ASHRAE Journal - July 2019 - 28
SOLVING PROBLEMS
Building Automation Systems
Addressing the
Cybersecurity Threat
BY MARY KATE MCGOWAN, ASSOCIATE EDITOR, NEWS
An attack on a building automation system in two apartment buildings in Finland left
residents in the cold during the winter of 2016. A distributed-denial-of-service (DDoS)
attack hit the Domain Name System service and disabled remote connection access
forcing building management to inspect the homes on-site. The automation system
that controlled the homes' heating, hot water and ventilation systems continuously
rebooted, until the system stopped working entirely.
By disconnecting the system from the Internet, the
problem was resolved in about an hour. While the
building automation system attack did not cause lasting
or life-altering damage, the lack of awareness of building automation system security can result in damage
to a facility and its occupants, said Levi Tully, Member
ASHRAE.
"The most severe data breach in a traditional organization is unlikely to have direct physical impact on the
occupants of the building. But a malicious attack on a
building automation system can very easily pose a significant threat to the health and welfare of people," he
said. "The biggest threat is that no one appreciates the
risk of building automation cybersecurity."
As unprotected building automation systems can
quickly become high-risk with potential life damage to
a building and its occupants, securing these systems is
becoming a necessity. Some places and applications are
even requiring security protection, said Bernhard Isler,
Member ASHRAE, a former chair of the standard committee for ASHRAE Standard 135-2016, BACnet-A Data
Communication Protocol for Building Automation and
28
ASHRAE JOURNAL
ashrae.org
J U LY 2 0 19
Control Networks.
"Building automation systems are part of the infrastructure of buildings, and malicious users that get
access to the building automation system's communication may interfere with the system and produce
unwanted behavior or damage to HVAC and other
equipment, or life-safety threats even," said Isler, a
senior systems architect for Siemens Switzerland, Ltd.
Common Mistakes
People who, intentionally or by accident, change a
device's configuration or control parameters are the
principal security threats to BACnet systems.
Unauthorized access to a building control system and
its data could be used to:
* Exploit operating information such as occupancy
schedules;
* Cause tenant discomfort;
* Interrupt facility operations; and
* Contribute to equipment or facility damage.
These could interrupt mission readiness, cause financial loss, environmental destruction and potentially risk
https://www.ashrae.org/
ASHRAE Journal - July 2019
Table of Contents for the Digital Edition of ASHRAE Journal - July 2019
Contents
ASHRAE Journal - July 2019 - Intro
ASHRAE Journal - July 2019 - Cover1
ASHRAE Journal - July 2019 - Cover2
ASHRAE Journal - July 2019 - 1
ASHRAE Journal - July 2019 - Contents
ASHRAE Journal - July 2019 - 3
ASHRAE Journal - July 2019 - 4
ASHRAE Journal - July 2019 - 5
ASHRAE Journal - July 2019 - 6
ASHRAE Journal - July 2019 - 7
ASHRAE Journal - July 2019 - 8
ASHRAE Journal - July 2019 - 9
ASHRAE Journal - July 2019 - 10
ASHRAE Journal - July 2019 - 11
ASHRAE Journal - July 2019 - 12
ASHRAE Journal - July 2019 - 13
ASHRAE Journal - July 2019 - 14
ASHRAE Journal - July 2019 - 15
ASHRAE Journal - July 2019 - 16
ASHRAE Journal - July 2019 - 17
ASHRAE Journal - July 2019 - 18
ASHRAE Journal - July 2019 - 19
ASHRAE Journal - July 2019 - 20
ASHRAE Journal - July 2019 - 21
ASHRAE Journal - July 2019 - 22
ASHRAE Journal - July 2019 - 23
ASHRAE Journal - July 2019 - 24
ASHRAE Journal - July 2019 - 25
ASHRAE Journal - July 2019 - 26
ASHRAE Journal - July 2019 - 27
ASHRAE Journal - July 2019 - 28
ASHRAE Journal - July 2019 - 29
ASHRAE Journal - July 2019 - 30
ASHRAE Journal - July 2019 - 31
ASHRAE Journal - July 2019 - 32
ASHRAE Journal - July 2019 - 33
ASHRAE Journal - July 2019 - 34
ASHRAE Journal - July 2019 - 35
ASHRAE Journal - July 2019 - 36
ASHRAE Journal - July 2019 - 37
ASHRAE Journal - July 2019 - 38
ASHRAE Journal - July 2019 - 39
ASHRAE Journal - July 2019 - 40
ASHRAE Journal - July 2019 - 41
ASHRAE Journal - July 2019 - 42
ASHRAE Journal - July 2019 - 43
ASHRAE Journal - July 2019 - 44
ASHRAE Journal - July 2019 - 45
ASHRAE Journal - July 2019 - 46
ASHRAE Journal - July 2019 - 47
ASHRAE Journal - July 2019 - 48
ASHRAE Journal - July 2019 - 49
ASHRAE Journal - July 2019 - 50
ASHRAE Journal - July 2019 - 51
ASHRAE Journal - July 2019 - 52
ASHRAE Journal - July 2019 - 53
ASHRAE Journal - July 2019 - 54
ASHRAE Journal - July 2019 - 55
ASHRAE Journal - July 2019 - 56
ASHRAE Journal - July 2019 - 57
ASHRAE Journal - July 2019 - 58
ASHRAE Journal - July 2019 - 59
ASHRAE Journal - July 2019 - 60
ASHRAE Journal - July 2019 - 61
ASHRAE Journal - July 2019 - 62
ASHRAE Journal - July 2019 - 63
ASHRAE Journal - July 2019 - 64
ASHRAE Journal - July 2019 - 65
ASHRAE Journal - July 2019 - 66
ASHRAE Journal - July 2019 - 67
ASHRAE Journal - July 2019 - 68
ASHRAE Journal - July 2019 - 69
ASHRAE Journal - July 2019 - 70
ASHRAE Journal - July 2019 - 71
ASHRAE Journal - July 2019 - 72
ASHRAE Journal - July 2019 - 73
ASHRAE Journal - July 2019 - 74
ASHRAE Journal - July 2019 - 75
ASHRAE Journal - July 2019 - 76
ASHRAE Journal - July 2019 - 77
ASHRAE Journal - July 2019 - 78
ASHRAE Journal - July 2019 - 79
ASHRAE Journal - July 2019 - 80
ASHRAE Journal - July 2019 - 81
ASHRAE Journal - July 2019 - 82
ASHRAE Journal - July 2019 - 83
ASHRAE Journal - July 2019 - 84
ASHRAE Journal - July 2019 - 85
ASHRAE Journal - July 2019 - 86
ASHRAE Journal - July 2019 - 87
ASHRAE Journal - July 2019 - 88
ASHRAE Journal - July 2019 - 89
ASHRAE Journal - July 2019 - 90
ASHRAE Journal - July 2019 - 91
ASHRAE Journal - July 2019 - 92
ASHRAE Journal - July 2019 - 93
ASHRAE Journal - July 2019 - 94
ASHRAE Journal - July 2019 - 95
ASHRAE Journal - July 2019 - 96
ASHRAE Journal - July 2019 - 97
ASHRAE Journal - July 2019 - 98
ASHRAE Journal - July 2019 - 99
ASHRAE Journal - July 2019 - 100
ASHRAE Journal - July 2019 - 101
ASHRAE Journal - July 2019 - 102
ASHRAE Journal - July 2019 - 103
ASHRAE Journal - July 2019 - 104
ASHRAE Journal - July 2019 - 105
ASHRAE Journal - July 2019 - 106
ASHRAE Journal - July 2019 - 107
ASHRAE Journal - July 2019 - 108
ASHRAE Journal - July 2019 - 109
ASHRAE Journal - July 2019 - 110
ASHRAE Journal - July 2019 - 111
ASHRAE Journal - July 2019 - 112
ASHRAE Journal - July 2019 - 113
ASHRAE Journal - July 2019 - 114
ASHRAE Journal - July 2019 - 115
ASHRAE Journal - July 2019 - 116
ASHRAE Journal - July 2019 - 117
ASHRAE Journal - July 2019 - 118
ASHRAE Journal - July 2019 - 119
ASHRAE Journal - July 2019 - 120
ASHRAE Journal - July 2019 - Cover3
ASHRAE Journal - July 2019 - Cover4
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_MCDEBX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WNYSQY
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XATVOD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_FJSHSS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_CCBZDS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XDEFVG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2023november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2023november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_VHGNBL
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WPKBNJ
