Safety

Artificial Intelligence (AI) can make a major contribution to the future viability of our economy and society—whether by improving existing processes or new products and services that promise greater efficiency, more robust structures and more climate protection. At present, however, SMEs in particular are still reluctant to use AI systems. The frequently cited reason is that data protection hurdles appear to be too high. This article discusses the opportunities of data-based value creation. The central question is how AI applications in industry can generate economic added value from data while maintaining data protection and security.

The number of successful cyber attacks on industrial manufacturing is constantly increasing due to the growth of digitalization and networking. IT security certifications are an effective means against these attacks and at the same time create confidence in and comparability of IT security about production and IT products. This article compares certification standards such as ISO/IEC 15408 - Common Criteria (CC) and specific standards for mobile communications (including NESAS CCS-GI), of GSM Association (GSMA) and 3rd Generation Partnership Project (3GPP), for testing depth and efficiency. (Only in German)

The concepts of public and private play a special role in connection with the digitalized society and thus with the ethical requirements that such a society places on cybersecurity. This is because the digitalization of society is shifting the boundaries between what can be described as public and private. Consequently, the relationship between freedom and surveillance is being put to the test. It is a question of (cyber-)ethics how far privacy should be restricted in favor of surveillance and security. (Only in German)

Manufacturing companies of all sizes have been a popular target for hackers and cyber criminals for years - and the trend is rising. In addition to security gaps in the IT systems, OT systems, i.e. operational technology, are increasingly being targeted by attackers in the course of digitalisation and networking. The consequence: companies should secure themselves as quickly as possible. Hans-Peter Bauer, Senior Vice President Cyber EMEA at BlackBerry, explains how this is possible. (Only in German)

The COVID-19 pandemic has highlighted the additional challenges that events face in terms of appropriate crowd management. This paper is dedicated analyzing these challenges and existing approaches for the safe operation of events during pandemics. Based on this, an innovative framework is presented that uses intelligent crowd analysis and is applicable to an environment with volatile groups. In addition, the specifiv use case of trade fair events is considered in this framework.

There is hardly any day without publishing news on digitization and industry 4.0 and their respective necessity. Risks and shortcomings of IT-security are as well current topics. The striking question on management level is, where is my company regarding IT-security? How can we get a guiding light into the complexity of all related terms? This article is an outcome of research activities at the University of Applied Sciences Middlehesse. It is meant to support management to identify the actual status of IT-security and identify possible shortfalls. Based on a maturity grade model IT-security is described by six aspects with five levels each. This will help to point out room for improvements

In a previous approach of Lager et al. [1], the development of knowledge, competence and role profiles of employee groups in the course of industry 4.0 was studied. Based on that, the role of the overlapping focus IT is to be examined more closely and the analysis is extended to the tactical level using the example of production planning. In addition, the effects of the need for increased IT competence in all areas of the manufacturing industry on the erosion of current role profile boundaries are presented.

The Industrial Internet of Things (IIoT) offers a multitude of opportunities in a wide variety of applications. Similar to the IoT, the high degree of distribution, the heterogeneity, size and dynamics of the network pose new challenges to the security of such systems. A pivot for security in IIoT is trusted identities of the participating subsystems. Common IT security approaches are often too costly and inflexible. Furthermore, mechanisms to disseminate trusted information and to ensure the authenticity of data and transactions are often required. The article describes concepts for dealing with these challenges and outlines suitable solutions as well as approaches from current research for the special features in the IIoT.

The IT-risks which factory infrastructures are exposed to, require a common view of IT-security and operational technology (OT) protection. In this context, the measures from office IT can only be transferred to the production area and production control to a limited extent. The requirements and protection goals for the equipment used and the networking between these components are too different. An integrated approach and continuous management of IT security helps to identify and implement targeted measures in a concerted manner.