# Security

:::{card} Learning goals
- Explain the importance of security in operational technology
- Identify potential attack vectors in industrial automation systems
- Evaluate the consequences of security breaches
- Apply security principles to an industrial control system implementation (in the project)
- Locate basic security principles in software, e.g., salting
:::

:::{toctree}
:maxdepth: 1
security/analyzing-security-in-industrial-automation-systems
security/system-login-interface-example
security/protecting-credential-database-against-exploitation
:::

(security-preparation)=
## Preparation

<!-- TODO find a video about a major industrial incident? Currently I give it only as homework-->

- Read the definitions found in the first paragraphs of
  - [Operational technology (OT)](https://en.wikipedia.org/wiki/Operational_technology)
  - [Programmable logic controllers (PLC)](https://en.wikipedia.org/wiki/Operational_technology)
  
  Goal: you can explain what OT and PLC are.
- Find a case of an impactful security incident (i.e., hacking) that happened in OT environment from the last years. Where did it happen? What was the impact? What was the reason?

  For example: [Stuxnet](https://spectrum.ieee.org/the-real-story-of-stuxnet) (contains an illustration)

  Goal: You can explain the significance of security for OT systems.
- Watch until the end of `KISS` (keep it simple and stupid), i.e., the first seven minutes of the video [10 Principles for Secure by Design: Baking Security into Your Systems](https://www.youtube.com/watch?v=3l8GwLv2f3E)
  
  Goal: You will integrate at least one of the security principles in your project.

- Watch until the end of the slide with the title `Salting`, i.e., the first five minutes of the video [Foundations of Cryptography 2-6: Salt ... by TechKnowSurge](https://www.youtube.com/watch?v=j9fgiadeKcE).

  Goal: You can explain the purpose of salting to a layperson. You will later use this concept in your project. We will analyze  example code that uses salting.