Infrastructure security for operational technologies (OT) and industrial control systems (ICS) varies from IT security in several ways, with the inverse confidentiality, integrity, and availability (CIA) tradeoff being one of the leading causes. Adopting cybersecurity solutions to protect OT infrastructure is a vital obligation since availability is critical in OT infrastructure. It necessitates a thorough knowledge of ICS operations, security standards/frameworks, and recommended security solutions. OT security in the past was restricted to guarding the infrastructure using well-known techniq ..read more

What is an Operational Technology (OT)? Operational technology (OT) is a technology that primarily monitors and controls physical operations. It can automate and control machines, equipment, sensors, and other assets. OT systems use in manufacturing, health care, and transportation industries. Operational technology is a broad term encompassing many disciplines, such as engineering, IT, and operations management. OT systems include: Intelligent Process Automation (IPA)– This OT system can control processes such as chemical reactions on a factory floor through computerized algorithms that moni ..read more

This article discusses OT security and why it is essential for protecting industrial systems from cyberattacks. We will also discuss common control objectives that can help companies improve their overall cybersecurity posture by implementing effective OT security measures. What is OT Security? OT security is the security of industrial control systems, which include all types of equipment and software used to control processes in an industrial environment. It has everything from buildings and machines to manufacturing lines, power plants, and water treatment facilities. The OT environment ..read more

Producing deepfake is easy. It is hard to detect. They operate with a description of reality rather than reality itself (e.g., a video). Any artifact a system can identify to support a Deepfake can also be removed in a subsequent Deepfake creation. This article discusses the art of Deepfake. What Is Deepfake? Deepfakes are a condition of artificial intelligence that allows you to create realistic-looking videos. They’re used in movies, YouTube videos, and more. The goal of using this type of AI is to trick people into thinking that what they see is real—even though it’s not. Experts at academi ..read more

The smart grid is an emerging paradigm for more reliable and efficient power delivery. It requires monitoring, controlling, and managing the power grid in real-time. Cyber-Physical Systems (CPS) is an emerging technology that can meet many of the challenges in smart grid systems. This article presents CPS technologies, their applications in smart grids, and security issues with CPS applications in smart grids. Introduction With the advent of modern technology, the world is undergoing a rapid transformation in which everything from homes to entire cities is becoming increasingly smart. Thi ..read more

Hospitals hold a lot of sensitive data. When they are hacked, patient information is exposed, putting patients at risk because the hackers can use stolen personal information in several identity theft schemes. The Department of Health and Human Services (HHS) has been working hard to protect hospitals from cyberattacks, but the fact is that while they do the best they can, there will always be breaches and more work to be done. The government is trying everything to ensure that hospitals are protected and that patients are aware of any breaches as quickly as possible when they do occur. Hospit ..read more

Cyber-physical systems (CPS) are engineered systems that integrate computation, networking, and physical process. CPS classifies in many ways, including their scale, embeddedness, and the nature of their physical processes. In this article, we consider CPS from a software engineering perspective, examining how software engineers conceptualize CPS and which established software engineering concepts may be relevant to the study of CPS. We introduce a definition of CPS based on existing definitions but informed by our understanding of software development processes. While many people use this ter ..read more

NIST is a leader in the critical infrastructure protection field. NIST has been at the forefront of critical infrastructure protection since the 1990s and has been working on it since before that—in response to an executive order issued by President Reagan in 1986, directing federal agencies to assess their own security needs and capabilities. The result was FEMP (Federal Emergency Management Agency) and other organizations such as NIST. Since then, they’ve made huge strides: from helping establish standards for protecting information systems from cyber-attacks to providing technical assi ..read more

The critical infrastructure of a country is what provides the lifeblood to its citizens. It includes everything from power plants, food supply, water systems, and transportation. However, these infrastructures are vulnerable to attack or natural disasters that can lead to loss of life and property. That’s why countries must take steps toward making their critical infrastructures more secure and resilient. Upon completing this article, you will be able to: Identify the different types of hazards that threaten critical infrastructure Recognize the Framework for securing and securing critical in ..read more

Gone are the days when phones were only used to make phone calls and send text messages; nowadays, smartphones are more akin to a pocket-sized version of a high-functioning microcomputer that can perform a wide range of functions aside from communications. Android phones are essentially a sub-category of smartphones with installed Android operating systems, allowing their features to function effectively. Today, virtually everybody owns a smartphone, especially the prevalent android versions. More advanced versions of these phones are released yearly with newer innovations and improved operati ..read more