Abstract
This paper analyzes the problem and requirements of securely distributing software updates over the Internet,
to devices in an Industrial Control System (ICS) and more generally in Internet of Things (IoT) infrastructures
controlling a physical system, such as power grids and water supply systems. We present a novel approach
that allows to securely distribute software updates of different types, e.g., device firmware and customer applications,
and from sources of different type, e.g., device operators, device manufacturers and third-party library
providers. Unlike previous works on this topic, our approach keeps the device operator in control of the update
process, while ensuring both authenticity and confidentiality of the distributed software updates.
to devices in an Industrial Control System (ICS) and more generally in Internet of Things (IoT) infrastructures
controlling a physical system, such as power grids and water supply systems. We present a novel approach
that allows to securely distribute software updates of different types, e.g., device firmware and customer applications,
and from sources of different type, e.g., device operators, device manufacturers and third-party library
providers. Unlike previous works on this topic, our approach keeps the device operator in control of the update
process, while ensuring both authenticity and confidentiality of the distributed software updates.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the 9th International Conference on Information Systems Security and Privacy |
| Publisher | SciTePress |
| Pages | 698-705 |
| Number of pages | 8 |
| Volume | 1 |
| ISBN (Electronic) | 9789897586248 |
| DOIs | |
| Publication status | Published - 2023 Feb 22 |
| Externally published | Yes |
| Event | 9th International Conference on Information Systems Security and Privacy, ICIPSS 2023 - Lisbon, Portugal Duration: 2023 Feb 22 → 2023 Feb 24 |
Conference
| Conference | 9th International Conference on Information Systems Security and Privacy, ICIPSS 2023 |
|---|---|
| Country/Territory | Portugal |
| City | Lisbon |
| Period | 2023/02/22 → 2023/02/24 |
Subject classification (UKÄ)
- Computer Engineering
Free keywords
- Security
- Software Update
- Industrial Control Systems
- Internet of things