Cybersecurity

Real environments for testing, operation simulation and cybersecurity training

Cybersecurity is a fundamental aspect for organisations and is becoming increasingly relevant as companies move forward in their digitisation process.

The Basque Digital Innovation Hub’s Cybersecurity focus area provides companies with an authentic environment for testing, simulation and training. This focus area is coordinated by the Basque CyberSecurity Centre (BCSC) and consists of five interconnected laboratories spread throughout the region. The laboratories, owned by prominent stakeholders in the Basque Science, Technology and Innovation Network, are used to foster entrepreneurship and innovation, with the capability to carry out cybersecurity projects in various fields, such as smart-grid, automotive, blockchain, AI, secure industry and product evaluation, among others.

The node in detail

Get all the in-depth information about the node from our expert.

Application areas

5 organisations and 7 laboratories to support the following fields of application:

Identification
of threats and risks Asset protection Attack detection Attack response Asset recovery

Identification
of threats and risks

Identification of threats and risks

Develop an organisational understanding to manage cybersecurity risks to people, systems, assets, data and capabilities. Understanding business context, resources that support critical functions, and related cybersecurity risks enables an organisation to focus and prioritise its efforts in a manner consistent with its risk management strategy and business needs.

The following services are used for the identification of threats and risks:

Training in blockchain.
Cybersecurity training for connected and autonomous vehicles.
Cybersecurity functional test environment.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Product certification.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.
Industrial network analysis IEC 62264.
Cybersecurity assessment of industrial components and systems.

Asset protection

Develop and implement appropriate security measures to ensure delivery of services. Asset protection includes the ability to limit or contain the impact of a potential cybersecurity incident.

The following services are used for asset protection:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cybersecurity training for connected and autonomous vehicles.
Simulation of real communications between control centres and electrical substations for cyber-attacks.
Simulation of real communications between control centres and electrical substations for cyber-defence.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Vulnerability and penetration testing.
Communications robustness testing.
Functional security testing.
Implementation testing.
Product certification.
PKI: Digital certificate management.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Industrial cybersecurity training for security operators and ethical hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Development of optimisation and Big Data applications robust to attacks.
Multi-domain cyber range.
Big Data and cybersecurity.
Industrial network analysis IEC 62264.
Cybersecurity assessment of industrial components and systems.

Attack detection

Develop and implement appropriate tools to determine the nature and extent of cyberattacks on an entity. Attack detection includes the timely discovery of cybersecurity incidents.

The following services are used for the detection of attacks:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cybersecurity training for connected and autonomous vehicles.
Simulation of real communications between control centres and electrical substations for cyber-attacks.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Vulnerability and penetration testing.
Communications robustness testing.
Functional security testing.
Implementation testing.
Product certification.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Industrial cybersecurity training for security operators and ethical hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.
Cybersecurity assessment of industrial components and systems.

Attack response

Develop and implement appropriate measures to effectively mitigate identified cybersecurity incidents. Attack response supports the ability to contain the impact of a potential cybersecurity incident.

The following services are used for attack response:

Training in blockchain.
Simulation of real communications between control centres and electrical substations for cyber-defence.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Industrial cybersecurity training for security operators and ethical. hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.

Asset recovery

Develop and implement appropriate action plans to recover from a cyber-attack and restore the capabilities or services that have been affected by it. Asset recovery enables a timely recovery to normal operations, which reduces the impact of a cybersecurity incident.

The following services are used for asset recovery:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Multi-domain cyber range.
Industrial network analysis IEC 62.

View assets of node
Cybersecurity

Search in the asset catalogue

Contact your liaison

This is our expert in Cybersecurity and will be in charge of assessing your needs.

David González
IKERLAN
dgonzalez@ikerlan.es
943 712 400

Casos de uso

NPCP Platform Penetration Test

ZIV APLICACIONES Y TECNOLOGIA S.L.

Use case

ZIV is a company born in 1992 dedicated to provide protection and control solutions withing the electric sector. Over time, the company incorporated the development of measurement and communication technologies with growing cybersecurity requirements at its service.

Need:

To develop a technological solution that takes into account the application of cybersecurity requirements to the testing field.

Area of the company where the solution is focused:

Engineering

Company size:

Grande

Sector:

Smart grids

Location:

Zamudio (Bizkaia)

Benefits of the Solution:

Development of secure power grids
Added value to the technological equipment

Incorporated Technologies:

Achilles Platform
IIoT (Industrial Internet of Things)

Critical infrastructures software robustness verification

RKL integral

Use case

Critical infrastructures software robustness verification

Robustness test of industrial communications with Achilles platform

Savvy Data Systems

Use case

Robustness test of industrial communications with Achilles platform

Traceability of cold logistics with blockchain

CLCIRCULAR

Use case

Traceability of cold logistics with blockchain

ZIV APLICACIONES Y TECNOLOGIA S.L.

Use case

NPCP Platform Penetration Test

> ver mas