I4S

Jan 15, 2020
PDF Code

I4S aims to mitigate the IT risks caused by the adoption of Industry 4.0 paradigms. In this context, the following will be developed: methodologies and tools for IT risk analysis; innovative best practices for the design, installation, operation and maintenance of connected production plants; innovative technological solutions for safety; simulation systems to analyze computer security without interfering with the operation of production plants.

Technological solutions will also be identified that can improve the degree of security and resilience with respect to cyber attacks. The development of these solutions, and above all of the emulation system of production plants and connected machines, will be based on modern fog / edge computing paradigms, and on the extensive use of virtualization and software-defined-networking technologies. The results of this project will make it possible to design and build safer production plants and connected machinery, capable of guaranteeing: higher levels of protection of personal and corporate data transmitted and used by connected production plants; the maintenance of business operations and the activity of critical production processes even in the event of cyber attacks.

My contribution:

  • Member of the Research Group
  • ICS infrastracture development
  • ICS protocols pentest
  • SDN Specialist
Industry 4.0 Insider Threat Digital Twin SDN
Andrea Melis
Andrea Melis
Adjunct Professor
Post-Doc Researcher

Security Enthusiast, CTF Player, Half Nerd/Half Geek.

Related

Publications

P-SCOR: Integration of Constraint Programming Orchestration and Programmable Data Plane

In this manuscript we present an original implementation of network management functions in the context of Software Defined Networking. We demonstrate a full integration of an artificial intelligence driven management, an SDN control plane, and a programmable data plane. Constraint Programming is used to implement a management operating system that accepts high level specifications, via a northbound interface, in terms of operational objective and directives. These are translated in technology-specific constraints and directives for the SDN control plane, leveraging the programmable data plane, which is enriched with functionalities suited to feed data that enable the most effective operation of the intelligent control plane, by exploiting the P4 language.
Andrea Melis, Siamak Layeghy, Davide Berardi, Marius Portmann, Marco Prandini, Franco Callegati
PDF Code Project
P-SCOR: Integration of Constraint Programming Orchestration and Programmable Data Plane

TechNETium: Atomic Predicates and Model Driven Development to Verify Security Network Policies

his paper illustrates moves from formal methods existing in literature, namely atomic predicates (AP) and header space analysis (HSA). It describes a method of integrating AP in Software Defined Network architectures, achieving the same expressive power as HSA without its performance hit, to make topology verification viable for real-time security applications.
Davide Berardi, Franco Callegati, Andrea Melis, Marco Prandini
PDF Code Project
TechNETium: Atomic Predicates and Model Driven Development to Verify Security Network Policies