Safety

The concepts of public and private play a special role in connection with the digitalized society and thus with the ethical requirements that such a society places on cybersecurity. This is because the digitalization of society is shifting the boundaries between what can be described as public and private. Consequently, the relationship between freedom and surveillance is being put to the test. It is a question of (cyber-)ethics how far privacy should be restricted in favor of surveillance and security. (Only in German)

Manufacturing companies of all sizes have been a popular target for hackers and cyber criminals for years - and the trend is rising. In addition to security gaps in the IT systems, OT systems, i.e. operational technology, are increasingly being targeted by attackers in the course of digitalisation and networking. The consequence: companies should secure themselves as quickly as possible. Hans-Peter Bauer, Senior Vice President Cyber EMEA at BlackBerry, explains how this is possible. (Only in German)

The COVID-19 pandemic has highlighted the additional challenges that events face in terms of appropriate crowd management. This paper is dedicated analyzing these challenges and existing approaches for the safe operation of events during pandemics. Based on this, an innovative framework is presented that uses intelligent crowd analysis and is applicable to an environment with volatile groups. In addition, the specifiv use case of trade fair events is considered in this framework.

There is hardly any day without publishing news on digitization and industry 4.0 and their respective necessity. Risks and shortcomings of IT-security are as well current topics. The striking question on management level is, where is my company regarding IT-security? How can we get a guiding light into the complexity of all related terms? This article is an outcome of research activities at the University of Applied Sciences Middlehesse. It is meant to support management to identify the actual status of IT-security and identify possible shortfalls. Based on a maturity grade model IT-security is described by six aspects with five levels each. This will help to point out room for improvements

In a previous approach of Lager et al. [1], the development of knowledge, competence and role profiles of employee groups in the course of industry 4.0 was studied. Based on that, the role of the overlapping focus IT is to be examined more closely and the analysis is extended to the tactical level using the example of production planning. In addition, the effects of the need for increased IT competence in all areas of the manufacturing industry on the erosion of current role profile boundaries are presented.

The Industrial Internet of Things (IIoT) offers a multitude of opportunities in a wide variety of applications. Similar to the IoT, the high degree of distribution, the heterogeneity, size and dynamics of the network pose new challenges to the security of such systems. A pivot for security in IIoT is trusted identities of the participating subsystems. Common IT security approaches are often too costly and inflexible. Furthermore, mechanisms to disseminate trusted information and to ensure the authenticity of data and transactions are often required. The article describes concepts for dealing with these challenges and outlines suitable solutions as well as approaches from current research for the special features in the IIoT.

The IT-risks which factory infrastructures are exposed to, require a common view of IT-security and operational technology (OT) protection. In this context, the measures from office IT can only be transferred to the production area and production control to a limited extent. The requirements and protection goals for the equipment used and the networking between these components are too different. An integrated approach and continuous management of IT security helps to identify and implement targeted measures in a concerted manner.

Trends such as Industry 4.0 or the Internet of Things lead to increased networking and integration of various data in the production. At the same time, the increased networking posses challenges regarding security issues. Negative examples involve the unsecured connection of various programmable logic controllers (PLCs) that are reachable through the Internet. In part, but also inadvertently, there are additional risks for the production plant. The reasons are the comfortable maintenance of plants as well as using external support for complex problems.

The popularity of the Cloud rises, but there is still much insecurity in the IT-Security of a cloud solution. Companies want to be able to check, if the processes in the cloud are secure and trustworthy. This is possible with an external auditing system, which compares measured data with predefined rules. But there is a chance, that the measured data are manipulated on its way to the auditing system, before leaving the cloud. To prevent these threads, the measured data must be protected right after it is generated. This is possible with the forward integrity method, which builds a chain-of-trust for the measured data without need of a TPM.