Security in Building Automation Systems TU （安全建筑自动化系统图）.pdf

3622 IEEE TRANSACTIONS ON INDUSTRIAL ELECTRONICS, VOL. 57, NO. 11, NOVEMBER 2010 Security in Building Automation Systems Wolfgang Granzer, Fritz Praus, and Wolfgang Kastner, Member, IEEE Abstract—Building automation systems are traditionally con- cerned with the control of heating, ventilation, and air condition- ing, as well as lighting and shading, systems. They have their origin in a time where security has been considered as a side issue at best. Nowadays, with the rising desire to integrate security- critical services that were formerly provided by isolated subsys- tems, security must no longer be neglected. Thus, the development of a comprehensive security concept is of utmost importance. This paper starts with a security threat analysis and identifies the chal- lenges of providing security in the building automation domain. Afterward, the security mechanisms of available standards are thoroughly analyzed. Finally, two approaches that provide both secure communication and secure execution of possibly untrusted Fig. 1. Security attacks. control applications are presented. Index Terms—Building automation, embedded networks, inte- Integration also makes way for further improvement of the gration, security. traditional services. For example, although often not regarded as security critical, incorporating security countermeasures for I. INTRODUCTION AND MOTIVATION HVAC and lighting/shading services will prevent, among oth- UILDING AUTOMATION SYSTEMs (BASs) aim at im-