Towards suppressing attacks on and improving resilience of building automation systems - an approach exemplified using BACnet

Different concepts of IT security, like communication encryption, have already been applied to building automation systems (BAS). However, no research is available to mitigate malcious or incompliant network traffic in BAS. Both aspects are covered by traffic normalizers. We present the first work-in-progress research on traffic normalization for building aotomation networks exemplified using building automation control and network (BACnet) protocol.