Advancing digitalization has not only had a significant impact on the field of information technology (IT), but is also increasingly affecting operational technology (OT). With the increasing use of networked systems in industrial environments, security is becoming of crucial importance. The Public Key Infrastructure (PKI) has established itself as a proven concept in both IT and OT to provide the means for authenticity, integrity and confidentiality. However, innovations to the PKI concept are largely driven by IT.

The challenges and special features of OT require a critical review of PKI innovations to ensure that they meet the specific requirements of industrial control and automation systems. This is particularly reinforced by architectural changes in OT such as modularization or Ethernet APL. Potential security gaps will be identified and suitable adaptations proposed to optimize the integration of PKI in OT environments.

This work offers the opportunity to contribute to the security landscape of OT and at the same time develop a deeper understanding of the interface between IT and OT. The focus of the work is on the development of practical solutions that ensure the secure operation of industrial systems and demonstrate the potential of PKI in OT.

OBJECTIVES

• Research the latest PKI developments
• Evaluation of innovations for OT
• Develop a demonstrator for a selected PKI innovation in the IRS process engineering laboratory

HELPFUL PRIOR KNOWLEDGE

• Great interest in familiarizing yourself with security concepts
• Lecture Cyber-Physical Production Systems or IT/OT-Security Seminar
• Enjoy dealing with interdisciplinary topics