# Safety and Security Considerations for Online Laboratory Management Systems
## Appendix A \begin{table}
\begin{tabular}{p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt}} \hline \hline
**Aspects** & **Directive 89/391** & **OSHA** & **HSG65** & **WHS** \\ \hline \multirow{3}{*}{Scope} & EU’s general occupational safety and health principles. & U.S. federal agency overseeing workplace safety and health. & UK guidance for managing health and safety. & Australian model for workplace health and safety. & Australian model for workplace health and safety. \\ \hline \multirow{3}{*}{Focus} & General safety framework. & US federal agency overseeing. & UK guidance for managing health. & Integrated approach to workplace health and safety. \\ \hline \multirow{3}{*}{Key Concepts} & Employer and employee responsibilities, risk assessment, and preventive measures. & Employer responsibilities, standards, training, and inspections. & Plan–Do–Check–Act model, leadership, and risk management. & Duty of care, consultation, cooperation, and risk assessment. \\ \hline \multirow{3}{*}{Enforcement} & Implemented by EU member states’ laws and regulations. & Enforced by OSHA through inspections, citations, and fines. & Guidance rather than regulation based on risk management. & Regulated and enforced by Australian authorities. \\ \hline \multirow{3}{*}{Reporting} & Involes risk assessment and reporting of hazards and measures. & Reporting requirements for workplace incidents, injuries, and illnesses. & Emphasizes reporting incidents, near-misses, and lessons learned. & Requires reporting of certain incidents and hazards. \\ \hline \multirow{3}{*}{Documentation} & May require documentation risk assessments and preventive measures. & Requires documentation of safety policies, training, incidents, and more. & Encourages documentation of risk assessments and safety measures. & Requires records of incidents, training, and assessments. \\ \hline \multirow{3}{*}{Participation} & Requires worker involvement in safety and health matters. & Emphasizes worker rights, reporting, and involvement. & Encourages employee involvement in safety management. & Involes worker consultation and representation. \\ \hline \hline \end{tabular}
\end{table} 
Table 10: Safety and security regulations. \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Sapects** & **Directive 89/391** & **OSHA** & **HSG65** & **WHS** \\ \hline Improvements & Promotes a cycle of planning, acting, and evaluating for improvement. & Encourages continuous improvement in workplace safety. & Promotes a cycle of planning, acting, and evaluating for improvement. & Emphasizes ongoing improvement in health and safety. \\ \hline \multicolumn{5}{c}{Data from [36; 37; 38; 39].} \\ \end{tabular}
\end{table} 
Table **A1**. _Cont._ \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Category** & **Attack Type** & **Target** & **Effect** & **Methods** \\ \hline \multirow{3}{*}{Network-Based} & Denial-of-service (DoS) and distributed denial-of-service (DDoS) & \multirow{3}{*}{OLMS servers and networks} & \multirow{3}{*}{Previous legitimate users from accessing services, causing downtime} & CMP flood (Ping of Death): overloads serves with oversized ping packets (can be DoS or DDoS) \\  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & & & & \\ \cline{3-3}  & Spoofing, altered, and replayed routing attacks & Communication between IoT devices and remote labs & Attacks inject false routing data to manipulate information flow & Fake error messages, routing loops, or unauthorized redirection \\ \cline{3-3}  & Man-in-the-middle (MITM) attacks & Communication between remote lab users and servers & Intercepted credentials or altered experimental data & Attackers impersonate legitimate servers to deceive users \\ \hline \hline \end{tabular}
\end{table} 
Table 2: _Cont._