IT assistant detects security vulnerabilities

Digital technology has long since found its way into the skilled trades - not only in offices, but also in workshops and on construction sites. However, many companies are not sufficiently prepared when it comes to the security of their information technology (IT). "A cyber attack will affect everyone sooner or later and can ruin a business in the worst case scenario," says Heiko Brock, digitalization consultant at the Kassel Chamber of Skilled Crafts. However, smaller businesses in particular often lack the time to deal with the issue.

This problem has been addressed by an interdisciplinary research team in the "Intelligent Security Handwerk" project: the University of Kassel and the Karlsruhe Institute of Technology (KIT) have worked together with the Berufsförderungswerk des Handwerks in Korbach (BFH). The scientists have developed an intelligent IT security assistant in order to provide craft businesses with a tool for detecting and closing their security gaps. This is an application that can be accessed online and allows companies to gain an overview of the extent to which their IT security is guaranteed or at risk. A prototype has now been presented at the end of the project.

Tailored recommendations

For a tailor-made analysis, the IT infrastructure of the companies is first queried in detail: computers and mobile devices, installed operating systems and programs as well as digitally networked tools such as drones or VR glasses. The intelligent assistant then suggests specific measures for the respective hardware and software to close security gaps - from password managers and backups for data protection to network segmentation, i.e. the creation of barriers between different IT areas. "The special feature of our tool is that each company only receives recommendations for action that are relevant to it," says project team member Pascal Breitenmoser from the Department of Technology and Innovation Management and Entrepreneurship at the University of Kassel.

Under the direction of Prof. Dr. Patrick Spieth, the Kassel-based researchers interviewed skilled workers and companies from the skilled trades sector, including many from the region, in several phases of the three-year project. On the one hand, the aim was to tailor the design of the IT security assistant to practical needs. "It was important to us to make a low-threshold offer," says Pascal Breitenmoser. No special prior knowledge is required to use it. IT vocabulary is explained in a glossary, for example.

On the other hand, the research team determined which skills and abilities tradespeople have in dealing with security-relevant aspects of digital technologies. For example, they were asked about their understanding of regularly used software, their awareness of the complexity of digital technologies and their investment of time and knowledge to use them in a security-compliant manner. There was a need to catch up in all areas.

Training courses tested in Korbach

In collaboration with the Kassel research team, the Berufsförderungswerk in Korbach has therefore designed and tested two-day training courses on data protection and data security. A new series of further training courses for skilled workers from the skilled trades sector is now to be developed at BFH on the basis of these courses.

At a final workshop of the federally funded research project, in which the Kassel Chamber and other partners from the skilled trades were also involved, the outcome was positive. On the one hand, important awareness-raising work had been carried out, and on the other hand, "a tangible result could be handed over to the skilled trades with the intelligent IT assistant", says employee Pascal Breitenmoser. The prototype was tested in companies including Gringel Bau + Plan (Schwalmstadt), Begoin (Bad Hersfeld) and Walter Fenster + Türen (Kassel), which contributed to the success of the project as partners from the field.

The aim now is to put the tool into practice. To this end, further funding is being discussed under the direction of the German Confederation of Skilled Crafts. A demo version will be available on the project website from February. Digitization consultant Heiko Brock from the Chamber of Skilled Crafts considers the new IT security assistant to be helpful: "It's a great tool that helps companies to uncover and eliminate their weak points. As advisors to the Chamber, we are also happy to help."

Contact:

Kassel Chamber of Crafts
Scheidemannplatz 2
34117 Kassel
Tel.: +49 561 7888 138
Fax: +49 561 7888 20138
Email: katja.rudolph[at]hwk-kassel[dot]de
Internet: www.hwk-kassel.de

More information: intelligent-security-handwerk.de
Contact at the Chamber of Skilled Crafts: Heiko Brock, Tel. 0561 /7888-186, heiko.brock[at]hwk-kassel[dot]de