Course

Unit 1

Foundations of Cyber-Physical Systems Security

Introduction to Cyber-Physical Systems (CPS); Characteristics and Components of CPS; Critical Infrastructure Systems; Industrial Control Systems (ICS), Distributed Control Systems (DCS), Supervisory Control and Data Acquisition (SCADA); Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), Human Machine Interfaces (HMIs); Industry 4.0 and Industrial Internet of Things (IIoT); Cyber-Physical Attack Surface; IT versus OT Security; Threat Modeling and Risk Assessment; Security and Safety Interdependencies; CPS Security Case Studies.

Unit 2

CPS Networks and Communication Security

Industrial Network Architectures; Purdue Enterprise Reference Architecture; Secure ICS Network Design; Network Segmentation, Zones and Conduits; Industrial Ethernet and TCP/IP; Industrial Communication Protocols – Modbus TCP, DNP3, IEC 60870-5-104, IEC 61850, OPC UA and PROFINET; Wireless Technologies in CPS; Wireless Sensor Networks; Mobile Ad Hoc Networks (MANETs); Vehicular Ad Hoc Networks (VANETs); Jamming Attacks, Routing Attacks, Identity-Based Attacks; Secure Communication Mechanisms and Protocol Hardening.

Unit 3

Platform, Device and Embedded System Security

Embedded Systems Security; Secure Firmware and Secure Boot; Hardware Root of Trust; Trusted Execution Environments; Hardware Supply Chain Security; Physical and Side-Channel Attacks; Detection of Compromised Nodes; Device Authentication and Access Control; Compiler-Assisted Security; Static and Dynamic Analysis Techniques; Endpoint Protection and System Hardening for CPS Devices.

Unit 4

AI, Digital Twins and Intelligent CPS Security

Artificial Intelligence and Machine Learning for CPS Security; Network Traffic Analytics and Anomaly Detection; Federated Learning for Distributed CPS Environments; Reinforcement Learning for Adaptive Defense; Explainable AI for Critical Infrastructure Security; Adversarial Machine Learning Attacks and Defenses; Digital Twin Architectures; Security Digital Twins; Twin Synchronization and Integrity Attacks; Data Poisoning and Model Manipulation; Twin-Based Monitoring, Resilience and Predictive Security.

Unit 5

Monitoring, Detection, Incident Response and Forensics

Security Monitoring in CPS; Distributed Event Monitoring; Security Information and Event Management (SIEM); Threat Intelligence for Critical Infrastructure; Intrusion Detection and Prevention Systems for CPS; Situational Awareness and Event Correlation; CPS Incident Response; SCADA and ICS Forensics; Smart Grid and Vehicle Forensics; Digital Twin-Assisted Forensics; Log Analysis and Security Analytics.

Unit 6

Governance, Formal Methods and CPS Applications

Security Governance and Risk Management; Security Policies and Access Control Models; Formal Methods for CPS Security; Model Checking and Security Verification; Safety-Security Co-engineering; Cyber Resilience and Business Continuity; Standards and Frameworks – IEC 62443, NIST SP 800-82, NERC CIP and ISO/IEC 27019; Security and Privacy in Smart Grids; Industrial Automation and Manufacturing Systems; Connected and Autonomous Vehicles; Healthcare and Medical Device Security; Smart Cities and Critical Infrastructure Protection.

Text Books / References

Textbook

1. Cyber-Physical Systems Security, Springer, 2017.
2. Industrial Network Security, O’Reilly Media, 2nd Edition, 2024.
3. Practical Industrial Cybersecurity, Packt Publishing, 2023.

References

1. Handbook on Securing Cyber-Physical Critical Infrastructure, Morgan Kaufmann, 2012.
2. Handbook of SCADA/Control Systems Security, CRC Press, 2nd Edition, 2016.
3. Cybersecurity for Industrial Control Systems, CRC Press, 2016.
4. Industrial Cybersecurity, CRC Press, 2024.
5. Practical Cybersecurity Architecture, Packt Publishing, 2022.
6. Guide to Industrial Control Systems (ICS) Security, National Institute of Standards and Technology, 2023.
7. Security and Resilience in Intelligent Data-Centric Systems and Communication Networks, Academic Press, 2018.
8. Internet of Things Security and Privacy, CRC Press, 2016.
9. Industrial IoT Security, Packt Publishing, 2022.
10. MITRE ATT&CK for ICS.
11. Cybersecurity and Infrastructure Security Agency.

