@article {798,
	title = {On the Design of IoT Security: Analysis of Software Vulnerabilities for Smart Grids},
	journal = {Energies},
	volume = {14},
	year = {2021},
	month = {may},
	pages = {2818},
	abstract = {<p>The 5G communication network will underpin a vast number of new and emerging services, paving the way for unprecedented performance and capabilities in mobile networks. In this setting, the Internet of Things (IoT) will proliferate, and IoT devices will be included in many 5G application contexts, including the Smart Grid. Even though 5G technology has been designed by taking security into account, design provisions may be undermined by software-rooted vulnerabilities in IoT devices that allow threat actors to compromise the devices, demote confidentiality, integrity and availability, and even pose risks for the operation of the power grid critical infrastructures. In this paper, we assess the current state of the vulnerabilities in IoT software utilized in smart grid applications from a source code point of view. To that end, we identified and analyzed open-source software that is used in the power grid and the IoT domain that varies in characteristics and functionality, ranging from operating systems to communication protocols, allowing us to obtain a more complete view of the vulnerability landscape. The results of this study can be used in the domain of software development, to enhance the security of produced software, as well as in the domain of automated software testing, targeting improvements to vulnerability detection mechanisms, especially with a focus on the reduction of false positives.</p>
},
	keywords = {Internet of Things, robustness, security, software vulnerabilities},
	doi = {10.3390/en14102818},
	author = {Christos-Minas Mathas and Costas Vassilakis and Nicholas Kolokotronis and Charilaos C. Zarakovitis and Michail-Alexandros Kourtis}
}
@conference {783,
	title = {Threat landscape for smart grid systems},
	booktitle = {Proceedings of the 15th International Conference on Availability, Reliability and Security},
	year = {2020},
	month = {jul},
	publisher = {ACM},
	organization = {ACM},
	abstract = {<p>Smart Grids are energy delivery networks, constituting an evolution of power grids, in which a bidirectional flow between power providers and consumers is established. These flows support the transfer of electricity and information, in order to support automation actions in the context of the energy delivery network. Insofar, many smart grid implementations and implementation proposals have emerged, with varying degrees of feature delivery and sophistication. While smart grids offer many advantages, their distributed nature and information flow streams between energy producers and consumers enable the launching of a number of attacks against the smart grid infrastructure, where the related consequences may range from economic loss to complete failure of the smart grid. In this paper, we survey the threat landscape of smart grids, identifying threats that are specific to this infrastructure, providing an assessment of the severity of the consequences of each attack type, discerning features that can be utilized to detect attacks and listing methods that can be used to mitigate them.</p>
},
	keywords = {attack detection features, attack mitigation, attacks, security, Smart grids},
	doi = {https://doi.org/10.1145/3407023.3409229},
	author = {Christos-Minas Mathas and Konstantinos-Panagiotis Grammatikakis and Costas Vassilakis and Nicholas Kolokotronis and Vasiliki-Georgia Bilali and Dimitris Kavallieros}
}
@conference {Kolokotronis2019IEEESrv,
	title = {On Blockchain Architectures for Trust-based Collaborative Intrusion Detection},
	booktitle = {Proceedings of the 1st IEEE Services Workshop on Cyber Security and Resilience in the Internet Of Things, within IEEE Services 2019},
	year = {2019},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {This paper considers the use of novel technologies for mitigating attacks that aim at compromising intrusion detection systems (IDSs). Solutions based on collaborative intrusion detection networks (CIDNs) could increase the resilience against such attacks as they allow IDS nodes to gain knowledge from each other by sharing information. However, despite the vast research in this area, trust management issues still pose significant challenges and recent works investigate whether these could be addressed by relying on blockchain and related distributed ledger technologies. Towards that direction, the paper proposes the use of a trust-based blockchain in CIDNs, referred to as trust-chain, to protect the integrity of the information shared among the CIDN peers, enhance their accountability, and secure their collaboration by thwarting insider attacks. A consensus protocol is proposed for CIDNs, which is a combination of a proof-of-stake and proof-of-work protocols, to enable collaborative IDS nodes to maintain a reliable and tampered-resistant trust-chain.},
	keywords = {blockchain, collaborative intrusion detection, insider threats, security, trust management},
	author = {Nicholas Kolokotronis and Sotirios Brotsis and Georgios Germanos and Costas Vassilakis and Stavros Shiaeles}
}
