A systemic framework for addressing cybersecurity in construction

Turk, Žiga (avtor), García de Soto, Borja (avtor), Mantha, Bharadwaj R.K. (avtor), Maciel, Abel (avtor), Georgescu, Alexandru (avtor)

Today, the built environment is designed, built, and managed using digital technology, making it increasingly exposed to cyber security risks. Cybersecurity is a general topic, and the construction sector has been borrowing general solutions and frameworks. However, the construction industry is specific and needs a specialized framework that would assist in understanding and managing cybersecurity. We have studied general cybersecurity frameworks, cybersecurity standards, research literature, and first principles of systems theory and process engineering. Drawing from that, we developed an original framework that identifies three kinds of wrongful activities: stealing, lying, and harming. It identifies four elements that can be affected by wrongful activities: information asset, material asset, person, and system. It defines cybersecurity as the absence of the three wrongs across the four kinds of elements. The framework is construction-specific, and as such, a useful tool for senior management to understand security problems and organize security processes. It can lead to better standardization and also helps the researchers to structure future work on the topic. The latter should be concentrated in areas where construction was found to be different: the dynamic and overlapping process and organizational boundaries in the design stage, the exposed shared design information, and the vulnerability of control information of the built environment, particularly in critical infrastructures.

• Jezik: Angleški jezik
• Ključne besede: BIM, construction 4.0, cybersecurity, cyber-physical systems, digitalization, digital twins, Information Technology (IT), Operational Technology (OT), privacy, confidentiality, integrity, CIA triad, Parkerian hexad
• Vrsta gradiva: Članek v reviji
• Tipologija: 1.01 - Izvirni znanstveni članek
• Organizacija: FGG - Fakulteta za gradbeništvo in geodezijo
• Status publikacije: Objavljeno
• Različica publikacije: Objavljena publikacija
• Leto izida: 2022
• Št. strani: 14 str.
• Številčenje: Vol. 133, art. 103988
• PID: 20.500.12556/RUL-138529
• UDK: 004:624
• ISSN pri članku: 0926-5805
• DOI: 10.1016/j.autcon.2021.103988
• COBISS.SI-ID: 115454467
• Datum objave v RUL: 26.07.2022

Gradivo je del revije

• Naslov: Automation in construction
• Skrajšan naslov: Autom. constr.
• Založnik: Elsevier
• ISSN: 0926-5805
• COBISS.SI-ID: 14103045

Licence

• Licenca: CC BY-NC-ND 4.0, Creative Commons Priznanje avtorstva-Nekomercialno-Brez predelav 4.0 Mednarodna
• Povezava: http://creativecommons.org/licenses/by-nc-nd/4.0/deed.sl
• Opis: Najbolj omejujoča licenca Creative Commons. Uporabniki lahko prenesejo in delijo delo v nekomercialne namene in ga ne smejo uporabiti za nobene druge namene.

Sekundarni jezik

• Jezik: Slovenski jezik
• Ključne besede: BIM, gradbeništvo 4.0, kibernetska varnost, kibernetsko fizični sistemi, digitalizacija, digitalni dvojček

Projekti

• Financer: Drugi - Drug financer ali več financerjev
• Program financ.: NYUAD Institute
• Številka projekta: CIC4-2020
• Naslov: 1st Workshop on Cybersecurity Implications of Construction 4.0

• Financer: ARRS - Agencija za raziskovalno dejavnost Republike Slovenije
• Številka projekta: P2-0210
• Naslov: E-gradbeništvo