Framework pro zmírňováni, detekci a reakci na hrozby pro průmyslové řídicí systémy

This thesis proposes ICSec, a framework for managing preventative and reactive cybersecurity controls within the distinctive operational environment of industrial control systems (ICS). Following the design science research methodology of Hevner et al. and Peffers et al.,it derives the framework’s requirements from a review of the current state of ICS security, the threats and challenges facing the sector, and the availability of applicable controls. The resulting framework operationalises these requirements and is accompanied by a companion web application that puts its underlying concepts into practice. Its efficacy was then demonstrated along two complementary paths – a worked application to an environment reconstructed from a documented real-world attack, and a structured evaluation by industry practitioners.