Date Published: February 2019
Comments Due:
Email Questions to:
Author(s)
Jeffrey Cichonski (NIST), Jeffrey Marron (NIST), Nelson Hastings (NIST), Jason Ajmo (MITRE), Rahmira Rufus (MITRE)
Announcement
The National Cybersecurity Center of Excellence (NCCoE) at NIST is proposing a project to protect building management systems’ IoT sensor networks. Our findings may be applicable to other industry sectors and are listed for consideration for inclusion as future NCCoE use cases. We will explore common components of sensor networks and the associated security requirements of those components for the secure functioning of the IoT sensor network. Detailed explorations of other considerations (e.g., physical security), while important, are outside the scope of this project.
These are the goals and objectives of the project:
- Serve as a building block for sensor networks in general, future IoT projects, or specific sensor network use cases.
- Establish a security architecture to protect a building management system sensor network by using standards and best practices, including the communications channel/network used to transmit sensor data to the back-end building control systems (hosts) for processing.
- Explore the cybersecurity controls to promote the reliability, integrity, and availability of building management system sensor networks.
- Exercise/test the cybersecurity controls of the building management system sensor network to verify that they mitigate the identified cybersecurity concerns/risks, and understand the performance implications of adding these controls to the building management system sensor network.
Please submit your feedback to help us shape and refine the scope of this project.
This document explores common components of sensor networks and the associated requirements for the secure functioning of the sensor network. For each component, the document lists exposed interfaces, applicable threats, and technologies that may be utilized to help ensure the security requirements. A mapping to relevant Categories and Subcategories of the Cybersecurity Framework is also included. Additionally, the document considers various scenarios applying the components of a sensor network and associated security requirements to a building management system.
This document explores common components of sensor networks and the associated requirements for the secure functioning of the sensor network. For each component, the document lists exposed interfaces, applicable threats, and technologies that may be utilized to help ensure the security requirements....
See full abstract
This document explores common components of sensor networks and the associated requirements for the secure functioning of the sensor network. For each component, the document lists exposed interfaces, applicable threats, and technologies that may be utilized to help ensure the security requirements. A mapping to relevant Categories and Subcategories of the Cybersecurity Framework is also included. Additionally, the document considers various scenarios applying the components of a sensor network and associated security requirements to a building management system.
Hide full abstract
Keywords
building management sensors; data integrity; device integrity; internet of things; IoT; networked sensors; sensors; sensor data; sensor security.
Control Families
Access Control; Assessment, Authorization and Monitoring; Configuration Management; Identification and Authentication; Risk Assessment
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
