ACTIVITIES

• Definition and construction of cybersecurity testing environments in critical infrastructures. The emulation of supervisory and control systems is carried out in the industrial, buildings and electric power field, using structures and elements similar to those used in real infrastructures.
• Study and analysis of vulnerabilities and attack techniques that affect the supervision and control systems of critical infrastructures and their communication protocols.
• Experimental verification of threats on test environments and implementation of countermeasures to protect the system against them.
• Development of techniques based on the passive monitoring of network traffic and the application of complex rules for the detection of intrusions in control and monitoring systems.
• Development of techniques for visual analysis of data to improve the interpretation of potentially interesting events for security in the monitoring systems used for detection and response to incidents.
• Development of tools to support the prevention, detection, filtering and response to security incidents in supervisory and control systems in the industrial, building and electric power sectors.

• Introduction to cybersecurity in critical infrastructure monitoring and control systems.
• Analysis of the attack surface of a control system. Description and analysis of typical threats.
• Segmentation and protection of industrial networks: switches, routers and industrial firewalls.
• Security for external access: VPNs.
• Security in SCADA systems and security for external access: VPNs.

LABORATORY OF CYBERSECURITY IN THE SYSTEMS OF CONTROL OF SUBSTATIONS AND ELECTRIC TRANSFORMATION CENTERS (UNLE15-EE-2943).

Funding entity: Ministry of Economy and Competitiveness
Name of the program: Plan of Aids and Infrastructures and Scientific-Technical Equipment of the State Subprogram of Scientific Infrastructures and Equipment of the year 2015.
Dates: 01/01/2016 – 12/31/2017
Duration: 3 years.