Fakultät III

Wirtschaftsinformatik (Prof. Dr. Volkmar Pipek)

SIDATE

Duation: 2015–2018

Sponsorship: Bundesministerium für Bildung und Forschung (BMBF)

Contact person: Dipl.-Wirt.Inform. Benedikt Ley –
Dipl.-Wirt. Inform. Julian Dax

The SIDATE project focuses on the technical support of small and medium sized energy grid operators. It aims to support these operators by providing concepts and tools for self-assessment and improvement of IT-security. SIDATE is a joint project by the University of Siegen, Goethe University Frankfurt am Main, TÜV Rheinland i-sec GmbH, regio iT gesellschaft für informationstechnologie mbh and Arbeitsgemeinschaft für sparsame Energie- und Wasserverwendung (ASEW). The Project is funded as part of the program for IT-Security in critical infrastructures of the Federal Ministry for Education and Research (BMBF) from August 2015 to July 2018.

Motivation
A working energy infrastructure is fundamental for almost all aspects of modern life. The protection of this infrastructure is therefor central to the public interest. In order to guarantee a secure and sustainable energy supply, more and more IT-systems are used as part of the energy infrastructure. These IT-systems are changing continuously in response to factors like the adoption of smart grids and renewable energy. Hence the energy infrastructure is prone to cyber-attacks and its protection is big and growing challenge. As operators of these energy networks are part of the private sector in most cases, they are confronted with the dual challenge of protecting their networks in a way that is both effective in and economic. The goal of the project is to provide solutions for this challenge.

Goals and Approach
In the SIDATE Project, tools and concepts are developed, which allow better self-assessment of the current security level of an energy network and help improving security in small and medium sized energy network operators. The tools and concepts should be usable in practice and independent of the specific economic, organizational and personnel structure of the energy network operator. New IT-security metrics, a description language for describing the energy infrastructure and its components, a knowledge-base and a community platform are developed. Small and medium size energy network operators are involved in the development of these tools and concepts throughout the whole project.

Innovation and Perspectives
The SIDATE project represents a novel approach due to its focus on tools and concepts custom tailored to small and medium sized energy grid operators and the focus on self-assessment. Using the tools, operators can determine if the regulatory requirements for IT-security and the protection of critical infrastructure are met. The tools developed in the SIDATE project allows this self-assessment to be faster and more reliable then previously. The effective and economic implementation of these requirements can be evaluated using best practice collections. The tools will also be adopted for water system operators in the medium term.

Further information on http://sidate.org/

Publications

2020

Pape, S., Schmitz, C., Kipker, D. & Sekulla, A. (2020)On the Use of Information Security Management Systems by German Energy Providers”

Fourteenth Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection (ICCIP 2020. Arlington, Virginia, USA
[BibTeX]

@inproceedings{pape_use_2020,
address = {Arlington, Virginia, USA},
title = {On the {Use} of {Information} {Security} {Management} {Systems} by {German} {Energy} {Providers}"},
language = {en},
booktitle = {Fourteenth {Annual} {IFIP} {WG} 11.10 {International} {Conference} on {Critical} {Infrastructure} {Protection} ({ICCIP} 2020},
author = {Pape, Sebastian and Schmitz, Christopher and Kipker, Dennis-Kenji and Sekulla, André},
year = {2020},
keywords = {sidate},
}

Schmitz, C., Sekulla, A. & Pape, S. (2020)Asset-Centric Analysis and Visualisation of Attack Trees”

Proceedings of the 7th International Workshop on Graphical Models for Security (GraMSec 2020. Boston, Massachusetts, USA
[BibTeX]

@inproceedings{schmitz_asset-centric_2020,
address = {Boston, Massachusetts, USA},
title = {Asset-{Centric} {Analysis} and {Visualisation} of {Attack} {Trees}"},
language = {en},
booktitle = {Proceedings of the 7th {International} {Workshop} on {Graphical} {Models} for {Security} ({GraMSec} 2020},
author = {Schmitz, Christopher and Sekulla, André and Pape, Sebastian},
year = {2020},
keywords = {sidate},
}

2019

Sekulla, A., Giatagantzidis, J., Dax, J. & Pipek (2019)V.: A Lightweight Tool for Measuring the Impact of IT Security Controls in Critical Infrastructures

Proceedings of the 17th European Conference on Computer-Supported Cooperative Work – Demos and Posters. Salzburg, Österreich
[BibTeX] [Download PDF]

