1. SECURITY CHALLENGES IN DELIVERY OF REMOTE EXPERIMENTS Marjan Milošević 1, Danijela Milošević 2, Christos Dimopoulos 3, Konstantinos Katzis 4 1,2 BADEN, Srbija 3,4 European University Cyprus, Cyprus

2. Why Remote Labs? Remote labs provide possibility of conducting exercises in various scientific and engineering fields over Internet Remote experiments remove the time/space constraints There are physical labs available online or fully virtual labs

3. Issues related to remote experiments Heavily ICT-dependent Require additional equipment (server, network devices) Concurrent access must be regulated Pedagogy issues Security

4. RE architecture

5. Network Security RE are prone to attacks as any other Internet application It is needed to provide standard security measures: – authentication and identity management – forcing people to use strong passwords – monitor activities – establish firewall – use encrypted connection…

6. Lab Security Intrusions might jeopardize the equipment, producing larger damage, depending on type of experiment Simple LabView based experiments are usually prone to DoS attacks More complex experiments include more infrastructure, therefore the attack surface is larger

7. NeReLa case study Establishing network of remote labs = one of main project goals At the moment 3 solutions are in use: – LabView standalone experiments – CEyeClon – WebLab Deusto

8. LabView standalone RE LabView-based web-server is also the experiment PC with web-camera Access control is supposed to be regulated at the PC level Cam-access should be restricted Possible browser-plugin issues

9. CEyeClon RE PC is part of centralized virtual network Connection is encrypted Authorization regulated via username/pass or access keys (method we chose) Lab PC might be on a virtual machine End-user should get latest client software (CEyeClon Viewer)

10. WebLab Deusto Centralized platform Includes authentication mechanisms Neither plugin nor client application needed

11. Conclusions RE are supposed to be protected on various layers Universal network security recommendations apply Specific measures are RE type dependent Securing NeReLa RE still in progress