A Cybersecurity Governance Maturity Framework for Mitigating Cross-Domain Attacks in 5G Private Networks

The oil and gas industry, a vital lifeline fueling the global economy, find itself at a pivotal juncture where the convergence of operational technology (OT) and information technology (IT) has ushered in unprecedented opportunities and challenges. As digital transformation sweeps across this sector, the imperative to fortify cybersecurity defenses against ever-evolving threats has become paramount. Innovative and forward-looking oil and gas organizations across the globe are adopting the Cloud in many forms because of their digital transformation initiatives. Data lakes, edge technology, machine-to-machine communication, and machine learning (ML) algorithms have been enabling this industrial digital transformation. This transformation is also driving changes to the OT landscape, and as these environments continue to evolve, OT environments are leveraging well proven IT solution patterns to improve the productivity and efficiency of production operations. Industrial customers often start their digital transformation journey by sending OT data to the cloud for analysis and analytics without sending commands back to the industrial automation and control systems (ICAS). This process is often called "open loop" operations, since there is one-way communication from edge to cloud. Customers generally find this relatively easy to secure and manage. However, more often we are witnessing requirements to optimize operations by generating an automatic or operator-initiated response in the oil and gas production operation, rig management based on insights gained from cloud analytics. This process is often referred to as "closed loop" operations with two-way communication between edge and cloud. The security and compliance practices for closed loop operations are more rigorous because closed operations manipulate OT devices remotely. Developing these practices should be rooted in a cyber risk assessment to help businesses understand and prioritize security concerns. In this paper we propose how strengths of Cloud computing can become key enabler for oil and gas organizations in helping them enhance their overall security posture and manage risks within OT environments. We have deployed solution patterns described in this paper as the foundational pillar of several Oil and Gas organization's overall OT system architecture to unlock both "open loop" and "closed loop" operations in a secure, reliable and cost-effective manner. The specific scope items we will cover in this paper focus on a custom security uplift framework having four foundational components – 1) Cloud led architecture patterns to provide next generation network segmentation strategies in OT De-militarized Zone 2) OT asset inventory and vulnerability management 3) Centralized security monitoring and incident response with help of Artificial Intelligence and most recently providing Generative AI based virtual assistant to query security event data from OT systems. For organizations to plan their industrial digital transformation safely and securely, it is recommended that a multi-layered approach to secure the Industrial Control Systems (ICS)/OT and Cloud environments be implemented as captured in ten security golden rules in the following paper [1]. In addition to this, in the paper we propose a comprehensive architecture framework that aligns with established cybersecurity framework (CSF) such as NIST. The use case studies discussed in the paper will highlight how customer have been able to remediate critical security vulnerabilities within weeks post implementation by deploying a comprehensive asset inventory discovery and vulnerability assessment. This has help reduce mean time to identify and mitigate vulnerabilities from months to days with automated testing in pre-production environments, ensure quick detection and response towards security incidents with help of advanced security monitoring and incident response playbooks, covering 100% of the OT assets through this capability and leverage advanced data analytics, machine learning to perform log mining, data cleansing, data validation, log mining and analysis through natural language processing such as conversational AI assistants powered by large language model (LLM) in the Cloud.

Convergence between Operational Technology (OT) and Information Technology (IT) remains an aspirational goal due to the lack of a systematic integrated approach. The next-generation Industry 4.0 will automate operations even more, involving different degrees of coordination, multiple locations, applications, and organizations. Eventually, the network's capabilities and technologies will integrate OT and IT. This paper presents a reference model called Operations and Control Networks (OCN), whose components are abstract exchange points between which automation takes place. Such network model for process control can be used as a tool for system integrators and operators to design and analyze their OT networks. It enables OT applications to be developed independently of the underlying network infrastructure. We discuss principles, interfaces, and examples of this model.

