PROPOSTA PARA APRENDIZAGEM DE CIBERSEGURANÇA DE SISTEMAS DE CONTROLE INDUSTRIAL BASEADA EM PROBLEMAS E APOIADA POR UMA PLANTA DIDÁTICA DE MANUFATURA AVANÇADA 4.0

LEARNING PROPOSAL FOR CYBERSECURITY FOR INDUSTRIAL CONTROL SYSTEMS BASED ON PROBLEMS AND ESTABLISHED BY A 4.0 DIDACTIC ADVANCED-MANUFACTURING-PLANT

Junqueira, Bruno Santos; Souza, Marvim Vinicius Souza de; Lima, Victor Bittencourt; Gonçalves, Wallace Souza Faria de Jesus; Lepikson, Herman Augusto

Original Article:

Dados de pesquisas indicam que a busca por profissionais de cibersegurança para proteger sistemas de controle industriais (ICS) no Brasil tem aumentado, principalmente em decorrência do aumento de ataques cibernéticos dirigidos à indústria. Entretanto, observa-se que há uma grande deficiência de profissionais com a competência em cibersegurança de ICS, que envolve as áreas de tecnologia da informação (IT) e de operação (OT), indicando uma carência de estratégias por parte das instituições de ensino para a formação de profissionais que dominem as tecnologias necessárias para a proteção de ICS. Este trabalho busca apresentar uma estratégia para lidar com esta carência a partir da avaliação de cenários indicativos de práticas para o desenvolvimento de competências em cibersegurança de ICS por meio da metodologia ativa de aprendizado baseada em problemas (PBL). Os cenários propostos combinam a teoria e a prática envolvida na resolução de problemas de cibersegurança de ICS, por meio do uso de PBL com o apoio da Planta de Manufatura Avançada 4.0 (AMP) do SENAI CIMATEC.

Researches data indicates that the search for cybersecurity professionals to protect industrial control systems (ICS) in Brazil is increasing, as a result of the rise in cyber-attacks directed at the industry. However, there is a deficiency of professionals with the required competence in ICS cybersecurity, which involves the areas of information (IT) and operational technology (OT). On the other hand, there is a lack of educational institutions with the right strategies for training professionals who master the technologies required for the protection of ICS. This paper seeks to present a strategy to address this lack through the evaluation of indicative scenarios of practices for the development of competencies in ICS cybersecurity through the active problem-based learning (PBL) methodology. The proposed scenarios combine the theory and practice involved in solving ICS cybersecurity problems, through the use of PBL with the support of SENAI CIMATEC's 4.0 Advanced Manufacturing Plant (AMP).

Palavras-chave:

