# Safety and Security Considerations for Online Laboratory Management Systems
## 3 Literature Review
### Safety and Security Issues and Solutions Proposed  
Several researchers have considered safety and security in the last decades. For example, [PERSON] et al. [69] explored safety concerns in remote laboratories where several users implement and share experiments within collaborative systems. They identified different factors for system reliability: the architecture and main elements of the rigs, along with the characteristics of the network and the roles of users and developers. In addition, to address hardware/software failures, [PERSON] et al. [70] proposed a method that involves deploying a bootable live CD on the server side of the remote laboratory to reduce downtime caused by hardware or software failures and to improve the system's overall reliability. [PERSON] et al. [17] recommended robust authentication mechanisms, mainly for access control. They also pointed out the need for firewall protection and Intrusion Detection Systems (IDSs) to safeguard against unauthorized access and misuse. [PERSON] et al. [71] introduced a dual validation filter approach to enhance operator and equipment safety that employs a \"system validation filter\" to check results before sending them out to the plant and a \"functional validation filter\" to ensure that function usage aligns with the selected autonomy mode, effectively reducing violations of safety constraints. Security against malicious attacks in remote laboratories has been analyzed by [PERSON] et al. [65], who examined software and hardware risks and recommended best practices to mitigate them. [PERSON] et al. [72] introduced an alternative authentication method using an image-based password system, leveraging a sequence of cartoon images for secure login. Similarly, [PERSON] et al. [67] focused on user registration, authentication via a username-password system, and emphasizing secure data storage within a Learning Management System (LMS). In addition, [PERSON] et al. [73] propose a two-layered communication framework that ensures data reliability through the TCP/IP protocol and created a specialized data communication and diagnostic interface designed for individual remote experiments within the RLMS (Remote Laboratory Management System). [PERSON] et al. [74] developed a client-server configuration to enable remote connectivity with hardware devices. The client receives a JavaScript application using this approach while the server executes Java processes. A similar approach was implemented by [PERSON] et al. [75], who utilized Easy Java Simulation (EJS) to create the interconnection between the real hardware with user interfaces for controlling electrical machines. Their system maintains security by controlling load voltage and frequency in isolated mode, while also supplying active and reactive power to the network. Another security strategy for remote laboratories was introduced by [PERSON] [76] who proposed access to the RLES (Remote Laboratories Emulation System) which facilitates lab access and scheduling via read-only virtual server libraries, which can be copied, stored, and deployed. [PERSON] et al. [77] introduced a system where students virtualized environments on their desktop systems, guest operating instances alongside other software on a single physical device. On the network security front, [PERSON] et al. [78] devised a virtual machine-based approach, segmenting network access via two virtual network cards, one managing internal system access and another handling external connections. This design prevents malicious software from infiltrating the broader university network. Furthermore, [PERSON] et al. [79] proposed a remote laboratory architecture integrating multiple security zones to regulate user access based on resource privileges. Their model enhances resilience against attacks by balancing control measures with heightened user awareness and robust data protection mechanisms anchored in information assets. This layered approach to security offers a holistic strategy for mitigating risks in remote laboratory environments.