The transition towards decentralized energy systems, driven by the global shift to renewable energy sources, introduces new cybersecurity complexities that challenge traditional energy security paradigms. Distributed Renewable Energy (DRE) systems comprising solar photovoltaics, wind turbines, microgrids, and battery storage are inherently decentralized, networked, and reliant on advanced digital technologies for real-time monitoring, control, and optimization. While these systems offer resilience, flexibility, and sustainability, they also expand the attack surface for cyber threats due to their reliance on Internet of Things (IoT) devices, cloud computing, and bidirectional communication protocols. This paper critically examines the cybersecurity challenges associated with DRE infrastructure, including unauthorized access, data breaches, malware propagation, and system manipulation, all of which could lead to energy theft, grid instability, and large-scale outages. Emerging opportunities lie in developing adaptive cybersecurity frameworks tailored to the unique topology of decentralized energy networks. These include the integration of artificial intelligence for anomaly detection, blockchain technologies for secure data exchange and identity management, and zero-trust architectures to enforce stringent access control. Additionally, the convergence of operational technology (OT) and information technology (IT) within DRE environments demands cross-sectoral collaboration, robust regulatory frameworks, and enhanced stakeholder awareness to build cyber-resilient systems. The paper also highlights the necessity for proactive risk assessment, real-time threat intelligence sharing, and the establishment of decentralized security standards to harmonize practices across diverse stakeholders and jurisdictions. Case studies from recent cyber incidents in the energy sector provide empirical evidence of vulnerabilities and mitigation strategies. By exploring both the risks and solutions, the study underscores the dual imperative of securing DRE systems not only as critical infrastructure but also as pivotal enablers of the global clean energy transition. In conclusion, while decentralized energy systems present new cybersecurity challenges, they also create opportunities to reimagine and strengthen energy security in the digital age. Addressing these issues through innovation, regulation, and cooperation will be crucial for ensuring sustainable and secure energy futures.

Exploring current solutions against DDoS attacks in SDN environment

Power systems are increasingly incorporating sophisticated digital technologies, automation, and connectivity as digital transformation accelerates across critical infrastructure. This convergence with IT systems has brought up some new cybersecurity issues. It's important to note that the security needs of electrical systems are different from those of regular corporate IT networks. Digitization solutions for power systems establish a smart and connected network that connects digital tools, physical power facilities, and resources to generate digital economies. Traditional air-gapped power plants have been rapidly exposed to cyber risks and attacks because of digitization. Consequently, numerous organizations have been compelled to reassess their cybersecurity policies and standards before implementing advanced digital devices to improve their operations. Unlike cybersecurity solutions created for IT systems, the cybersecurity needs of power systems and their related industrial control systems necessitate a new approach, a different methodology, and design process. These attributes exacerbate the severity of the cybersecurity risk associated with these systems. The integration of smart devices and sensors into the infrastructure establishes vulnerable entry points into the systems. The communication mechanisms between each deployed smart meter are susceptible to a denial of service (DoS) or distributed denial of service (DDoS) attack. A single compromised sensor or meter has the capacity to cascade through the electrical.

The rapid evolution of manufacturing technologies under the Industry 4.0 paradigm has driven the need for efficient data management and real-time decision-making. The client-server architecture is Central to this transformation, enabling seamless communication, data sharing, and process automation across smart manufacturing environments. This literature review explores the pivotal role of client-server architecture and key communication protocols in enabling Smart Manufacturing and Industry 4.0 initiatives. The study examines the fundamental components of client-server architecture, including clients, servers, and communication protocols, and their interactions in industrial settings. It focuses on three primary protocols, MQTT, HTTP, and OPC UA, analyzing their mechanisms, benefits, and applications in smart manufacturing environments. The research highlights how MQTT’s lightweight, publish-subscribe model facilitates efficient real-time data exchange in IoT-heavy industrial networks. HTTP’s widespread adoption and versatility in handling diverse data types are discussed, emphasizing its role in web-based dashboards and cloud integration. The review also delves into OPC UA’s platform-independent nature and advanced features, which promote interoperability and future-proofing of manufacturing systems. This review synthesizes current knowledge of these technologies and underscores their collective importance in addressing critical requirements of smart manufacturing, including scalability, security, real-time capabilities, and cross-system compatibility. The findings suggest that integrating these communication protocols and architectures is crucial for realizing the full potential of Industry 4.0, paving the way for more agile, efficient, and data-driven production ecosystems.

