Security in Building Automation Systems

TLDR

Building automation systems traditionally manage HVAC, lighting, and shading, but security has historically been a secondary concern, and with the integration of security‑critical services it can no longer be ignored. The paper aims to develop a comprehensive security concept for building automation systems. The authors perform a threat analysis, evaluate existing standard security mechanisms, and propose two approaches that secure communication and enable execution of potentially untrusted control applications.

Abstract

Building automation systems are traditionally concerned with the control of heating, ventilation, and air conditioning, as well as lighting and shading, systems. They have their origin in a time where security has been considered as a side issue at best. Nowadays, with the rising desire to integrate security-critical services that were formerly provided by isolated subsystems, security must no longer be neglected. Thus, the development of a comprehensive security concept is of utmost importance. This paper starts with a security threat analysis and identifies the challenges of providing security in the building automation domain. Afterward, the security mechanisms of available standards are thoroughly analyzed. Finally, two approaches that provide both secure communication and secure execution of possibly untrusted control applications are presented.