@inproceedings{sekulla_v_2019,
address = {Salzburg, Österreich},
title = {V.: {A} {Lightweight} {Tool} for {Measuring} the {Impact} of {IT} {Security} {Controls} in {Critical} {Infrastructures}},
url = {https://dl.eusset.eu/handle/20.500.12015/3288,},
language = {en},
booktitle = {Proceedings of the 17th {European} {Conference} on {Computer}-{Supported} {Cooperative} {Work} - {Demos} and {Posters}},
author = {Sekulla, A. and Giatagantzidis, J. and Dax, J. and {Pipek}},
year = {2019},
keywords = {sidate},
}

A., S., C., S., S., P. & V, P. (2019)Demonstrator zur Beschreibung und Visualisierung einer kritischen Infrastruktur

Proceedings of the International Conference on Wirtschaftsinformatik (WI 2019), S. 1978. Siegen, Publisher: Deutschland
[BibTeX]

@inproceedings{a_demonstrator_2019,
address = {Siegen},
title = {Demonstrator zur {Beschreibung} und {Visualisierung} einer kritischen {Infrastruktur}},
language = {de},
booktitle = {Proceedings of the {International} {Conference} on {Wirtschaftsinformatik} ({WI} 2019), {S}. 1978},
publisher = {Deutschland},
author = {A., Sekulla and C., Schmitz and S., Pape and V, Pipek},
year = {2019},
keywords = {sidate},
}

Sekulla, A., Schmitz, C. & Pipek, V. (2019)Demonstrator zur Beschreibung und Visualisierung einer kritischen Infrastruktur

[BibTeX]

@inproceedings{sekulla_demonstrator_2019,
title = {Demonstrator zur {Beschreibung} und {Visualisierung} einer kritischen {Infrastruktur}},
author = {Sekulla, A. and Schmitz, C. and Pipek, V.},
year = {2019},
keywords = {sidate},
}

Sekulla, A., Giatagantzidis, J., Dax, J. & Pipek, V. (2019)A Lightweight Tool for Measuring the Impact of IT Security Controls in Critical Infrastructures

doi:10.18420/ECSCW2019_P03
[BibTeX] [Abstract] [Download PDF]

IT security is a cost-intensive aspect of SMEs. Critical infrastructures, in particular, are increasingly dependent on good IT security. Increasing security, however, can limit the usability of existing applications and work processes. Based on empirical studies inclusive workshops in the field, we designed a lightweight tool and integrated it into an inter-organizational knowledge exchange platform. With the tool, we want to offer an opportunity to get experience and feedback directly from those employees, who are directly affected by IT security controls. So, the IT security officer can react to it and gain more insight into the impact of IT security controls. They are in the position to administrate the tool’s backend company-internally, while chosen data can be exported and discussed on the inter-organizational platform. Hence, this tool supports a community building effect on organizational and inter-organizational level.

@article{sekulla_lightweight_2019,
title = {A {Lightweight} {Tool} for {Measuring} the {Impact} of {IT} {Security} {Controls} in {Critical} {Infrastructures}},
issn = {2510-2591},
url = {https://dl.eusset.eu/handle/20.500.12015/3288},
doi = {10.18420/ECSCW2019_P03},
abstract = {IT security is a cost-intensive aspect of SMEs. Critical infrastructures, in particular, are increasingly dependent on good IT security. Increasing security, however, can limit the usability of existing applications and work processes. Based on empirical studies inclusive workshops in the field, we designed a lightweight tool and integrated it into an inter-organizational knowledge exchange platform. With the tool, we want to offer an opportunity to get experience and feedback directly from those employees, who are directly affected by IT security controls. So, the IT security officer can react to it and gain more insight into the impact of IT security controls. They are in the position to administrate the tool’s backend company-internally, while chosen data can be exported and discussed on the inter-organizational platform. Hence, this tool supports a community building effect on organizational and inter-organizational level.},
language = {en},
urldate = {2021-12-14},
author = {Sekulla, André and Giatagantzidis, Jiannis and Dax, Julian and Pipek, Volkmar},
year = {2019},
keywords = {sidate},
}

2018

Aladawy, D., Beckers, K. & Pape, S. (2018)PERSUADED: Fighting Social Engineering Attacks with a Serious Game

IN Trust, Privacy and Security in Digital Business – 15th International Conference, TrustBus 2018, Vol. 11033
[BibTeX]

@article{aladawy_persuaded_2018,
title = {{PERSUADED}: {Fighting} {Social} {Engineering} {Attacks} with a {Serious} {Game}},
volume = {11033},
language = {en},
journal = {Trust, Privacy and Security in Digital Business - 15th International Conference, TrustBus 2018},
author = {Aladawy, D. and Beckers, K. and Pape, S.},
month = sep,
year = {2018},
note = {ISBN: 978-3-319-98384-4
Place: Regensburg, Germany},
keywords = {sidate},
}