6th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection - CPS4CIP 2025, Toulouse (Francia). 25-26 septiembre 2025
Resumen:
If cybersecurity in Information Technology (IT) is a fully grown adult, cybersecurity in Operational Technology (OT) is still in its infancy. The unique security challenges presented by industrial environments require training that combines knowledge of industrial automation and cybersecurity. In response to this need, a laboratory dedicated to cybersecurity training in industrial environ-ments has been launched at the Comillas Pontifical University. The main objec-tive of this laboratory is to raise awareness and provide training in logical indus-trial security through various scenarios, as well as to research potential attacks and their mitigation. This article details the creation of this laboratory, developed in collaboration with Fortinet, based on a pre-existing industrial automation la-boratory. The scenarios implemented are described in detail, ranging from attacks on Windows machines deployed in a virtualized environment to attacks on actual industrial control hardware, as well as possible mitigations such as firewall rule activation or network segmentation.
Resumen divulgativo:
Mientras la ciberseguridad en IT es madura, en OT sigue emergiendo. Para afrontar sus retos industriales, la Univ. Pontificia Comillas y Fortinet crearon un laboratorio que promueve la concienciación, analiza ataques de sistemas virtuales a hardware real y estudia estrategias de mitigación.
Palabras clave: Cybersecurity, Industrial automation laboratory, OT, Siemens, Fortinet.
DOI: 
https://doi.org/10.1007/978-3-032-16165-9_10
Publicado en: Computer Security. ESORICS 2025 International Workshops: AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25–26, 2025, Revised Selected Papers, Part III, pp: 167-180, ISBN: 978-3-032-16164-2
Fecha de publicación: 21-abr-2026
Cita:
A.M. López Gómez, F. Bagheri-Gisour Marandyn, J. Mohedano, A. Carrasco, A. Valencia, J.A. Rodríguez-Mondéjar, R. Gesteira-Miñarro, N. Rodríguez Pérez, R. Palacios, J. Jarauta Sanchez, G. López, "Integration of an OT Cybersecurity Lab into an Industrial Automation Lab", presentado en 6th International Workshop on Cyber-Physical Security for Critical Infrastructures Protection - CPS4CIP 2025, Toulouse, Francia, 25-26 septiembre 2025. En: Computer Security. ESORICS 2025 International Workshops: AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25–26, 2025, Revised Selected Papers, Part III, pp. 167-180, doi: 10.1007/978-3-032-16165-9_10
IIT-25-289C
