Cyber Physical Systems Security

Topics covered in the course are: Characteristics of CPS; Security and Privacy Concerns; Risk assessment for CPSs; Attacks Against CPSs; High-Profile, Real-World Attacks Against CPSs; Preventing Attacks; Detecting Attacks; Mitigating Attacks; Combined safety and security analysis of cyber-physical systems; Policy and Political Aspects of CPS Security; Industry Practices and Standards; the IEC 62443 standard; Security for specific CPS classes: Industrial Control Systems, Electric Power Grids, Transportation Systems and Autonomous Vehicles, Robotics and Advanced Manufacturing, Medical Devices, The Internet of Things.

Cyber physical systems are in the core of critical infrastructure. Critical infrastructure is defined as an asset, system, or part thereof, which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact as a result of the failure to maintain these functions. As such, the course contributes to the following SDGs:

• achieving higher levels of economic productivity, by increasing the security of and trust in the digital transformation process, thus facilitating technological upgrading, and speeding up the innovation process (goal 8.2);
• developing reliable and resilient infrastructure (goal 9.1).

After successfully completing the course, the students have obtained the following learning outcomes:

Knowledge

• The candidate possesses advanced knowledge of core concepts of cyber physical systems
• The candidate possesses advanced knowledge of core concepts of cyber physical systems advanced knowledge of the concepts of risk and risk assessment and how these apply to cybersecurity of cyber physical systems
• The candidate possesses advanced knowledge of core concepts of cyber physical systems advanced knowledge of technical, management, and policy issues in cyber physical systems security and safety
• The candidate possesses advanced knowledge of core concepts of cyber physical systems advanced knowledge of security and privacy issues in several application domains that incorporate cyber physical systems

Skills

• The candidate has the ability to assess and use attack modelling approaches to analyze attacks against cyber physical systems
• The candidate has the ability to critically analyze existing theories and methods for the study of cyber physical systems security and to independently apply such methods to related problems
• The candidate has the ability to jointly analyze the security and safety of cyber physical systems, based on risk assessment and the use of barriers/countermeasures
• The candidate has the ability to carry out independent research in selected areas of cyber physical systems security
• The candidate has the ability to identify and critically analyze primary research literature on cyber physical systems security and to apply appropriate scientific reasoning

General competence

• The candidate is able to apply knowledge of concepts and methods of analyzing the security of cyber physical systems to new fields
• The candidate is able to present, assess and discuss the research results of others.
• The candidate is able to discuss academic and professional topics in the field of modelling and securing cyber physical systems in selected domains both with a specialist and general audience
• The candidate has developed critical understanding of professional and ethical, including research ethics, issues in the field of cyber physical systems security

Colloquia/interactive lectures, where it is expected that the students have familiarized themselves with the topic beforehand. Optional assignments.