engineering / Critical systems
Critical infrastructure and access
A security project across smart-grid threats, identity and access management, and a Petri-net model of a water system.
Inside the work.
The threat analysis covers the IT, IoT, and operational-technology layers of a smart grid. Aurora, GPS time-synchronisation, side-channel, and Sybil attacks are mapped to the assets they affect, with network attack diagrams and countermeasures aligned to IEC smart-grid standards.
The access lab is an internal single sign-on setup with FreeIPA and Kerberos on a Fedora server and an Ubuntu client. It configures certificates, users, groups, PAM, NSSwitch, and SSSD, then checks Kerberos tickets, passwordless SSH, and authentication logs.
A water and wastewater system is modelled in HPSim Petri nets, covering normal operation, sensor and actuator failures, and cyberattacks on SCADA-linked components. The model is checked for safety, liveness, availability, and data integrity across IT, IoT, and operational technology.