Internet of Things (IoT) is transforming the industry by bridging the gap between Information Technology (IT) and Operational Technology (OT). Machines are being integrated with connected sensors and managed by intelligent analytics applications, accelerating digital transformation and business operations. Bringing Machine Learning (ML) to industrial devices is an advancement aiming to promote the convergence of IT and OT. However, developing an ML application in Industrial IoT (IIoT) presents various challenges, including hardware heterogeneity, non-standardized representations of ML models, device and ML model compatibility issues, and slow application development. Successful deployment in this area requires a deep understanding of hardware, algorithms, software tools, and applications. Therefore, this paper presents a framework called Semantic Low-Code Engineering for ML Applications (SeLoC-ML), built on a low-code platform to support the rapid development of ML applications in IIoT by leveraging Semantic Web technologies. SeLoC-ML enables non-experts to easily model, discover, reuse, and matchmake ML models and devices at scale. The project code can be automatically generated for deployment on hardware based on the matching results. Developers can benefit from semantic application templates, called recipes, to fast prototype end-user applications. The evaluations confirm an engineering effort reduction by a factor of at least three compared to traditional approaches on an industrial ML classification case study, showing the efficiency and usefulness of SeLoC-ML. We share the code and welcome any contributions (https://github.com/Haoyu-R/SeLoC-ML).KeywordsMachine learningNeural networkIndustrial internet of thingsSemantic webKnowledge graphLow-code engineering

The Industrial robots are widely used in smart manufacturing environments to improve productivity and automation, but their increasing energy consumption has become a critical issue. Traditional time-based control methods update control signals at fixed sampling intervals, which often leads to actuator redundancy and energy inefficiency, especially in steady-state or low-dynamic operating modes. To address this issue, this paper proposes an energy-efficient event-based control strategy for energy-efficient operation of industrial robots in smart manufacturing systems. The proposed approach integrates an event-based mechanism with nonlinear robot control so that control adjustments are made only when tracking accuracy or energy-related metrics exceed specified thresholds. This design significantly reduces unnecessary control signals while ensuring satisfactory trajectory tracking accuracy. A Lyapunov function-based analysis is performed to demonstrate the stability of the closed-loop control system using the proposed event-based method. Furthermore, the triggering mechanism guarantees a strictly positive lower bound for the intervals between events, thereby eliminating the Zeno effect and ensuring practical feasibility. The energy efficiency of the proposed strategy is further investigated by analyzing the behavior of the actuators and the overall energy consumption. Experimental results show that the proposed approach achieves significant energy savings compared to traditional time-based control methods without compromising control performance. This highlights its potential for energy-efficient operation of industrial robots in smart manufacturing applications.

Data quality in IoT and smart manufacturing environments is essential for optimizing workflows, enabling predictive maintenance, and supporting informed decisions. However, data from sensors present significant challenges due to their real-time nature, diversity of formats, and high susceptibility to faults such as missing values or inconsistencies. Ensuring high-quality data in these environments is crucial to maintaining operational efficiency and process reliability. This paper analyzes some of the data quality metrics presented in the literature, with a focus on adapting them to the context of Industry 4.0. Initially, three models for the classification of the dimensions of data quality are presented, proposed by different authors, which group together dimensions such as accuracy, completeness, consistency, and timeliness in different approaches. Next, a systematic methodology is adopted to evaluate the metrics related to these dimensions, always using a real-time monitoring scenario. This approach combines dynamic thresholds with historical data to assess the quality of incoming data streams and provide relevant insights. The analysis carried out not only facilitates continuous monitoring of data quality but also supports informed decision-making, helping to improve operational efficiency in Industry 4.0 environments. Finally, this paper presents a table summarizing the selected metrics, highlighting the advantages, disadvantages, and potential usage scenarios, and providing a practical basis for implementation in real environments.

In the era of digital transformation, Artificial Intelligence (AI) is reshaping supply chain operations through predictive analytics, real-time decision-making, automation, and enhanced customer responsiveness. However, the integration of AI into supply chain innovation requires not only technological readiness but also strategic alignment with Human Resource Management (HRM) practices. This paper proposes a conceptual framework that explores the interlinkages between AI-driven supply chain innovation and HRM integration. Drawing upon multidisciplinary literature in supply chain management, AI, and strategic HRM, the study outlines how HRM can facilitate organizational agility, workforce reskilling, and talent development to support AI implementation in supply chains. The paper identifies key enablers and barriers, highlights the role of HR in change management, and offers recommendations for fostering a collaborative environment that supports technological innovation. By bridging the gap between technological advancement and human capability, this framework aims to guide practitioners and researchers in designing sustainable, AI-powered supply chains with a robust human capital foundation. The findings have significant implications for HR leaders, supply chain strategists, and policymakers involved in the digital transformation journey.

