Year 2015

• Approaching Secure Industrial Control Systems

  Publication

  • R. Leszczyna

  - IET Information Security - Year 2015

  This study presents a systematic approach to secure industrial control systems based on establishing a business case followed by the development of a security programme. To support these two fundamental activities the authors propose a new method for security cost estimation and a security assessment scheme. In this study they explain the cost evaluation technique and illustrate with a case study concerning the assessment of the...

  Full text available to download

Year 2014

• Operating system security by integrity checking and recovery using write-protected storage

  Publication

  • J. Kaczmarek
  • M. Wróbel

  - IET Information Security - Year 2014

  The paper presents an Integrity Checking and Recovery (ICAR) system which protects file system integrity and automatically restores modified files. The system enables files cryptographic hashes generation and verification, as well as configuration of security constraints. All of the crucial data, including ICAR system binaries, file backups and hashes database are stored in a physically write protected storage to eliminate the...

  Full text available to download

Year 2011

• Approach to security assessment of critical infrastructures' information systems

  Publication

  • R. Leszczyna
  • I. Nai Fovino
  • M. Masera

  - IET Information Security - Year 2011

  This study presents an approach to the security assessment of the information systems of critical infrastructures. The approach is based on the faithful reconstruction of the evaluated information system in a computer security laboratory followed by simulations of possible threats against the system. The evidence collected during the experiments, stored and organised using a proprietary system InSAW, may later be used for the creation...

  Full text available to download