Maialen Eceiza

In the modern technological landscape, standardized practices are fundamental to ensuring efficiency, quality, and seamless interoperability across various industries. The IEC 62443 series of standards has become a critical benchmark for enhancing cybersecurity in Industrial Automation and Control Systems (IACS). Nevertheless, a significant limitation of these standards is the lack of detailed implementation guidance, which poses substantial challenges for organizations seeking compliance. This paper studies the critical role of IEC 62443 standards series certification, emphasizing its importance and the diverse benefits it offers. We emphasize the necessity of conducting thorough cybersecurity gap analyses to strengthen security measures and enhance resilience against the evolving landscape of cyber threats. Using the IDUNN project as a case study, we illustrate how aligning technological developments with the IEC 62443 standards series can bridge the divide between existing cybersecurity guidelines and emerging threats. Furthermore, we examine the lifecycle management of cybersecurity events in accordance with the IEC 62443 standards series, explain methodologies for capturing security requirements, and discuss the integration of IDUNN’s tools into current systems to fortify cybersecurity defenses. The findings highlight the imperative for continuous collaboration and the ongoing enhancement of cybersecurity frameworks, culminating in best practices and recommendations to ensure the effective implementation of advances derived from initiatives like IDUNN.

Fuzzing adimentsua sistema txertatuetan produkzioaren informazio-fitxa

With a growing number of embedded devices that create, transform, and send data autonomously at its core, the Internet of Things (IoT) is a reality in different sectors, such as manufacturing, healthcare, or transportation. With this expansion, the IoT is becoming more present in critical environments, where security is paramount. Infamous attacks, such as Mirai, have shown the insecurity of the devices that power the IoT, as well as the potential of such large-scale attacks. Therefore, it is important to secure these embedded systems that form the backbone of the IoT. However, the particular nature of these devices and their resource constraints mean that the most cost-effective manner of securing these devices is to secure them before they are deployed, by minimizing the number of vulnerabilities they ship. To this end, fuzzing has proved itself as a valuable technique for automated vulnerability finding, where specially crafted inputs are fed to programs in order to trigger vulnerabilities and crash the system. In this survey, we link the world of embedded IoT devices and fuzzing. For this end, we list the particularities of the embedded world as far as security is concerned, we perform a literature review on fuzzing techniques and proposals, studying their applicability to embedded IoT devices and, finally, we present future research directions by pointing out the gaps identified in the review.