CYB307 – Critical Infrastructure Security

The unit will cover domain-specific cybersecurity for several critical infrastructures including electricity grids, cyber-physical systems, oil, communications, Internet, ransomware, SCADA systems, water and water treatment, gas, supply chains, health care, and transport. Specific cybersecurity risks for each sector will be taught as part of the unit, and a holistic solution base for cybersecurity across each of the sectors will be covered. A use-case-based approach to pedagogy will be adopted in this unit, wherein the weekly topic will be centred on a real-life case study in the context of critical infrastructure security, including adversarial tactics, defences, vulnerabilities and countermeasures. By teaching both contemporary cases and adversarial thinking, this unit prepares students for creating security solutions for a range of critical infrastructures and provides the skills to adapt as applications and standards evolve.

Learning Outcomes:

• Explain fundamental concepts of critical infrastructures, assets, processes, hardware/software and dependencies
• Analyse threat models for critical infrastructures and identify threat agents
• Assess and illustrate vulnerabilities in critical infrastructures
• Analyse and formulate a report on critical infrastructure security