IIoT: cyber (no)security or where is functional safety still getting lost to me?
The proposed presentation will focus on the certMILS project targets consisting of standardised and validated methodology for evaluating and certifying high assurance products as well as guidelines for compositional security for developers and evaluators. Previously isolated physical systems have become connected to the Internet, thus becoming cyber-physical systems. For instance in transportation, for passenger as well as operator comfort, almost all means of transportation (airplanes, trains, cars, and ships) are networked. Due to the havoc potential of a malicious attacker, the security of cyber-physical systems has obtained a lot of interest. However, unlike many other IT systems, cyber-physical systems usually have already been heavily scrutinised for safety for decades.
While the safety protection against accidental faults does not address security, there are already established safety methods as well as “safety certification stakeholders”. Securing and certifying cyber-physical systems therefore must respect the existing safety certification processes.
Jan Rollo
Jan Rollo studied programming languages, accounting and economy between 1985 and 1992. Since 1992 he started his private business he supported till 2018. Since 1995 he contributed to EKIS and SAP R/3 implementation at the Ministry of the Interior. Since 2005 he works for SYSGO (Member of Thales Group since 2013) where he was appointed CEO since 2007. Since 2010 he leads the Research and Development Center Prague and contributes to the projects covering the functional safety and the cyber security topics.
Ing. Tomáš Kertis
Achieved the master degree in engineering at the Faculty of Transportation Sciences, Czech Technical University in Prague in 2015 and still continues with the research at the faculty in a Ph.D. programme focused on safety assessment of critical infrastructure in area of assets of metro operation and regularly publishes scientific papers.
Tomas has worked in Q-media as a security consultant since 2018. He also works as a functional safety engineer in the automotive industry. His expertise is safety and security of complex systems with more than 5 years practical experiences in development areas of railway, automotive industry, including control and embedded systems.
He participated in European projects:
• SESAMO (ARTEMIS Joint Undertaking) Security and Safety Modelling;
• CITADEL (H2020) Critical Infrastructure Protection using Adaptive MILS; and
• certMILS (H2020) Compositional security certification for medium- to high-assurance COTS-based systems in environments with emerging threats.
Ing. Michal Hager
Achieved an engineering degree from the University of Hradec Králové in 2016.
Since 2013 he has been an employee of Elektrotechnický zkušební ústav, s.p. He is the Head of the Cyber Security Laboratory. He has expertise in cyber security, auditing in accordance with ISO / IEC 27001, ISO 9001 and other standards for management systems.
He also participates in the European project certMILS (H2020) Compositional security certification for medium- to high-assurance COTS-based systems in environments with emerging threats.