Introductory description

Much attention relating to cyber security is focussed on the digital aspects of cyber systems; all data tends to be represented as pure, abstract, ones and zeros. In reality, all these abstract ones and zeros need a physical representation in order to have an effect. That physical representation might be as electromagnetic radiation, travelling through space as a radio wave, it might be as electric charge in an electronic device or it could take a range of other forms.

Control systems gather information from a range of physical sensors (flow rate sensors, temperature gauges, accelerometers etc); after processing, they generate outputs which in turn produce physical effects via actuators (switches, motors, displays etc).

Much attention relating to communication in the cyber domain is focussed around the Internet. A range of other communication protocols and technologies are widely deployed in industrial control, vehicle and other systems.

Understanding the significant characteristics of the physical manifestations of digital information, understanding the interconnectedness of the cyber domain with the physical domain via sensors and actuators, and understanding non-Internet technologies and protocols reduces the risk of inadvertently leaving a cyber system in a vulnerable position.

The overall aim of this module is to enable the cyber security specialist to have a meaningful conversation with practising engineers concerning the security of cyber-physical systems.

Module aims

Outline syllabus

This is an indicative module outline only to give an indication of the sort of topics that may be covered. Actual sessions held may differ.

Operational technology (OT) and SCADA/ICS control systems
Security Architecture and Engineering for OT Systems
Vulnerability Management for OT systems
Cyber threat Intelligence for OT systems
Security Risk Management for OT systems

Learning outcomes

By the end of the module, students should be able to:

• Analyse the cyber security characteristics of selected cyber-physical technologies. (AHEP4 2.1.1, 2.1.5, 2.1.6, 2.1.10, 2.1.11, 2.2.2, C12)
• Analyse the significant cyber security characteristics of selected cyber-physical protocols. (AHEP4 2.1.1, 2.1.5, 2.1.6, 2.1.10, 2.1.11, 2.2.2, C12)
• Critically evaluate the cyber security constraints in selected cyber-physical domains. (AHEP4 2.1.1, 2.1.5, 2.1.6, 2.1.10, 2.1.11, 2.2.2, 2.3.2, C12)
• Design effective security controls in protecting cyber-physical systems. (AHEP4 2.1.2, 2.1.5, 2.1.8, 2.1.12, 2.2.1, 2.2.6, C10, C13)

Indicative reading list

Reading lists can be found in Talis

Subject specific skills

Critically understand the differences between the cyber security requirements of conventional IT systems, and those of cyber physical systems.
Analyse the cyber security requirement of a cyber-physical system
Secure design of cyber-physical systems

Transferable skills

Critical and analytical thinking, problem solving