Cybersecurity in Germany:

Research Trends and Industrial Hubs

Dr. Gerd Meier zu Köcker, Dr. Mathias Künzel

Director

Institute for Innovation and Technology, Berlin

26 January 2016, Manila (Philippines)

18.01.2016

ICT Security Moves from R&D to Industrial

Application

21.02.2016 2

It's now more important than ever that we can—at all times—rely on secure and stable ICT able to withstand cyber attacks. Increasing digitalisation and networking make today's vital infrastructures—in business and in public life—more open to attack than ever. This is why we need IT security. Rational for German R&D programme on ICT Security

German ICT Security Agenda

The German Government's research

framework program on IT security

(Federal Ministry of Research and

Education)

Self-determined and secure in

the digital world 2015-2020

21.02.2016 3

Main Application Fields for New ICT Security

Solutions

Advanced Manufacturing

Sustainable Business and Energy

Healthy Living

Intelligent Mobility

Civil Security

Innovating Working Conditions

21.02.2016 4

Main Programme Features in Brief

Framework Programme

Well aligned with other German R&D programmes

Research topics will be reviewed over time

Also fucussing on improving framework conditions, like education,

working conditions, entrepreneurship etc.

Focus given on applied R&D

Focus given on R&D consortia, dominated by SMEs

180 Mio EUR public funding over 5 years

Funding rate for industry up to 50 %

21.02.2016 5

Core Objectives - Motivation

21.02.2016 6

IT security is a public service

IT security safeguards the

operation of critical infrastructures

IT security creates trust

IT security is targeted at the needs of users

IT security protects the privacy of our

citizens

IT security is measurable

IT security strengthens

Germany as an industrial location

IT security is interdisciplinary

Research Focus I

Technologies & Systems

• Hardware-based trusted platform modules

• Digital identity management

• Long-term secure and efficient cryptography

• Quantum communication

• New security technologies

Enabling Technologies

• Transparency and user-friendliness

• Protection against Internet attacks

• Demonstrable IT security

• IT security in heterogeneous system structures

• Protection of knowledge and product

Secure and trustworthy ICT systems

21.02.2016 7

Research Focus II

Privacy & Application

• Privacy and self-determined living in the digital world

• Internet culture - life and value shift in the Internet age

• Privacy and big data

Privacy and data

protection

• IT security for Industry 4.0

• IT security in critical infrastructures

• Applications in medicine

• Transport and logistics

IT security in application

21.02.2016 8

Improving Framework Conditions

Centres of competence

for IT security

Forum

Privacy

Promoting of small and

medium-sized enterprises

(SMEs)

European & international Collaboration

21.02.2016 9

Developing Competences in Germany

Centres of Competences for IT security

21.02.2016 10

CISPA—Centre for IT Security, Privacy and Accountability in Saarbrücken;

EC SPRIDE—European Centre for Security and Privacy by Design in Darmstadt;

KASTEL—Centre of Competence for Applied Security Technology in Karlsruhe.

Autonomics for Industry 4.0

Autonomics for Industry 4.0

is a technology programme by the

Federal Ministry for Economic

Affairs and Energy (BMWi).

The "AUTONOMICS for Industry 4.0"

technology programme is designed to

merge state-of-the-art I&C technology

with industrial production by exploiting

the potential offered by innovation in

order to accelerate the development of

innovative products.

21.02.2016 11

ICT security for Industry 4.0

With the cyber-physical systems in Industry 4.0, the degree of networking

and the "intelligence" of the components continue to rise

Vision: the workpiece makes its own way to the machine which reports to it

that it has free processing capacity.

Example: Through self-diagnosis, the milling machine detects that its cutting

tool is worn and informs the production technician who finds out about the

status of the machine through remote access and can then plan tool

replacement.

21.02.2016 12

Cyber-physical systems in production:

Safety + Security!

Classical operating safety is well established

Demand for real time

Large number of players

security and safety are becoming increasingly interlocked

21.02.2016 13

Use of ICT: more than technology

21.02.2016 14

Legal reference architecture for Industry 4.0 (JU-RAMI 4.0)

ICT Security Hub

Bavarian ICT Security Cluster

21.02.2016 15

Focus: Security & Safety More than 120 leading cluster actors gathered

Services offered for SMEs

21.02.2016 16

ICT Security Hub

Bavarian ICT Security Cluster

Networking Roadshows

Experience exchange

Training

Thematic events

Entrepre-neurial support

Advice on implemen

ting ICT security systems

Public awareness

21.02.2016 17

Development of guidelines

Motiviation of staff

Setting up ICT Security team

Defintion of document structres

Introduction of ICT Security

management process

Identification of critical

application areas

Analysis of ICT structure

Mobilisation of ICT security

actions

Comparison plan - reality

Definition of corrective

actions

Implementation of corrective

actions Review

Supporting the Implementation of ICT Security

in SMEs

Working Groups

Industrial ICT Security

Solutions

Data Protection

Business Generation

Data encrypt New ICT Products

21.02.2016 18

Cyberforum Karlsruhe

21.02.2016

19

More than 1000 members

Hottest ICT Security Companies in Germany

21.02.2016 20

Source: CyberSecurity Ventures, 2015