Blar i SINTEF Open på forfatter "Flå, Lars"
-
Industrial Control Systems Security Checklist: A Guiding Document for Developing Secure Industrial Control Systems, V1.0
Flå, Lars; Törn, Eric Martin; Skjersli, Knut Vidar; Haugli, Fredrik Bakkevig (Research report, 2023)With a more connected world, where someone can attack digital industries in distant countries with low risk and cost, cyber security is becoming increasingly important on a nation-wide level. Several recent attacks illustrate ... -
Information Security Aspects of Industrial Control Systems: An Introduction for ICS Integrators and Asset Owners, V1.0
Flå, Lars; Törn, Eric Martin; Skjersli, Knut Vidar; Haugli, Fredrik Bakkevig (Research report, 2023)With a more connected world, where someone can attack digital industries in distant countries with low risk and cost, cyber security is becoming increasingly important on a nation-wide level. Several recent attacks illustrate ... -
A method for threat modelling of industrial control systems
Flå, Lars; Jaatun, Martin Gilje (Chapter, 2024)In this paper, we propose a new method for threat modelling of industrial control systems (ICS). The method is designed to be flexible and easy to use. Model elements inspired by IEC 62443 and Data Flow Diagrams (DFD) are ... -
A Survey on Cybersecurity Barrier Management in Process Control Environments
Øien, Knut; Hauge, Stein; Jaatun, Martin Gilje; Flå, Lars; Bodsberg, Lars (Chapter; Peer reviewed, 2022)The concept of barriers is well known in the safety domain that includes traditional process control environments. However, as critical infrastructures are moving to more interconnected scenarios connected to cloud computing ... -
A Survey on Infrastructure-as-Code Solutions for Cloud Development
Teppan, Håkon; Flå, Lars; Jaatun, Martin Gilje (Chapter, 2022)Cloud software is increasingly written according to the DevOps paradigm, where use of virtualization and Infrastructure-as-Code is prevalent. This paper surveys the state of the art of IaC cloud development, and proposes ... -
Threat Modeling of a Smart Grid Secondary Substation
Holik, Filip; Flå, Lars; JAATUN, Martin Gilje; Yildirim Yayilgan, Sule; Foros, Jørn (Peer reviewed; Journal article, 2022) -
Tool-assisted Threat Modeling for Smart Grid Cyber Security
Flå, Lars; Borgaonkar, Ravishankar Bhaskarrao; Tøndel, Inger Anne; Jaatun, Martin GIlje (Chapter; Peer reviewed, 2021)Threat modeling is about identifying architectural flaws and weaknesses in a system in order to mitigate them and avoid unwanted incidents caused by an attacker. Tool assisted threat modeling has seen limited use in complex ...