Day 1
Cybersecurity Management during Product Engineering (Cyber Physical Systems)
We will show objectives and requirements for a project dependent cybersecurity management including examples in correlation with overall cybersecurity management.
Further, the interaction with Functional Safety will be explained. Ongoing activities like cybersecurity monitoring, event management, vulnerability analysis and management will be discussed. Nevertheless, examples how to achieve goals for continuous cybersecurity activities will be delivered.
Introduction to TARA (Threat Analysis and Risk Assessment) and introduction to cybersecurity analysis methods, like attack tree analysis and others. You will also get familiar with valuation tables for attack feasibility and estimation of damage, the creation of a risk matrix, parameter and content of attack feasibility, and different terms like damage scenario, threat scenario, and attack path. Examples of performing a TARA are given. The different steps of the risk analysis will be illustrated with exercises.