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_UUVCDE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RTGDEW
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2023
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LKRFXS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_AZSOFG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ERCDBH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QWDFRV
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JHGVDF
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OPUYHG
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SREIBM
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LRTGLK
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OKRFGH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2022november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2022november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TZSERA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_LVRUIX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RPTVYZ
https://www.nxtbook.com/nxtbooks/ashrae/mini_pub_catalog
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XIYTGD
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2022
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RFGDOB
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PABXNU
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_REMKLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PICVBT
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_AOYTVW
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JQOPLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_IOYTBC
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SGAJJF
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_IGHYER
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_PDRKLS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2021november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2021november_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_XCODFR
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QSLFGO
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ILKVNM
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2021
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OPDJKD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_VJKSRY
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SDHUTC
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JPPKRR
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SDLTTH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_CKLLES
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_SLDOX
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_HJETUK
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_OLUHGE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2020october
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2020october_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ZERDGH
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_QVMNEO
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_RTPOKE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_BBATRE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_STUBMW
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TPEMPE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_JNMKDS
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_FBTTPA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_WQMMNE
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_TVBRYN
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_showguide2020
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_KTUZMA
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_ABEDGD
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201910
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201909
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2019septmeber_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2019september
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201908
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201907
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201906
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201905
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201904
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2019april
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201903
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2019march
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201902
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201901
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_showguide2019
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018december
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018november
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2018fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2018fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_2018october
https://www.nxtbook.com/nxtbooks/ashrae/ashraemexico_2018
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201810
https://www.nxtbook.com/nxtbooks/ashrae/ashraeinsights_201806
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201805
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201804
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201803
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201712
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201711
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201710
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2017fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2017fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201709
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201705
https://www.nxtbook.com/nxtbooks/ashrae/ashrae_meetinginsert_201610
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2016fall_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2016fall
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acrexindia
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2015summer_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_amca_2015summer
https://www.nxtbook.com/nxtbooks/amca/2014summer2
https://www.nxtbook.com/nxtbooks/amca/2014summer
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acma_2014summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201311
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201309
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_acmasupp_2013fall
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201305
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201303
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2013winter
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201211
https://www.nxtbook.com/nxtbooks/ashrae/achr_expo_mexico2012
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201209
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201208_v3
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201208_v2
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2012summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201205
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201203
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2012winter
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201111_v2
https://www.nxtbook.com/nxtbooks/ashrae/ashraejournal_201109_v2
https://www.nxtbook.com/nxtbooks/ashrae/pubcatalog_2011summer
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201105
https://www.nxtbook.com/nxtbooks/ashrae/meetingplanner_201103
https://www.nxtbookmedia.com