Master's Thesis: Secure IT OT Convergence in Network Centric Control Architectures

På ABB hjälper vi industrier att bli snabbare, mer resurseffektiva och hållbara. Här är framsteg en självklarhet - för dig, ditt team och hela världen. Som global marknadsledare ger vi dig rätt förutsättningar för att lyckas med det. Det kommer inte alltid att vara enkelt - utveckling kräver mod och styrka. På ABB är du aldrig ensam. Run what runs the world.

Denna position rapporterar till:
R&D Team Lead




Master's Thesis at ABB Automation




Background

This role sits within ABB's Automation business area, which is world-leading in the industrial automation industry through their Distributed Control System (DCS) offering.

Recent years have seen an increasing technology shift in the world of automation where ABB is at forefront of research and development. One of the most significant changes is the introduction of network-centric architectures where distributed controllers, I/O modules and process equipment across large networks can share data securely and robustly and thereby act as a single organism.

These developments have brought about possibilities of flexibly distributing workloads and control logic in ways that were not possible historically.

Thesis Description

Traditionally, industrial systems have been structured according to the Purdue Model, also known as the industrial pyramid, in which higher-level corporate systems are separated from lower-level Operational Technology (OT) networks. One of the hallmarks of this model is its layered architecture, in which communication is typically restricted to adjacent layers. This segmentation helps contain failures and cyber threats, but can also limit flexibility and direct access to operational data.

Network-centric architectures reduce the strict separation between enterprise and operational environments, enabling more efficient communication across layers. While this improves flexibility and operational efficiency, it also diminishes the layer segmentation that has traditionally served as an important security mechanism.

As a result, OT/IT convergence is creating new opportunities for cyber threats. As the separation between IT and OT environments decreases, threats originating in IT systems and propagating into OT environments become increasingly important to consider. Consequently, there is a need to understand how OT/IT convergence can be achieved without compromising the security, safety, and reliability requirements of industrial systems.

The objective of this thesis is to investigate secure approaches to OT/IT convergence, explain the underlying mechanisms that enable them, and demonstrate their applicability within an industrial use case. The work should provide a comprehensive overview of the cybersecurity challenges associated with OT/IT convergence, identify relevant mitigation strategies, and evaluate their effectiveness in a practical setting. The main tasks are:

1. Investigate the cybersecurity challenges introduced by OT/IT convergence.

2. Review and evaluate security mechanisms and solutions that can mitigate these challenges.

3. Design and implement selected solutions within the ABB "Ice Cream Factory" use case (written in .NET10).

4. Assess the effectiveness, benefits, and limitations of the implemented solutions.

Qualifications

We are looking for one or two candidates that can collaborate on the described Master's thesis topics and may have competence in the following areas:

• Knowledge of computer networks and communication systems, including IP addressing, TCP/IP, subnetting, routing, and common network troubleshooting concepts
• Understanding of cybersecurity fundamentals (e.g., authentication, authorization, encryption, PKI)
• Understanding of network security concepts (e.g., firewalls, network segmentation, VPNs)
• Familiarity with threat modeling and risk assessment methodologies
• Programming experience in C# or a similar programming language
• Knowledge of industrial communication protocols (e.g., OPC UA, Modbus TCP, PROFINET)

Furthermore, we value personal skills such as openness and ability to collaborate - being able to present findings, discuss different approaches and take self-leadership on focus and direction of the work.

Proficiency in English is required.

Details

• Period: 1H 2027
• Number of credits: Master thesis - 30 ECTS/högskolepoäng (hp)
• Number of students for this thesis work: One or Two
• Location: You will be offered a desk at our office at Ängsgärdsgatan 6, 721 30 Västerås. It will also be possible to spend large amount of the time remotely, although we prefer someone who is based within commuting distance from Västerås.

More about us

At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking on a journey where each and every one of us, individually and collectively, welcomes and celebrates individual differences.

You will be part of Process Control Platform (PCP), which is a unit within ABB business area Automation. PCP develops automation products - hardware and software - for monitoring, process control and optimization. We have automation products for all kinds of industries all over the world.

You will be sitting at our R&D department office in Västerås with access to our R&D experts and engineers and will get a general feeling of how it is to work on large-scale development projects.

Contact

Recruiting Manager Oliver Ehlorsson Lindberg, +46 72 461 21 08, will answer your questions.

Positions are filled continuously. Please apply with your CV, academic transcripts, and a cover letter in English.

We look forward to receiving your application!

Kommande möjligheter Vänligen notera att denna annons syftar till att få in intresseanmälningar till en kandidatpool kopplat till det aktuella området, och det är därför inte en öppning till ett specifikt jobb just nu. Genom att ansöka uttrycker du ditt intresse för framtida karriärmöjligheter med ABB.

Vi värdesätter människor med olika bakgrund. Ansök idag för att ha möjlighet att bli aktuell för kommande roller och besök www.abb.com för att utforska hur vi driver utveckling över hela världen.