for Building Credible Security Testbeds: Perspectives from Industrial Control System Use Cases

Comparative Analysis of ICS Cybersecurity Testbeds Using a Purdue-Aligned Approach

A comparative analysis of 34 ICS cybersecurity testbeds within a Purdue-aligned framework based on two complementary dimensions: Functional Maturity (FM) and Architectural Completeness (AC) reveals that many platforms provide advanced experimentation capabilities while offering only partial representation of industrial...

A Comprehensive Review of Cybersecurity Frameworks and Defense Mechanisms for Modbus and HTTP in Industrial Control Systems

Industrial Control Systems (ICS) form the backbone of critical infrastructure, enabling automation and control in sectors such as energy, water, and manufacturing. The convergence of Operational Technology (OT) and Information Technology (IT) has introduced significant cybersecurity challenges, particularly for legacy...

An Automated Risk-Based Critical Security Control Selection Approach for Research Infrastructures

Research infrastructures (RIs) face increasing cybersecurity challenges due to their growing reliance on digital and intelligent technologies. The expanding attack surface, limited security resources, and the inherent conflict between open scientific collaboration and strict security isolation contribute to these chall...

Resource Protection in Industrial Automation Systems Based on a Hybrid Zero Trust Architecture

This study addresses the cybersecurity challenges of Industrial Automation and Control Systems (IACS) amid the accelerating convergence of Information Technology (IT) and Operational Technology (OT). A comparative analysis of the traditional zoning model, formalized in ISA/IEC 62443, and Zero Trust Architecture (ZTA) e...

A dual-layer security framework for AI systems: a lifecycle-aware security testing approach

A Threat Modeling Prioritization and Automation Framework for Composable Architectures

A snapshot of the literature review of the threat modeling for composable architectures is offered, why automation is difficult in this context is shown, and an automation framework to allocate scarce resources according to risk exposure to composable architecture components is proposed.