Virtual Industrial Control Systems for Cybersecurity Engineering Education

在整个关键基础设施中使用的工业控制系统通常由来自与所控制的物理过程相关的领域的工程师来设计、构建、操作和维护。例如，化学工程师设计炼油厂，土木工程师设计结构，机械工程师设计工业机器人工业控制系统。网络安全是这些系统的一个关键问题。被剥削的系统可能会对社会造成经济和物质上的伤害。工程师和网络安全分析师必须通力合作，安全地配置、操作和维护以及保护和保卫关键的工业控制系统。化学、机械和土木工程师设计和操作工业控制系统，而网络安全人员负责设计、维护和操作工业控制系统的网络安全控制。这两个群体之间缺乏知识重叠，这可能导致两个群体之间产生误解，并减缓对这些关键系统采取安全控制措施的速度。该项目的目标是开发教育工具和课程，以缩小这些群体之间的知识差距，并导致更多具有网络安全专业知识的领域工程师，以及更多具有领域工程专业知识的网络安全分析师。该项目将开发一套用于设计虚拟工业控制系统试验台的构建块和方法。这些可重复使用的积木将分别用于开发土木工程、机械工程和化工工程的3个虚拟工业控制系统试验台：一个主动质量阻尼器系统、一个工业机器人和一个蒸馏塔。网络安全讲座和实验室练习将被设计为融入土木、化学、电气和机械工程的现有课程。此外，还将开发一套工业控制系统网络安全讲座和实验室练习，并将其添加到现有的计算机工程和计算机科学专业学生网络安全工程入门课程中。我们预计该项目每年将在阿拉巴马大学亨茨维尔分校(UAH)培养大约125名土木、化学、计算机、电气和机械工程专业的学生，我们预计由于与其他大学的教职员工共享授课材料、实验室练习和虚拟控制系统试验台，该项目将在全国范围内产生巨大影响。

The industrial control systems used throughout critical infrastructure are often designed, built, operated, and maintained by engineers from domains related to the physical process being controlled. For example, chemical engineers design refineries, civil engineers design structures, and mechanical engineers design industrial robotic industrial control system. Cybersecurity is a critical concern for these systems. Exploited systems can cause financial and physical harm to society. Engineers and cybersecurity analysts must work together to securely provision, operate and maintain, and protect and defend critical industrial control systems. Chemical, mechanical, and civil engineers design and operate industrial control systems while cybersecurity personnel are tasked with designing, maintaining, and operating cybersecurity controls for the industrial control system. There is a lack of knowledge overlap among these two groups which can lead to misunderstandings among the two groups and slow the adoption of security controls for these critical systems. The objective of this project is to develop educational tools and coursework to narrow the knowledge gap between these groups and result in larger populations of domain engineers with cybersecurity expertise, and likewise, larger populations of cybersecurity analysts with domain engineering expertise.This project will develop a set of building blocks and methodologies for designing virtual industrial control system test beds. These reusable building blocks will be used to develop 3 virtual industrial control system test beds from civil, mechanical, and chemical engineering respectively; an active mass damper system, an industrial robot, and a distillation tower. Cybersecurity lectures and laboratory exercises will be designed for integration into existing classes in civil, chemical, electrical and mechanical engineering. Also, a set of industrial control system cybersecurity lectures and laboratory exercises will be developed and added to an existing Intro to Cybersecurity Engineering course offered to computer engineering and computer science students. We expect this project to train approximately 125 students per year at The University of Alabama in Huntsville (UAH) from the civil, chemical, computer, electrical, and mechanical engineering programs and we expect large national impact due to sharing of lecture materials, laboratory exercises, and the virtual control system test beds with faculty at other universities.