Slide 1: Enabling a trusted future
©Airbus Protect } _enabling a trusted future # A strong partner in building a trustable future.
Slide 2: Remote console - 3D Nuclear
Remote console - 3D Nuclear © Clipboard =” Fullscreen 3% 1307x882 ~ 8 Shortcut Keys ~ 3 English (en-US) <2 Power Output Turbine Speed Reactor Temp Cooling Tower ControiRods = Net Loss: U1: 750 MWe U1: 3600 RPM Ul: 695°C Ul: 96°C UL: 14% U2: 750 MWe 2: 3600 RPM u2: 695°C u2: 96°C U2: 14% $0 - ~—" i <
Slide 3: Personal Introduction
©Airbus Protect / Personal >>> Introduction • Nathan Pooley • Senior OT Cyber Security Consultant at Airbus Protect • Ex CHECK Pen Tester • IEC 62443 Advocate • Specialising in CNI Nuclear and Water • NCSC i100 Member 3
Slide 4: Talk Objectives
©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 4
Slide 5: Talk Objectives
©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 5
Slide 6: Talk Objectives
©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and Reference system compromise models with CyberRange 6
Slide 7: Talk Objectives
©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT Standards and system compromise Reference models with CyberRange 7
Slide 8: Talk Objectives
©Airbus Protect : Talk Objectives IT vs OT CNI use cases for a CyberRange and digital twins Lifecycle challenges in OT vs IT Interactive Demonstration of OT system compromise Standards and with CyberRange Reference models 8
Slide 9: CyberRange: a simulation + training platform
©Airbus Protect } _CyberRange a simulation + training platform : Increase resilience, reduce downtime and significantly alleviates risk in critical infrastructure # 9
Slide 10: CNI sectors
©Airbus Protect : CNI COMMUNICATIONS WATER CIVIL NUCLEAR DEFENCE CHEMICALS CRITICAL EMERGENCY INFRASTRUCTURE SERVICES SECTORS TRANSPORT ENERGY SPACE FINANCE HEALTH FOOD GOVERNMENT GOVERNMENT 10
Slide 11: Cyber Informed Engineering: Consequence focused
©Airbus Protect : Cyber Informed Engineering >>> Consequence focused - Identifying Risks Increasing Resilience within CNI ▪ CCE Phase 1: Identifying High Consequence Events (HCE) ✔ Identify physical events that are achievable through cyber attack ▪ CCE Phase 2: System of Systems Analysis ✔ Identify
Slide 12: Training Possibilities
©Airbus Protect : Training Possibilities > Incident Response > Training > Red/Blue Teaming > Operational Testing Bundle 12
Slide 13: Example Cyberattack Scenario
©Airbus Protect : Example >>> a Cyberattack Scenario Perform a « shellshock » cyberattack in order to exfiltrate data stealthily Cyberattack Library Cyberattack Options 13
Slide 14: CyberRange Community
©Airbus Protect : CyberRange Community >>> Share innovation and expertise freely & openly Save time by using shared content Easily share your expertise with other entities Communicate with ease from/to another CyberRange(s) 14
Slide 15: Typical Use Cases and References
©Airbus Protect / Typical Use Cases >>> and References : Real Environments Simulated Assets Topologies (e.g. HMI, PLC, EWS) 3D emulation of Results of Attack Physical Process Attack Scenario 15
Slide 16: Lifecycle Challenges in IT vs OT
©Airbus Protect : Lifecycle Challenges >>> in IT vs OT Asset Lifecycle Asset Lifecycle 3-5 Years 30+ Years Cloud Software Software Licenses Licenses Life of the Forced Migration Level 4/5 Level 4/5 System Data Access Processing Processes Security Options IT OT Security Options Many Few Systems Main
Slide 17: CNI: Foresight 2030 Threats
CNI jer x * x Foresight 2030 Threats This booklet summarises upcoming challenges and provides for an assessment of the risks. We are now ready to design the cyber secure future ahead of us. Published September 13, 2023 Language Airbus Protect Search for resource TOPICS + PUBLICATIONS. TOOLS NEWS EVE
Slide 18: CNI: Supply chain compromise of software dependencies
CNI enisa SUPPLY CHAIN COMPROMISE OF SOFTWARE DEPENDENCIES Co \/ JIN WHAT IF... State-sponsored actors insert a backdoor in a well-known and popular open-source library on online code repository. They use this to infiltrate information from most major European corporations and use the information to
Slide 19: IEC 62443 Security level
©Airbus Protect / IEC 62443 [ Security level ] >>> SL-C, SL-T, SL-A SL0 No special requirement or protection provided. SL1 Protection against unintentional or accidental misuse. Protection against intentional misuse by simple means with few SL2 resources, general skills, and low motivation. Protecti
Slide 20: Cyber Risk Reduction Factor
Likelihood Impact 1 Trivial Remote | Unlikely | Possible 2 Unmitigated Minor_| Tolerable Risk [— Cyber Risk 9 q 8 12 10 15 Cyber Risk Reduction Factor = Unmitigated Risk / Tolerable Risk CRRF = 16/4 CRRF=4 SL-T=3 Tolerable Risk=4 Risk CRRF o loa = 0.25 0.50 0.75 1.00 1.25 1.50 175 2.00 2.25 2.50 2.7
Slide 21: SuC SL-C, SL-T, SL-A
©Airbus Protect : SuC SL-C, SL-T, SL-A 21
Slide 22: Live Demo Time
©Airbus Protect Live Demo Time
Slide 23: CyberRange Nov 2022
©Airbus Protect : CyberRange 23 15 Nov 2022
Slide 24: CyberRange Nov 2022
©Airbus Protect : CyberRange 24 15 Nov 2022
Slide 25: CyberRange Nov 2022
©Airbus Protect : CyberRange 25 15 Nov 2022
Slide 26: CyberRange Nov 2022
©Airbus Protect : CyberRange 26 15 Nov 2022
Slide 27: Remote console - 3D Nuclear
Power Output 1: 750 MWe 2: 750 MWe aN BN U2: 3600 RPM Remote console - 3D Nuclear 1B Clipboard Fullcreen 3% 1340x871 ~ 3 Shortcut Keys ~ G3 English (en-US) + ‘Turbine Speed epee Cooling Tower ControlRods_ =~ Net Loss: U1: 3600 RPM U1: 96°C UL: 14%
Slide 28: Wrap up: Benefits of CyberRange
©Airbus Protect : Wrap up >>> Benefits of CyberRange Open & Realistic Increase Efficiency Customisable • Digital Twin • Complex Bundles • Assets • Real IT, OT and • Easy UI Capabilities • Actions and Scenarios NETWORK Assets • Fast CVE Assessments • Tutorials • Real Attacks – Cyber • Efficient Risk
Slide 29: Questions?
©Airbus Protect Questions ?
Slide 30: Thank you
©Airbus Protect thank you Nathan Pooley {contact us} Nathan.pooley@airbus.com