Modernization of Manufacturing with Cybersecurity at the Forefront

Manufacturing;ICS;Security risks;Cybersecurity;SCADA;Operational technology;Smart manufacturing;Computer science;Computer and Information Science, College of Engineering & Computer Science

Mangano, Francesco E.Zhou, Feng ;

University of Michigan

关键词: Manufacturing;    ICS;    Security risks;    Cybersecurity;    SCADA;    Operational technology;    Smart manufacturing;    Computer science;    Computer and Information Science, College of Engineering & Computer Science;   

Others  :  https://deepblue.lib.umich.edu/bitstream/handle/2027.42/147433/49698122_CIS699%20-%20Mangano%20Thesis%20-%20Modernization%20of%20Manufacturing%20with%20Cybersecurity%20at%20the%20Forefront%20-%20Final%20121018-v4.pdf?sequence=1&isAllowed=y

瑞士|英语

来源: The Illinois Digital Environment for Access to Learning and Scholarship

【 摘 要 】

With the proliferation of Industrial Control Systems (ICSs), manufacturing processes have improved over the last 30 years, however, the organizational focus to securely exchange and process information to/from integrated systems has been consistently lacking. These environments continue to be susceptible to security vulnerabilities, despite history [15] showing that cybersecurity exposures in manufacturing have largely gone unaddressed and continue to rise [52]. This study evaluates cybersecurity challenges in the industry and proposes recommendations for practical and fiscally responsible defense-in-depth cybersecurity protections for manufacturing environments. The business operating model, how ICSs became pervasive, as well as the major components that enable the operational technology (OT) were evaluated. With an understanding of the traditional network architecture for the industry [37], the rapidly evolving challenges facing the industry were examined. These challenges are impactful to the traditional and slow to change manufacturing operating model that has not focused on the necessary cyber protections for their OT environments. In addition, the industry is now facing game-changing technological concepts such as advanced manufacturing and Industry 4.0 that bring new complex challenges and cyber threats, unfamiliar to most in the industry. This is all underpinned by an organizational divide where the personnel most knowledgeable with the modern technology and cyber risks, in the majority of cases, are not responsible for the OT architecture and security. These headwinds impact an industry which spends the least on IT and cyber security than any other industry, globally [22]. The cyber risks and challenges in the industry are diverse, spanning technological and organizational competencies, stemming from purpose built components which operate in an ecosystemwhere cybersecurity is an afterthought. As a means to close the gap, practical and reasonable recommendations to address these problems are discussed; some specific and unique to the manufacturing industry while others are fundamental applicationsdiscussed with a manufacturing industry lens, which are commonly ignored due to perceived complexity, cost or simply lack of awareness. Lastly, a number of these recommendations were selected for further evaluation and implementation; challenges, approach, benefits and outcomes are shared showing measureable improvements to the cybersecurity posture of the organization.