Cybersecurity in the process industry

Cybersecurity in the process industry (CPI)

6/7. Semester 5 ECTS | 4 SWS Continuous Assessment (CA)

CSB CSM IB IMB UIB

Protect Industrial Systems: Analyze risks, identify vulnerabilities, and develop security concepts for industrial control systems.

Modern production facilities are increasingly exposed to cybersecurity risks because they are highly networked and contain many standard IT components. At the same time, there are significant limitations to implementing established IT security measures in this environment.
The lecture provides the necessary knowledge and competencies to evaluate and improve cybersecurity in the context of industrial production. The focus of the lecture is on production facilities in the process industry (chemical, pharmaceutical, food production, etc.). However, the applicability of the content taught is not limited to the process industry, but it is also valuable for other industries (e.g. automotive, energy and water supply) and contexts (e.g. building automation).
Systems, components and networking in process automation
Cybersecurity challenges in the process industry
Specific threats and vulnerabilities
Established standards and best practices
Appropriate methods and tools for security assessments
Selection and implementation of security controls (network security, system/application security, organizational controls)
Cybersecurity for Safety Instrumented Systems
Measures to reduce the impact of security incidents

Students are able to

contextualize threats appropriately,
understand the effects of security incidents,
identify security vulnerabilities,
analyze and evaluate security risks,
develop recommendations for security controls and security concepts, and
communicate the results of security assessments in a way that is appropriate for the target audience.

P. Ackerman, Industrial Cybersecurity: Efficiently Secure Critical Infrastructure Systems. Birmingham, U.K.: Packt Publishing, 2017, ISBN: 978-1-78839-515-1.
A. A. Bochman and S. Freeman, Countering Cyber Sabotage: Introducing Consequence-Driven, Cyber-Informed Engineering (CCE). Boca Raton, FL, USA: CRC Press, 2021, ISBN: 978-0-367-49115-4.
E. D. Knapp and J. T. Langill, Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems, 2nd ed. Waltham, MA, USA: Syngress, 2014, ISBN: 978-0-12-420114-9.
E. M. Marszal and J. McGlone, Security PHA Review for Consequence-Based Cybersecurity. Research Triangle Park, NC, USA: International Society of Automation, 2019, ISBN: 978-1-64331-002-2, doi: 10.1002/9781394442447.
K.-H. Niemann, Abgrenzung der IT-Sicherheitsnormenreihen ISO 27000 und IEC 62443: Eine Sicht auf automatisierungstechnische Anlagen der Fertigungs- und Prozessindustrie. Hannover, Germany: Hochschule Hannover, 2021, doi: 10.25968/opus-1973.