Airbus Se · EURONEXT:AIR

Airbus — Airbus Protect — Conference Presentation (September 2023)

30 slides from Airbus's conference presentation, September 2023

  1. Slide 1: Enabling a trusted future

    ©Airbus Protect } _enabling a trusted future # A strong partner in building a trustable future.

  2. Slide 2: Video replaced with image

    ©Airbus Protect Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 2

  3. Slide 3: Personal Introduction

    ©Airbus Protect / Personal >>> Introduction • Nathan Pooley • Senior OT Cyber Security Consultant at Airbus Protect • Ex CHECK Pen Tester • IEC 62443 Advocate • Specialising in CNI Nuclear and Water • NCSC i100 Member 3

  4. Slide 4: Talk Objectives

    ©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 4

  5. Slide 5: Talk Objectives

    ©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 5

  6. Slide 6: Talk Objectives

    ©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and Reference system compromise models with CyberRange 6

  7. Slide 7: Talk Objectives

    ©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 7

  8. Slide 8: Talk Objectives

    ©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT system compromise Standards and with CyberRange Reference models 8

  9. Slide 9: CyberRange: a simulation and training platform

    ©Airbus Protect } _CyberRange a simulation + training platform : Increase resilience, reduce downtime and significantly alleviates risk in critical infrastructure # 9

  10. Slide 10: CNI sectors

    ©Airbus Protect : CNI COMMUNICATIONS WATER CIVIL NUCLEAR DEFENCE CHEMICALS CRITICAL EMERGENCY INFRASTRUCTURE SERVICES SECTORS TRANSPORT ENERGY SPACE FINANCE HEALTH FOOD GOVERNMENT GOVERNMENT 10

  11. Slide 11: Cyber Informed Engineering: Consequence focussed identifying risks

    ©Airbus Protect : Cyber Informed Engineering >>> Consequence focussed - Identifying Risks Increasing Resilience within CNI ▪ CCE Phase 1: Identifying High Consequence Events (HCE) ✔ Identify physical events that are achievable through cyber attack ▪ CCE Phase 2: System of Systems Analysis ✔ Identify

  12. Slide 12: Training Possibilities

    ©Airbus Protect : Training Possibilities > Incident Response > Training > Red/Blue Teaming > Operational Testing Bundle 12

  13. Slide 13: Example: a Cyberattack Scenario

    ©Airbus Protect : Example >>> a Cyberattack Scenario Perform a « shellshock » cyberattack in order to exfiltrate data stealthily Cyberattack Library Cyberattack Options 13

  14. Slide 14: CyberRange Community

    ©Airbus Protect : CyberRange Community >>> Share innovation and expertise freely & openly Save time by using shared content Easily share your expertise with other entities Communicate with ease from/to another CyberRange(s) 14

  15. Slide 15: Typical Use Cases and References

    ©Airbus Protect / Typical Use Cases >>> and References : Real Environments Simulated Assets Topologies (e.g. HMI, PLC, EWS) 3D emulation of Results of Attack Physical Process Attack Scenario 15

  16. Slide 16: Lifecycle Challenges in IT vs OT

    ©Airbus Protect : Lifecycle Challenges >>> in IT vs OT Asset Lifecycle Asset Lifecycle 3-5 Years 30+ Years Cloud Software Software Licenses Licenses Life of the Forced Migration Level 4/5 Level 4/5 System Data Access Processing Processes Security Options IT OT Security Options Many Few Systems Main

  17. Slide 17: CNI: Foresight 2030 Threats

    CNI jer x * x Foresight 2030 Threats This booklet summarises upcoming challenges and provides for an assessment of the risks. We are now ready to design the cyber secure future ahead of us. Published September 13, 2023 Language Airbus Protect Search for resource TOPICS + PUBLICATIONS. TOOLS NEWS EVE

  18. Slide 18: CNI: Supply chain compromise of software dependencies

    CNI enisa SUPPLY CHAIN COMPROMISE OF SOFTWARE DEPENDENCIES Co \/ JIN WHAT IF... State-sponsored actors insert a backdoor in a well-known and popular open-source library on online code repository. They use this to infiltrate information from most major European corporations and use the information to

  19. Slide 19: IEC 62443 Security level: SL-C, SL-T, SL-A

    ©Airbus Protect / IEC 62443 [ Security level ] >>> SL-C, SL-T, SL-A SL0 No special requirement or protection provided. SL1 Protection against unintentional or accidental misuse. Protection against intentional misuse by simple means with few SL2 resources, general skills, and low motivation. Protecti

  20. Slide 20: Cyber Risk Reduction Factor

    Likelihood Impact Remote | Unlikely | Possible 2 Unmitigated Minor_| Tolerable Risk f= Cyber Risk 9 a 8 12 10 15 Risk CRRF = 16/4 CRRF=4 SL-T=3 Cyber Risk Reduction Factor = Unmitigated Risk / Tolerable Tolerable Risk=4 Risk CRRF my ia 4 0.25 0.50 0.75 1.00 1.25 150 17S 2.00 wlao}r}a 2.25 Rie|o 4 ir

  21. Slide 21: SuC SL-C, SL-T, SL-A

    ©Airbus Protect : SuC SL-C, SL-T, SL-A 21

  22. Slide 22: Live Demo Time

    ©Airbus Protect Live Demo Time

  23. Slide 23: CyberRange

    ©Airbus Protect : CyberRange Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 23 15 Nov 2022

  24. Slide 24: CyberRange

    ©Airbus Protect : CyberRange Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 24 15 Nov 2022

  25. Slide 25: CyberRange

    ©Airbus Protect : CyberRange Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 25 15 Nov 2022

  26. Slide 26: CyberRange

    ©Airbus Protect : CyberRange Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 26 15 Nov 2022

  27. Slide 27: Video replaced with image

    ©Airbus Protect Video Replaced with image to reduce file size. For full version please contact Airbus Protect - https://www.protect.airbus.com/contact/ 27

  28. Slide 28: Wrap up: Benefits of CyberRange

    ©Airbus Protect : Wrap up >>> Benefits of CyberRange Open & Realistic Increase Efficiency Customisable • Digital Twin • Complex Bundles • Assets • Real IT, OT and • Easy UI Capabilities • Actions and Scenarios NETWORK Assets • Fast CVE Assessments • Tutorials • Real Attacks – Cyber • Efficient Risk

  29. Slide 29: Questions?

    ©Airbus Protect Questions ?

  30. Slide 30: Thank you

    ©Airbus Protect thank you Nathan Pooley {contact us} Nathan.pooley@airbus.com

Airbus Protect — Conference Presentation (September 2023) on 6ix