Virtual Industrial Control Systems for Cybersecurity Engineering Education

关键基础设施中使用的工业控制系统通常由来自与被控制的物理过程相关领域的工程师设计、建造、操作和维护。例如，化学工程师设计炼油厂，土木工程师设计结构，机械工程师设计工业机器人工业控制系统。网络安全是这些系统的关键问题。被利用的系统会对社会造成经济和物质上的伤害。工程师和网络安全分析师必须共同努力，安全地提供、操作和维护、保护和捍卫关键的工业控制系统。化学，机械和土木工程师设计和操作工业控制系统，而网络安全人员的任务是为工业控制系统设计，维护和操作网络安全控制。这两个组之间缺乏知识重叠，这可能导致两个组之间的误解，并减缓对这些关键系统采用安全控制。该项目的目标是开发教育工具和课程，以缩小这些群体之间的知识差距，从而产生更多具有网络安全专业知识的领域工程师，以及更多具有领域工程专业知识的网络安全分析师。该项目将开发一套构建模块和方法来设计虚拟工业控制系统测试平台。这些可重复使用的构建模块将分别用于土木，机械和化学工程的3个虚拟工业控制系统试验台；主动质量阻尼系统、工业机器人和蒸馏塔。网络安全讲座和实验练习将整合到土木、化学、电气和机械工程的现有课程中。此外，将开发一套工业控制系统网络安全讲座和实验室练习，并将其添加到面向计算机工程和计算机科学学生的现有网络安全工程入门课程中。我们预计这个项目每年将在亨茨维尔的阿拉巴马大学（UAH）培训大约125名来自土木、化学、计算机、电气和机械工程专业的学生，我们预计由于与其他大学的教师共享讲座材料、实验室练习和虚拟控制系统测试平台，我们预计会产生巨大的全国影响。

The industrial control systems used throughout critical infrastructure are often designed, built, operated, and maintained by engineers from domains related to the physical process being controlled. For example, chemical engineers design refineries, civil engineers design structures, and mechanical engineers design industrial robotic industrial control system. Cybersecurity is a critical concern for these systems. Exploited systems can cause financial and physical harm to society. Engineers and cybersecurity analysts must work together to securely provision, operate and maintain, and protect and defend critical industrial control systems. Chemical, mechanical, and civil engineers design and operate industrial control systems while cybersecurity personnel are tasked with designing, maintaining, and operating cybersecurity controls for the industrial control system. There is a lack of knowledge overlap among these two groups which can lead to misunderstandings among the two groups and slow the adoption of security controls for these critical systems. The objective of this project is to develop educational tools and coursework to narrow the knowledge gap between these groups and result in larger populations of domain engineers with cybersecurity expertise, and likewise, larger populations of cybersecurity analysts with domain engineering expertise.This project will develop a set of building blocks and methodologies for designing virtual industrial control system test beds. These reusable building blocks will be used to develop 3 virtual industrial control system test beds from civil, mechanical, and chemical engineering respectively; an active mass damper system, an industrial robot, and a distillation tower. Cybersecurity lectures and laboratory exercises will be designed for integration into existing classes in civil, chemical, electrical and mechanical engineering. Also, a set of industrial control system cybersecurity lectures and laboratory exercises will be developed and added to an existing Intro to Cybersecurity Engineering course offered to computer engineering and computer science students. We expect this project to train approximately 125 students per year at The University of Alabama in Huntsville (UAH) from the civil, chemical, computer, electrical, and mechanical engineering programs and we expect large national impact due to sharing of lecture materials, laboratory exercises, and the virtual control system test beds with faculty at other universities.