Keywords
Cybersecurity, Manufacturing, IT, Automation

Technologies
Jupyter, Python, SQL

This project discusses the current weaknesses in modern tools used in vulnerability assessments for industrial control systems. Oftentimes, IT and OT are not considered as a unit which leads to many possible threats being overlooked, which can cause issues ranging from serious financial loss to humanitarian costs.

This project proposes a new method of evaluating ICS that will hopefully be more accurate and manageable for sites, which combines the MITRE ATT&CK framework designed for ICS, and a Bayesian Network.

This approach will ideally combine the legibility of a graph and the information in the MITRE ATT&CK framework, and allow the Bayesian Network to add the dynamism that the previous two lack, and return a score for the vulnerability of each component as well as a score for the likelihood of an attack.