Cyber Security basics and system hardening with Automation Studio [SOC990.1]

Following this learning path you will get an impression of the consequences of legal regulations of the European Union, concerning cyber security issues in industrial automation. After a technical introduction into encryption technology you will actively secure different communication channels from and to a PLC and consider different possibilities for certificate management with Automation Studio.

Module 1	Cyber Security Basics
Module 2	System hardening with Automation Studio 6

^{Further information is provided below.}

Available languages:

English
German

Order Code:

SOC990.1
Information for B&R employees

Module 1:

Cyber Security Basics

Description	This course will provide an overview of legal regulations of the European Union concerning Cyber Security. An introduction in important IT-security terms is given, concepts of modern encryption technologies are explained and B&R support channels are shown. Content: Derive the consequences of NIS2.0 and the Cyber Resilience Act (CRA) for industrial automation. Compare the security goals in communication in the IT and OT environment and identify their priorities. Understand the advantages and disadvantages of different types of encryption and explain the importance of hybrid encryption. Describe content and significance of digital certificates and a public key infrastructure (PKI). Understand TLS (Transport Layer Security) as the current protocol for communication security and associate its functionality with the security goals. Use the B&R Cyber Security support channels and know their use cases.
Target group	Application and sales engineers who want to understand the importance of todays cyber security requirements on a technical basis
Requirements	None Basic knowledge about IT-networks advantageous
Topic duration	About 3 hours
Hardware used	For completing this course no hardware is needed.
Software used	For completing this course no software is needed.

Module 2:

System hardening with Automation Studio 6

Description	This course will provide you with the necessary information on how to implement cyber security features on various communication protocols of a B&R control system. Besides the practical work with an Automation Studio project further possibilities are shown to utilize a firewall and B&R libraries for additional system hardening. Content: Create and manage self signed and 3rd-party certificates in Automation Studio. Use different types of SSL configurations in Automation Studio to realize TLS for communication. Configure encryption in Automation Studio for various communication protocols (ANSL, FTP, HTTP, ...) Create firewall rules on an ETH interface of a controller. Describe the use cases for the B&R libraries ArCert and ArSsl. Consider different ways for certificate management including a GDS.
Target group	Application engineers responsible for the implementation of secure communication protocols on PLC level of an OT system
Requirements	Automation Studio basic knowledge
Topic duration	About 5 hours
Hardware used	The online course can be followed using any B&R control hardware, e.g. X20CP1686X
Software used	Automation Studio version 6.3 Automation Runtime version 6.3 or higher mapp View version 6.3 UaExpert version 1.7.2 UaGDS version 1.1.1