Virtual Industrial Control Systems for Cybersecurity Engineering Education

在整个关键基础设施中使用的工业控制系统通常由来自与被控制的物理过程相关的领域的工程师设计、构建、操作和维护。 例如，化学工程师设计炼油厂，土木工程师设计结构，机械工程师设计工业机器人工业控制系统。 网络安全是这些系统的关键问题。 被利用的系统可能对社会造成经济和物质损害。工程师和网络安全分析师必须共同努力，安全地提供、操作和维护，并保护和捍卫关键的工业控制系统。化学，机械和土木工程师设计和操作工业控制系统，而网络安全人员的任务是设计，维护和操作工业控制系统的网络安全控制。 这两个群体之间缺乏知识重叠，这可能导致两个群体之间的误解，并减缓这些关键系统的安全控制措施的采用。该项目的目标是开发教育工具和课程，以缩小这些群体之间的知识差距，并导致更多的领域工程师拥有网络安全专业知识，同样，更多的网络安全分析师拥有领域工程专业知识。该项目将开发一套构建模块和方法，用于设计虚拟工业控制系统测试床。这些可重复使用的构建模块将用于开发3个虚拟工业控制系统测试床，分别来自土木工程、机械工程和化学工程;一个主动质量阻尼器系统、一个工业机器人和一个蒸馏塔。 网络安全讲座和实验室练习将被设计为融入土木，化学，电气和机械工程的现有课程。 此外，还将开发一套工业控制系统网络安全讲座和实验室练习，并将其添加到为计算机工程和计算机科学学生提供的现有网络安全工程介绍课程中。我们预计这个项目每年将在亨茨维尔的亚拉巴马大学（UAH）培养大约125名学生，他们来自土木、化学、计算机、电气和机械工程项目，我们预计由于与其他大学的教师共享讲座材料、实验室练习和虚拟控制系统测试台，将产生巨大的国家影响。

The industrial control systems used throughout critical infrastructure are often designed, built, operated, and maintained by engineers from domains related to the physical process being controlled. For example, chemical engineers design refineries, civil engineers design structures, and mechanical engineers design industrial robotic industrial control system. Cybersecurity is a critical concern for these systems. Exploited systems can cause financial and physical harm to society. Engineers and cybersecurity analysts must work together to securely provision, operate and maintain, and protect and defend critical industrial control systems. Chemical, mechanical, and civil engineers design and operate industrial control systems while cybersecurity personnel are tasked with designing, maintaining, and operating cybersecurity controls for the industrial control system. There is a lack of knowledge overlap among these two groups which can lead to misunderstandings among the two groups and slow the adoption of security controls for these critical systems. The objective of this project is to develop educational tools and coursework to narrow the knowledge gap between these groups and result in larger populations of domain engineers with cybersecurity expertise, and likewise, larger populations of cybersecurity analysts with domain engineering expertise.This project will develop a set of building blocks and methodologies for designing virtual industrial control system test beds. These reusable building blocks will be used to develop 3 virtual industrial control system test beds from civil, mechanical, and chemical engineering respectively; an active mass damper system, an industrial robot, and a distillation tower. Cybersecurity lectures and laboratory exercises will be designed for integration into existing classes in civil, chemical, electrical and mechanical engineering. Also, a set of industrial control system cybersecurity lectures and laboratory exercises will be developed and added to an existing Intro to Cybersecurity Engineering course offered to computer engineering and computer science students. We expect this project to train approximately 125 students per year at The University of Alabama in Huntsville (UAH) from the civil, chemical, computer, electrical, and mechanical engineering programs and we expect large national impact due to sharing of lecture materials, laboratory exercises, and the virtual control system test beds with faculty at other universities.