Work-in-progress: Layering cybersecurity on domain engineering instruction

Abstract

The grand challenge to secure cyberspace includes securing industrial control systems. These systems monitor and control physical processes such as nuclear power plants, gas pipelines, dams, electrical power distribution and are susceptible to cyber threats. However, many of the engineers responsible for designing, operating, and maintaining these systems do not have an appreciation of, nor understand, these threats. Conversely, cyber security professionals, having studied computer engineering, computer science, or information systems understand cybersecurity principles and threat vectors, but not the implications of the threats on the industrial control systems. There is a need for cross pollination between the two groups. We have developed a two week module on cybersecurity of industrial control systems that was first delivered to a civil engineering senior design class (Fall 2017). We subsequently expanded our reach by offering the instruction as an extra credit opportunity for a large enrollment mechanical/aerospace engineering class at the sophomore level and a chemical engineering class at the senior level (Spring 2018). Surveys administered pre- and post-instruction show significant increases in the level of appreciation students have for the challenges presented by our increasingly connected world.