DOI: 10.5151/siintec2021-208706

Referências bibliográficas

• [1] "1. KAGERMANN, H.; WAHLSTER, W.; HELBIG, J. Securing the future of German manufacturing industry. Recommendations for implementing the strategic initiative INDUSTRIE 4.0. Final report of the Industrie 4.0 Working Group. Acatech, pp. 5-78, 2013.
• [2] 2 MAHONEY, Thomas C.; DAVIS, Jim. Cybersecurity for Manufacturers: Securing the Digitized and Connected Factory. 2017.
• [3] 3 TÜV Rheinland, Ponemon Institute, The 2020 Study on the State of Industrial Security, 2020. Disponível em: https://go.tuv.com/otsurvey-2020?wt_mc=Advertising.Personalselling.no- interface.CW20_I07_FSCS.button.&cpid=CW20_I07_FSCS_PS. Acesso em: 6 de ago. 2021.
• [4] 4 SITNIKOVA, E., Foo, E., Vaughn, R. B. (2013). IFIP AICT 406, The Power of Hands-On Exercises in SCADA Cyber Security Education. In IFIP AICT (Vol. 6, Issue 8).
• [5] 5 RIBEIRO, Matheus dos Santos et al. A Indústria 4.0 e a computação no Brasil. 2019.
• [6] 6 (ISC)2, Cybersecurity Professionals Stand Up to a Pandemic, (ISC)2 CYBERSECURITY WORKFORCE STUDY, 2020. Disponível em: https://www.isc2.org/-/media/ISC2/Research/2020/Workforce-Study/ISC2ResearchDrivenWhitepaperFINAL.as. Acesso em: 6 de ago. 2021.
• [7] 7 DUCH, Barbara J.; GROH, Susan E.; ALLEN, Deborah E., The power of problem-based learning: a practical ""how to"" for teaching undergraduate courses in any discipline. Stylus Publishing, LLC., 2001.
• [8] 8 WILLEMS, Christian; MEINEL, Christoph. Online assessment for hands-on cyber security training in a virtual lab. In: Proceedings of the 2012 IEEE Global Engineering Education Conference (EDUCON). IEEE, 2012. p. 1-10.
• [9] 9 FIGUEROA, Santiago et al. A RFID-based IoT Cybersecurity Lab in Telecommunications Engineering. In: 2018 XIII Technologies Applied to Electronics Teaching Conference (TAEE). IEEE, 2018. p. 1-8.
• [10] 10 Kurt, S. Problem-Based Learning (PBL), in Educational Technology, January 8, 2020. Disponível em: https://educationaltechnology.net/problem-based-learning-pbl/. Acesso em: 9 de ago. 2021.
• [11] 11 DRIAS, Zakarya; SERHROUCHNI, Ahmed; VOGEL, Olivier. Analysis of cyber security for industrial control systems. In: 2015 International Conference on Cyber Security of Smart Cities, Industrial Control System and Communications (SSIC). IEEE, 2015. p. 1-8.
• [12] 12 FUTURA-AUTOMATION. System-On-Chip-Engineering-Pillar. Disponível em: https://futura-automation.com/2019/07/05/the-accumulating-case-for-deterministic-control/system-on-chip-engineering-pillar-sb/. Acesso em: 11 de ago. 2021.
• [13] 13 ANI, Uchenna P. Daniel; HE, Hongmei; TIWARI, Ashutosh. Review of cybersecurity issues in industrial critical infrastructure: manufacturing in perspective. Journal of Cyber Security Technology, v. 1, n. 1, p. 32-74, 2017.
• [14] 14 NEWHOUSE, William et al. National initiative for cybersecurity education (NICE) cybersecurity workforce framework. NIST special publication, v. 800, n. 2017, p. 181, 2017.
• [15] 15 FILKINS, Barbara; WYLIE, Doug; DELY, Sans 2019 state of OT/ICS cybersecurity survey. SANS™ Institute, 2019. Disponível em: https://www.forescout.com/resources/2019-sans-state-of-ot-ics-cybersecurity-survey/. Acesso em: Acesso em: 11 de ago. 2021.
• [16] 16 STOUFFER, Keith et al. Guide to industrial control systems (ICS) security. NIST special publication, v. 800, n. 82, p. 16-16, 2011.
• [17] 17 DUGGAN, David et al. Penetration testing of industrial control systems. Sandia national laboratories, p. 7, 2005.
• [18] 18 FUTURA-AUTOMATION. Understanding IEC 62443. Disponível em: https://www.iec.ch/blog/understanding-iec-62443/. Acesso em: 12 de ago. 2021.
• [19] 19 BITTENCOURT, Victor et al. PROPOSTA DE REFORMULAÇÃO PARA APLICAÇÃO DE TECNOLOGIAS DA INDÚSTRIA 4.0 EM UMA PLANTA DE MANUFATURA AVANÇADA. VI SAPCT, 2021.

Como citar:

Junqueira, Bruno Santos; Souza, Marvim Vinicius Souza de; Lima, Victor Bittencourt; Gonçalves, Wallace Souza Faria de Jesus; Lepikson, Herman Augusto; "PROPOSTA PARA APRENDIZAGEM DE CIBERSEGURANÇA DE SISTEMAS DE CONTROLE INDUSTRIAL BASEADA EM PROBLEMAS E APOIADA POR UMA PLANTA DIDÁTICA DE MANUFATURA AVANÇADA 4.0", p-81-88. In: VII International Symposium on Innovation and Technology. São Paulo: Blucher, 2021.
ISSN 23577592, DOI 10.5151/siintec2021-208706