6th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection - CPS4CIP 2025, Toulouse (France). 25-26 September 2025
Summary:
If cybersecurity in Information Technology (IT) is a fully grown adult, cybersecurity in Operational Technology (OT) is still in its infancy. The unique security challenges presented by industrial environments require training that combines knowledge of industrial automation and cybersecurity. In response to this need, a laboratory dedicated to cybersecurity training in industrial environ-ments has been launched at the Comillas Pontifical University. The main objec-tive of this laboratory is to raise awareness and provide training in logical indus-trial security through various scenarios, as well as to research potential attacks and their mitigation. This article details the creation of this laboratory, developed in collaboration with Fortinet, based on a pre-existing industrial automation la-boratory. The scenarios implemented are described in detail, ranging from attacks on Windows machines deployed in a virtualized environment to attacks on actual industrial control hardware, as well as possible mitigations such as firewall rule activation or network segmentation.
Spanish layman's summary:
Mientras la ciberseguridad en IT es madura, en OT sigue emergiendo. Para afrontar sus retos industriales, la Univ. Pontificia Comillas y Fortinet crearon un laboratorio que promueve la concienciación, analiza ataques de sistemas virtuales a hardware real y estudia estrategias de mitigación.
English layman's summary:
While IT cybersecurity is mature, OT is still emerging. To address its industrial challenges, Comillas Pontifical University and Fortinet created a training lab that raises awareness, analyzes attacks from virtualized systems to real control hardware, and explores mitigation strategies.
Keywords: Cybersecurity, Industrial automation laboratory, OT, Siemens, Fortinet.
DOI: 
https://doi.org/10.1007/978-3-032-16165-9_10
Published in: Computer Security. ESORICS 2025 International Workshops: AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25–26, 2025, Revised Selected Papers, Part III, pp: 167-180, ISBN: 978-3-032-16164-2
Publication date: 21-Apr-2026.
Citation:
A.M. López Gómez, F. Bagheri-Gisour Marandyn, J. Mohedano, A. Carrasco, A. Valencia, J.A. Rodríguez-Mondéjar, R. Gesteira-Miñarro, N. Rodríguez Pérez, R. Palacios, J. Jarauta Sanchez, G. López, "Integration of an OT Cybersecurity Lab into an Industrial Automation Lab", presented at 6th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection - CPS4CIP 2025, Toulouse, France, 25-26 September 2025. In: Computer Security. ESORICS 2025 International Workshops: AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25–26, 2025, Revised Selected Papers, Part III, pp. 167-180, doi: 10.1007/978-3-032-16165-9_10
IIT-25-289C
