Mode-Switching for Resilient Security

Recent advancements in medical and industrial Internet of Things have raised security concerns, as vulnerabilities can impact critical systems, workflows, privacy, and safety. The window of vulnerability, ranging from days to months, allows attackers to exploit weaknesses before patches are applied. Manual mitigation is time-consuming, especially when specific component versions are affected.
To address this, a multi-modal security architecture was developed, dividing complex systems into operational modes with different risks. A mode-switching framework enables security engineers to mitigate threats by sharing information and trigger manual or automated contingency responses, adapting system behavior, configuration, and functionality to reduce exposure.
Model-driven techniques and a domain-specific language facilitate the definition of mitigation strategies as mode switches.

Autorentext

Dr. Michael Riegler is Head of Product Security at an industrial manufacturer, specializing in cybersecurity for industrial applications. He also lectures at Johannes Kepler University Linz and the University of Applied Sciences Upper Austria in Hagenberg. His prior research focused on medical and industrial device security at the LIT Secure and Correct Systems Lab, the Institute for Business Informatics Software Engineering at Johannes Kepler University Linz, and the Department of Electrical and Computer Engineering at the University of Arizona, USA.

Inhalt

Introduction.- Resilient Security.- Modes.- Security Modes & Mode-Switching for Resilience.- Evaluation.- Discussion.- Conclusion and Future Work.