Cyber security, building automation, and the intelligent building

Abstract

Extending the narrow scope of building management systems to form the ‘intelligent building’ has led to the widespread use of proprietary ‘enterprise’ software platforms and networks in both monitoring and control. The PC user is only too familiar with the vulnerability of networked computers to malicious software. But it is only recently that attention has been paid to the possibility of virus damage to process controllers. The hazard for ‘building management systems’ functionality is real but the risk is difficult to assess. Pressures on system procurement and upgrades aimed at improving functionality bring with them increased exposure to the probability of a successful attack. Most published security protocols may engender a false sense of security. The key defence is to ensure a ‘fall-back’, ‘black start’, ‘dumb capability’ within the intelligent building.