In the era of digital transformation, the Internet of Things (IoT) has revolutionized everyday objects, and IoT gateways play a pivotal role in managing data flow within these networks. However, the dynamic and expansive nature of IoT networks poses significant cybersecurity challenges, demanding the development of adaptive security systems to protect against evolving threats. The research paper presents the development of the CoralMatrix Security framework, a novel approach to IoT cybersecurity using advanced machine learning algorithms. The framework incorporates the AdaptiNet Intelligence Model, integrating deep learning and reinforcement learning for effective real-time threat detection and response. To comprehensively evaluate the framework's performance, the study utilized the N-BaIoT dataset, facilitating a quantitative analysis that provided valuable insights into the model's capabilities. The results of the analysis showcased the CoralMatrix Security framework's robustness across various dimensions of IoT cybersecurity. Notably, the framework achieved a high detection accuracy rate of approximately 83.33%, underscoring its efficacy in identifying and responding to Cybersecurity threats in real-time. Furthermore, the research examined the framework's scalability, adaptability, resource efficiency, and robustness against diverse cyber-attack types, all quantitatively assessed to provide a comprehensive understanding of its capabilities. The paper suggests future work to optimize the framework for larger IoT networks and adapt continuously to emerging threats, aiming to expand its application across diverse IoT scenarios. The CoralMatrix Security framework, with its proposed algorithms, emerges as a promising, efficient, effective, and scalable solution for the dynamic challenges of IoT cybersecurity.

In the era of globalization and digital transformation, Supply Chain Management (SCM) has become increasingly complex due to the exponential growth of data generated from various sources. Advanced data mining applications have emerged as pivotal tools for optimizing SCM by extracting actionable insights from vast datasets. This paper explores the integration of sophisticated data mining techniques into SCM processes to enhance decision-making, improve operational efficiency, and increase overall competitiveness. Through an extensive literature review and empirical analysis, the study highlights the significant benefits, challenges, and future directions of leveraging data mining in SCM. The findings indicate that data mining not only facilitates accurate demand forecasting and inventory optimization but also enhances supplier evaluation and logistics management, thereby contributing to a more resilient and agile supply chain.

The rapid expansion of digital marketing and online advertising has intensified exposure to cyber threats, making cybersecurity a critical component of modern marketing ecosystems. This review paper synthesizes existing literature to analyze major cybersecurity threats affecting digital marketing platforms, online advertising systems, and consumer data privacy. Drawing upon recent empirical and survey-based studies, the paper categorizes prevalent threats such as phishing, malware, ransomware, data breaches, ad fraud, and Distributed Denial of Service (DDoS) attacks. It further reviews best practices, regulatory frameworks, and emerging technological solutions, particularly the role of Artificial Intelligence (AI) and Machine Learning (ML) in threat detection and mitigation. The study highlights existing research gaps and outlines future research directions for strengthening cybersecurity resilience in digital marketing ecosystems.

Detecting malicious activities in Information Technology (IT) is a critical component of cybersecurity and is essential for identifying threats and attacks on systems, networks, and resources. However, security of industrial control systems, an area of increasing concern due to the convergence of IT with Operational Technology (OT), requires new approaches. This work proposes a novel containerized testbed architecture for industrial water systems, implemented using open-source technologies and structured according to the Purdue reference model, which is widely used in industrial control and automation systems. The architecture aims to provide a secure and efficient environment. The experiments demonstrate that the proposed architecture enables the simulation of computational devices behavior in water systems under different scenarios, allowing data to be collected for the detection of malicious activities, such as denial-of-service attacks and command injection. The results highlight the architecture's relevance to advancing research and development efforts aimed at enhancing the security of critical water infrastructure.

The convergence of Information Technology (IT) and Operational Technology (OT) leads to an increasing interdependence between the protection goals of security and safety. A cyber-attack targeting safety functions may in turn lead to hazards endangering people and the environment. Furthermore, misusing safety functions may impact availability by causing a machine or production line to stop working. This work analyzes how Austrian stakeholders of industrial automation enterprises address security and safety risks to mitigate undesired situations. The stakeholder analysis performed considers vendors of products or components, integrators, and asset owners of industrial systems. Secure infrastructures, system architectures, and risk management are subject areas of this analysis. The analysis was conducted in two phases. First, an online survey was created where the involved stakeholder offered their answer simultaneously. Considering the results of the survey, individual stakeholder workshops were carried out to obtain additional, more specific perceptions about the stakeholder’s OT system and components with respect to security and safety considerations. The obtained results provide insights into the current practices in the industry regarding safety and security.