed in a building that integrates an electrical microgrid and a thermal system. The test-bed is controlled by following a hierarchical control strategy ranging from local controllers of subsystems to power system coordination and energy optimization. Experimental results of the test-bed operation (both electrical and thermal side) are presented and some challenges for proper system operation (such as stability and seamless transition) are described.

A Building Automation System (BAS) aims to provide good user comfort within occupied zones in a building. One can enhance the functionality of a BAS through embedding advanced control strategies within a Wireless Sensor/Actuator Network (WSAN), and also make retrofit applications possible. However, control systems that are embedded in a WSAN can perform sub-optimally if the control system and WSAN are designed independently. In this context, we develop a co-design approach for embedding BAS code within a Network Control System. We compare our developed system for building lighting control with (a) a standard PI control method to empirically demonstrate a 19% reduction in energy use and 65% improvement in user comfort, and (b) an MPC strategy that uses only presence-based control, to show 25% reduction in energy use. Our approach also improves network delay and sensor battery usage by 68% over the PI baseline.

In embedded software development, model-driven design is well recognized. In this article we describe a compositional model-driven approach for auto-generating embedded code for improving the energy efficiency of building automation applications. We show how we can use a component-based hybrid-systems modelling framework to generate models for simulation and verification. Then, we auto-generate embeddable code from these models. We empirically demonstrate this approach using the hybrid-systems tool Charon, for the domain of energy-efficient lighting control for smart buildings. The paper provides a detailed description of the code generation steps and outlines some results obtained through a simple lighting example.

We propose a methodology for overcoming the current approach of writing diagnostics code for industrial automation applications after the system is designed, which results in significant extra effort/cost, and potential discrepancies between design and diagnostics output. We show how we can automatically generate diagnostics from a more complex simulation model. We show how a model-transformation framework can transform a hybrid-systems simulation model into a propositional-logic diagnostics model with appropriate transformation rules. We illustrate our approach with an example from the domain of control for building lighting systems.

Recently EPON has been appeared to introduce the convergence of low-cost Ethernet equipment and fiber infrastructure, it is appeared to be the best candidate for the next-generation access network. Auto-discovery process is an important process in EPON system. . Indeed, this paper provides a MAC design following the IEEE 802.3ah standard of the MPCP auto-discovery process at the ONU side. It describes as well the validation and verification steps using an OLT model and finally, the synthesis result are presented.

In order to develop an integrated system that can optimise building operations, all facets of monitoring, control and reconfiguration need to be integrated. To achieve this, we need to develop an integrated system model, together with associated sub-system interfaces. This links the low-level wireless/wired systems monitoring with multi-level control, building information management and user-preference inputs. In this paper we describe an integrated simulation platform that partially fulfils such objectives. We detail through a case study an integrated simulation platform allowing testing, refinement and optimization of the design at an early stage. The paper provides a detailed simulation results and outlines the future works.