Building digital trust in CDE-based BIM workflows : key strategies

Brelih, Anja (avtor), Klinc, Robert (avtor)

The adoption of Building Information Modeling (BIM) and Common Data Environments (CDE) in construction has increased the need for robust security and privacy frameworks, especially as these platforms increasingly leverage cloud-based technologies. This paper examines the mechanisms required to protect sensitive project data in BIM and CDE environments, including financial data, intellectual property and personal data. It emphasises the crucial role of trust — cognition-based, affect-based and system-based — in promoting safe and collaborative workflows and explores the concept of digital trust as a foundation for reliable partnerships in cloud-based construction environments. A critical analysis of ISO 19650-5 identifies significant gaps in addressing the complexity of cyber security and argues for explicit technical guidelines to protect against cyber threats. It also highlights inconsistencies in the transparency of security practises of widely used BIM and CDE providers and emphasises the need for improved disclosure to increase user trust. To provide a structured approach to threat mitigation, we introduce the Process for Attack Simulation and Threat Analysis (PASTA) framework and demonstrate its applicability in aligning business and technical risks within BIM and CDE workflows. In addition, this paper proposes to integrate security requirements into the BIM Execution Plan (BEP) to improve alignment across all project phases. Recommendations are provided for providers and users to establish a trust-based approach to information security that ensures compliance with standards and promotes the resilience of construction workflows. This paper highlights practical pathways to enhance the security of BIM and CDE implementations, focusing on robust technical safeguards and the role of trust in collaborative projects.

• Jezik: Angleški jezik
• Ključne besede: building information modeling, BIM, common data environment, CDE, digital trust, security, PASTA methodology, standardization
• Vrsta gradiva: Članek v reviji
• Tipologija: 1.01 - Izvirni znanstveni članek
• Organizacija: FGG - Fakulteta za gradbeništvo in geodezijo
• Status publikacije: Objavljeno
• Različica publikacije: Objavljena publikacija
• Leto izida: 2025
• Št. strani: Str. 524-543
• Številčenje: Vol. 30
• PID: 20.500.12556/RUL-168199
• UDK: 69:004
• ISSN pri članku: 1874-4753
• DOI: 10.36680/j.itcon.2025.022
• COBISS.SI-ID: 231135491
• Datum objave v RUL: 02.04.2025

Gradivo je del revije

• Naslov: Journal of information technology in construction : ITcon
• Skrajšan naslov: J. inf. tech. constr.
• Založnik: Advelingen för byggadministration, Kungl. Tekniska högskolan, CIB - International Council for Research and Innovation in Building and Construction, W 87 - Information Technology for Construction
• ISSN: 1874-4753
• COBISS.SI-ID: 633185

Licence

• Licenca: CC BY 4.0, Creative Commons Priznanje avtorstva 4.0 Mednarodna
• Povezava: http://creativecommons.org/licenses/by/4.0/deed.sl
• Opis: To je standardna licenca Creative Commons, ki daje uporabnikom največ možnosti za nadaljnjo uporabo dela, pri čemer morajo navesti avtorja.

Sekundarni jezik

• Jezik: Slovenski jezik
• Ključne besede: informacijsko modeliranje gradenj, skupno podatkovno okolje, digitalno zaupanje, varnost, metodologija PASTA, standardizacija

Projekti

• Financer: ARIS - Javna agencija za znanstvenoraziskovalno in inovacijsko dejavnost Republike Slovenije
• Številka projekta: P2-0210
• Naslov: E-Gradbeništvo