BACRank: Ranking building automation and control system components by business continuity impact

Herson Esquivel-Vargas*, Marco Caselli, Erik Tews, Doina Bucur, Andreas Peter

*Corresponding author for this work

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    Abstract

    Organizations increasingly depend on Building Automation and Control Systems (BACSs) to support their daily tasks and to comply with laws and regulations. However, BACSs are prone to disruptions caused by failures or active attacks. Given the role BACSs play in critical locations such as airports and hospitals, a comprehensive impact assessment methodology is required that estimates the effect of unavailable components in the system. In this paper, we present the foundations of the first impact assessment methodology for BACSs focused on business continuity. At the core of our methodology, we introduce a novel graph centrality measure called BACRank. We quantify the contribution of BACS components to different business activities. Moreover, we take functional dependencies among components into account to estimate indirect consequences throughout the infrastructure. We show the practical applicability of our approach on a real BACS deployed at a 5-story building hosting 375 employees on an international university campus. The experimental evaluation confirms that the proposed methodology successfully prioritizes the most relevant components of the system with respect to the business continuity perspective.

    Original languageEnglish
    Title of host publicationComputer Safety, Reliability, and Security
    Subtitle of host publication38th International Conference, SAFECOMP 2019, Proceedings
    EditorsAlexander Romanovsky, Elena Troubitsyna, Friedemann Bitsch
    PublisherSpringer Verlag
    Pages183-199
    Number of pages17
    ISBN (Electronic)978-3-030-26601-1
    ISBN (Print)978-3-030-26600-4
    DOIs
    Publication statusPublished - 8 Aug 2019
    Event38th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2019 - Radisson Blu Marina Palace Hotel, Turku, Finland
    Duration: 10 Sep 201913 Sep 2019
    Conference number: 38
    https://conferences.ncl.ac.uk/safecomp2019/

    Publication series

    NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
    Volume11698 LNCS
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349

    Conference

    Conference38th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2019
    Abbreviated titleSAFECOMP 2019
    CountryFinland
    CityTurku
    Period10/09/1913/09/19
    Internet address

    Fingerprint

    Automation
    Ranking
    Control System
    Control systems
    Industry
    Methodology
    Functional Dependency
    Centrality
    Airports
    Experimental Evaluation
    Estimate
    Business
    Quantify
    Infrastructure
    Attack
    Personnel
    Graph in graph theory

    Cite this

    Esquivel-Vargas, H., Caselli, M., Tews, E., Bucur, D., & Peter, A. (2019). BACRank: Ranking building automation and control system components by business continuity impact. In A. Romanovsky, E. Troubitsyna, & F. Bitsch (Eds.), Computer Safety, Reliability, and Security: 38th International Conference, SAFECOMP 2019, Proceedings (pp. 183-199). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11698 LNCS). Springer Verlag. https://doi.org/10.1007/978-3-030-26601-1_13
    Esquivel-Vargas, Herson ; Caselli, Marco ; Tews, Erik ; Bucur, Doina ; Peter, Andreas. / BACRank : Ranking building automation and control system components by business continuity impact. Computer Safety, Reliability, and Security: 38th International Conference, SAFECOMP 2019, Proceedings. editor / Alexander Romanovsky ; Elena Troubitsyna ; Friedemann Bitsch. Springer Verlag, 2019. pp. 183-199 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
    @inproceedings{49f6e03f9f434a2da9535d654626d4b6,
    title = "BACRank: Ranking building automation and control system components by business continuity impact",
    abstract = "Organizations increasingly depend on Building Automation and Control Systems (BACSs) to support their daily tasks and to comply with laws and regulations. However, BACSs are prone to disruptions caused by failures or active attacks. Given the role BACSs play in critical locations such as airports and hospitals, a comprehensive impact assessment methodology is required that estimates the effect of unavailable components in the system. In this paper, we present the foundations of the first impact assessment methodology for BACSs focused on business continuity. At the core of our methodology, we introduce a novel graph centrality measure called BACRank. We quantify the contribution of BACS components to different business activities. Moreover, we take functional dependencies among components into account to estimate indirect consequences throughout the infrastructure. We show the practical applicability of our approach on a real BACS deployed at a 5-story building hosting 375 employees on an international university campus. The experimental evaluation confirms that the proposed methodology successfully prioritizes the most relevant components of the system with respect to the business continuity perspective.",
    author = "Herson Esquivel-Vargas and Marco Caselli and Erik Tews and Doina Bucur and Andreas Peter",
    year = "2019",
    month = "8",
    day = "8",
    doi = "10.1007/978-3-030-26601-1_13",
    language = "English",
    isbn = "978-3-030-26600-4",
    series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
    publisher = "Springer Verlag",
    pages = "183--199",
    editor = "Alexander Romanovsky and Elena Troubitsyna and Friedemann Bitsch",
    booktitle = "Computer Safety, Reliability, and Security",
    address = "Germany",