Cyber-Physical Systems (CPS) integrate computation, communication, and physical processes to enable intelligent monitoring, control, and automation across critical sectors such as energy, manufacturing, transportation, healthcare, smart cities, and industrial automation. The increasing convergence of Information Technology (IT), Operational Technology (OT), Industrial Internet of Things (IIoT), cloud computing, and artificial intelligence has significantly expanded the attack surface of these systems, making them attractive targets for sophisticated cyber-attacks. Security breaches in CPS can have severe consequences, including operational disruptions, financial losses, environmental damage, and threats to human safety.

This course provides a comprehensive study of the security challenges, vulnerabilities, threats, and defense mechanisms associated with modern Cyber-Physical Systems. The course covers foundational concepts of CPS, Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, industrial communication protocols, embedded and platform security, secure network architectures, and critical infrastructure protection. It also explores emerging topics such as Industrial IoT (IIoT) security, AI-driven threat detection, Digital Twin security, cyber resilience, incident response, and CPS forensics.

Students will gain an understanding of risk assessment, monitoring, governance frameworks, formal methods, and international standards for securing CPS environments. Through the study of real-world cyber incidents and contemporary defense strategies, the course equips students with the knowledge and skills required to design, analyze, and secure next-generation cyber-physical infrastructures and critical systems. The course prepares graduates for research and professional roles in industrial cybersecurity, critical infrastructure protection, smart grid security, connected and autonomous systems, and Industry 4.0 environments.

Course Objectives

• Understand the architecture, components, and operational characteristics of Cyber-Physical Systems (CPS), Industrial Control Systems (ICS), SCADA systems, and Industrial Internet of Things (IIoT) environments.
• Analyze security threats, vulnerabilities, attack vectors, and risk factors affecting critical cyber-physical infrastructures.
• Study industrial communication protocols, network architectures, and secure communication mechanisms used in CPS environments.
• Learn security principles and defense mechanisms for embedded systems, industrial devices, sensors, controllers, and field networks.
• Apply advanced techniques such as Artificial Intelligence (AI), Machine Learning (ML), and Digital Twins for CPS monitoring, anomaly detection, and cyber resilience.
• Understand security monitoring, incident response, forensic investigation, and situational awareness in cyber-physical environments.
• Explore governance frameworks, risk management methodologies, formal methods, and international standards for CPS security and critical infrastructure protection.
• Evaluate security and privacy challenges in real-world CPS applications including smart grids, industrial automation, connected vehicles, healthcare systems, and smart cities.
• Develop the ability to design, analyze, and implement secure and resilient cyber-physical systems for critical infrastructure applications.
• Prepare students for advanced research and professional practice in CPS security, industrial cybersecurity, and critical infrastructure protection.

Course Outcomes

Upon successful completion of the course, students will be able to:

• CO1: Analyze security threats, vulnerabilities, and risks in Cyber-Physical Systems and Critical Infrastructure.
• CO2: Design secure architectures and communication mechanisms for CPS, ICS, SCADA, and IIoT environments.
• CO3: Evaluate and secure embedded platforms, industrial devices, and communication protocols.
• CO4: Apply AI/ML and Digital Twin technologies for CPS monitoring, anomaly detection, and resilience.
• CO5: Perform incident response, forensic analysis, and security monitoring in CPS environments.
• CO6: Apply formal methods, governance frameworks, and industry standards to ensure CPS security and resilience.

Prerequisites: Computer Networks, Information Security/Cybersecurity, and Operating Systems.

CO-PO Mapping

Evaluation:

• Midterm Exam – 30%  
• Assignments – 10%
• Lab Assignments – 30% 
• Final Exam – 30%