Reference no: EM133109328

UFCF7P-15-M Critical Systems Security - University of the West of England Bristol

Section 1: Overview of Assessment

This assignment assesses the following module learning outcomes:

Demonstrate a deep and systematic understanding of conventional and contemporary ICS implementations and their comparison to IT systems in the context of cyber security; (A, B)

Undertake the analysis of the cyber threat landscape in ICS and evaluate current cyber protection approaches in the field; (B)

Design and evaluate improvements in current cyber protection approaches to tackle the cyber security challenges that arise in ICS. (B)
The assignment is worth 50% of the overall mark for the module.

Broadly speaking, the assignment requires you to write a 2,000(+/-10%) words report on the analysis of the current cyber threat landscape and cyber protection approaches in the Critical Infrastructure, proposing ways for improvement. The report will be research-based, written in an industrial standards format; you are expected to draw information from one or more case studies including but not limited to "Stuxnet" (and/or variations of Stuxnet), the "Analysis of the Cyber Attack on the Ukrainian Power Grid" in 2015 and Wannacry.

Section 2: Task Specification

Produce a 2,000 (+/-10%) words report analysing selected case study/-ies on cyber security incidents in the Critical Infrastructure for a given industry of your choosing (such as, Water, Energy, Telecomms...).

You are working as an independent consultant for a Cyber Security firm that operates a Research and Development department on Cyber Security in Industrial Control Systems. The firm wants to gather intelligence on cyber security in Critical Systems in order to come up with new products and solutions. Your assignment is to do research in this area and produce a report that addresses the firm's needs. In particular, your research will focus on:

The analysis of the current threat landscape in cyber physical control systems used in the Critical Infrastructure for a given industry of you choosing.

The analysis and evaluation of current cyber-security approaches in the field.

Ways to improve current cyber security approaches, analysing their impact on the system.

Your research must draw information from one or more case studies provided in the lectures (e.g. Stuxnet, Flame, Ukrainian Power Grid, Wannacry etc.) and relevant papers of high quality. In your report, you must clearly identify the following elements:

The differences between traditional IT systems and Critical Systems and how they affect cyber security;

The entities involved in cyber security incidents in the Critical Infrastructure (e.g. attack actors, ICS vendors, environment etc.);

The cyber security risks and the associated threat vectors;

Current cyber security approaches and their limitations, analysing the technical and operational challenges that arise;
Ways to improve cyber security in this area, discussing their impact on the system.

Section 3: Deliverables
A 2,000(+/-10%) word written report is to be submitted.

Your report should include the result of your research as described in Section 2. On the first page of your report you should clearly identify the subject/title of the report, your name and surname followed by your student ID and the current date.

Attachment:- Critical Systems Security.rar