    }

    Esquivel-Vargas, H, Caselli, M, Tews, E, Bucur, D & Peter, A 2019, BACRank: Ranking building automation and control system components by business continuity impact. in A Romanovsky, E Troubitsyna & F Bitsch (eds), Computer Safety, Reliability, and Security: 38th International Conference, SAFECOMP 2019, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11698 LNCS, Springer Verlag, pp. 183-199, 38th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2019, Turku, Finland, 10/09/19. https://doi.org/10.1007/978-3-030-26601-1_13

    BACRank : Ranking building automation and control system components by business continuity impact. / Esquivel-Vargas, Herson; Caselli, Marco; Tews, Erik; Bucur, Doina; Peter, Andreas.

    Computer Safety, Reliability, and Security: 38th International Conference, SAFECOMP 2019, Proceedings. ed. / Alexander Romanovsky; Elena Troubitsyna; Friedemann Bitsch. Springer Verlag, 2019. p. 183-199 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11698 LNCS).

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    TY - GEN

    T1 - BACRank

    T2 - Ranking building automation and control system components by business continuity impact

    AU - Esquivel-Vargas, Herson

    AU - Caselli, Marco

    AU - Tews, Erik

    AU - Bucur, Doina

    AU - Peter, Andreas

    PY - 2019/8/8

    Y1 - 2019/8/8

    N2 - Organizations increasingly depend on Building Automation and Control Systems (BACSs) to support their daily tasks and to comply with laws and regulations. However, BACSs are prone to disruptions caused by failures or active attacks. Given the role BACSs play in critical locations such as airports and hospitals, a comprehensive impact assessment methodology is required that estimates the effect of unavailable components in the system. In this paper, we present the foundations of the first impact assessment methodology for BACSs focused on business continuity. At the core of our methodology, we introduce a novel graph centrality measure called BACRank. We quantify the contribution of BACS components to different business activities. Moreover, we take functional dependencies among components into account to estimate indirect consequences throughout the infrastructure. We show the practical applicability of our approach on a real BACS deployed at a 5-story building hosting 375 employees on an international university campus. The experimental evaluation confirms that the proposed methodology successfully prioritizes the most relevant components of the system with respect to the business continuity perspective.

    AB - Organizations increasingly depend on Building Automation and Control Systems (BACSs) to support their daily tasks and to comply with laws and regulations. However, BACSs are prone to disruptions caused by failures or active attacks. Given the role BACSs play in critical locations such as airports and hospitals, a comprehensive impact assessment methodology is required that estimates the effect of unavailable components in the system. In this paper, we present the foundations of the first impact assessment methodology for BACSs focused on business continuity. At the core of our methodology, we introduce a novel graph centrality measure called BACRank. We quantify the contribution of BACS components to different business activities. Moreover, we take functional dependencies among components into account to estimate indirect consequences throughout the infrastructure. We show the practical applicability of our approach on a real BACS deployed at a 5-story building hosting 375 employees on an international university campus. The experimental evaluation confirms that the proposed methodology successfully prioritizes the most relevant components of the system with respect to the business continuity perspective.

    UR - http://www.scopus.com/inward/record.url?scp=85072851139&partnerID=8YFLogxK

    U2 - 10.1007/978-3-030-26601-1_13

    DO - 10.1007/978-3-030-26601-1_13

    M3 - Conference contribution

    AN - SCOPUS:85072851139

    SN - 978-3-030-26600-4

    T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

    SP - 183

    EP - 199

    BT - Computer Safety, Reliability, and Security

    A2 - Romanovsky, Alexander

    A2 - Troubitsyna, Elena

    A2 - Bitsch, Friedemann

    PB - Springer Verlag

    ER -

    Esquivel-Vargas H, Caselli M, Tews E, Bucur D, Peter A. BACRank: Ranking building automation and control system components by business continuity impact. In Romanovsky A, Troubitsyna E, Bitsch F, editors, Computer Safety, Reliability, and Security: 38th International Conference, SAFECOMP 2019, Proceedings. Springer Verlag. 2019. p. 183-199. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/978-3-030-26601-1_13