‘Bavaria takes the challenges of IT security very seriously and is shaping a secure digital future! The State Office for Information Security is supporting OTH Regensburg and the Laber-Naab Water Supply Group Association in the implementation of the forward-looking joint project ‘KRITIS³M’ for critical infrastructures. We are working together on innovative solutions for potential cyber threats and combining practical approaches with state-of-the-art technologies! We are particularly challenged with regard to new developments such as quantum computing: But instead of resting on our laurels, we are actively driving progress: by trialling security modules that support post-quantum cryptography, we are showing that Bavaria is a pioneer in IT security. Today, the research project successfully completed the first field test of its innovative security modules at the water supplier Zweckverband Laber-Naab,’ said Finance and Home Affairs Minister Albert Füracker on the occasion of the successful field test in Beratzhausen on Friday, 6 December.
Bernd Geisler, President of the State Office for Information Security, emphasised the importance of the cooperation: ‘The LSI contributes the security expertise and experience of its own specialists in the field of cryptography and KRITIS consulting. Together with OTH Regensburg and the ZVLN, we are creating solutions that set standards for the IT security of tomorrow.’
Prof Dr Jürgen Mottok: ‘No security of supply without IT security!’
Prof. Dr Jürgen Mottok, research professor for IT security and head of the Software Engineering Laboratory for Safe and Secure Systems (LaS3) at OTH Regensburg, heads the ‘KRITIS³M’ project and emphasised its high relevance for the common good: ‘Socially essential areas such as energy and water supply are dependent on IT systems. Cyberattacks on these infrastructures can have devastating consequences, for example leading to large-scale outages. Overall, IT security is a key factor for a stable, trustworthy and sustainable society. It forms the basis for digital innovations and protects the essential values of modern societies. To summarise: No security of supply without IT security!’
Mayor Josef Bauer, 1st Chairman of the Laber-Naab Water Supply Group Association, welcomed the close cooperation with LSI and OTH Regensburg: ‘When it comes to IT security, it is essential that secure, simple and affordable systems are developed here, especially for small and medium-sized companies. We are therefore grateful to be able to participate in the pioneering ‘KRITIS³M’ research project.’
The ‘KRITIS³M’ project develops and tests pioneering solutions for critical infrastructures and security modules based on post-quantum cryptography (PQC). In this way, basic research is being put to concrete use in the field. The technology prevents attackers from feeding false control commands into water production and distribution systems via pumps and elevated tanks. Such attacks could cause massive damage to critical infrastructures. Particularly in light of developments in the field of quantum computing, it is extremely important to include such scenarios in future IT security concepts. Encryption methods that are currently secure could potentially be broken by quantum computers in the future. It is therefore crucial to develop encryption methods in advance and test them extensively.
The Laber-Naab water supply group special-purpose association currently comprises 13 municipalities. With over 1,000 kilometres of water pipes, around 12,500 households are supplied with drinking water. For several years, the special-purpose association has also paid particular attention to protecting the control systems and IT systems as well as its customer data in the administration.
LaS³ laboratory pools resources and development of safety-relevant systems
Since 2005, the Software Engineering Laboratory for Safe and Secure Systems (LaS³) at OTH Regensburg has been pooling resources and expertise in the development of security-relevant systems. The development of functionally and IT-secure software-intensive systems is central to the LaS³ research roadmap. LaS³ combines scientific expertise with application-oriented innovation in its role as a mediator between science and application. As project leader in the ‘KRITIS³M’ project, LaS³ is largely responsible for the coordination and realisation of the research and development work.
The Free State of Bavaria recognised the danger posed by cyber criminals at an early stage and was the first federal state to establish an independent specialist authority for IT security, the LSI. The LSI's main task is to protect the Bavarian state IT systems as well as the Bavarian government network and the Bavarian server. The LSI also supports local authorities and public operators of critical infrastructures, such as hospitals, drinking water suppliers and municipal utilities, as a specialised and individual consultant on all IT security issues. The findings of the project can be used to further strengthen measures and support.
