CS4690 Security for Cyber-Physical Systems

This course considers threats and vulnerabilities in embedded and operational technologies employed in critical infrastructure, including industrial control systems, transportation networks, the power grid and other cyber-physical systems. In these systems, communication, computation and control are tightly related, allowing cyber- attacks to have devastating kinetic effects. The class examines the security of cyber- physical systems, emphasizing the variety of potential attack vectors and attacker motivations, through reviewing sector-specific vulnerability case studies and security in initiatives.

Prerequisite

CS3690, CS3070, CS3040

Lecture Hours

3

Lab Hours

1

Course Learning Outcomes

Upon successfully completing the course, the student will be able to:

• Describe the types of embedded systems employed in industrial infrastructures and control systems;

• Describe architectures, methods and technologies for managing these systems;

• Describe potential security vulnerabilities associated with the use of these systems and methods for detecting these;

• Identify the possible root causes of vulnerabilities and critically analyze proposed means for mitigating these;

• Recognize classes of cyber-physical systems employed in different sectors and discuss the embedded technologies on which these rely;

• Compare and differentiate threats, vulnerabilities and controls relevant to different sectors.

These skills are essential for meeting curricular goals, including technical proficiency in assessing cyber threats and developing new strategies for cyber defense across a variety of non-IT assets, including ICS.