Production
Safe and Smart Manufacturing
Modern manufacturing is more interconnected than ever before—and thus increasingly vulnerable to cyberattacks. Whether it’s production lines, robotics, or the Industrial Internet of Things (IIoT), innovation can only have a lasting impact if security and trust are built in from the start. Our institute develops research-based cybersecurity solutions for industry—from secure IIoT devices to resilient production networks.
Focus on Resilience
Machines, systems, sensors, and controllers communicate in real time via networks, cloud platforms, and IIoT systems. This digital transformation increases efficiency and flexibility, but it also poses significant security challenges. At the same time, the number of cyberattacks in the production environment is rising: Attacks on PLC systems, networked control systems, or production servers can paralyze entire production lines and cause enormous economic damage. The goal of modern security research is therefore not only to protect against attacks but also to maintain operations in the event of a crisis (resilience).
A key risk lies, for example, in the security of legacy systems and industrial IoT systems: insecure firmware, open interfaces, and unprotected devices can enable tampering, sabotage, or data theft. Particularly critical is the increasing IT/OT convergence—that is, the merging of traditional production control (“Operational Technology”) and enterprise IT. These two worlds follow different security principles—and must be integrated into a common, end-to-end security model in the future.
Remote access and cloud connections are also gaining in importance. Suppliers, service technicians, and partner companies now access production data directly to support maintenance, quality assurance, or optimization. However, without robust identity and access management, the risk of unauthorized access increases significantly. Furthermore, the protection of intellectual property is increasingly coming into focus: production data, recipes, and control algorithms are at the heart of industrial innovation and must be reliably protected against tampering and data exfiltration.
Finally, regulatory pressure is also mounting: standards and guidelines such as IEC 62443, ISO 27001, and the European NIS 2 Directive require demonstrable, verifiable security measures for industrial systems. In the future, companies must not only ensure their production security but also be able to provide auditable proof of it.
These developments show that cybersecurity has become a key competitive factor in manufacturing. Only those who take a holistic approach to security—from sensors to the cloud—can capitalize on the opportunities of Industry 4.0 while effectively minimizing risks.
Research-Based Solutions
We combine scientific excellence with practical application to design production systems that are safe and sustainable.
| + | Secure IIoT Architectures : Development and validation of secure communication protocols, device certificates, and authentication solutions for connected machines. |
| + | Security-by-Design : Integration of security mechanisms into industrial control systems—from firmware to the cloud interface. |
| + | Data Security and Crypto-Agility : Research into trusted data spaces and cryptographic protection of industrial data flows. |
| + | AI-powered anomaly detection : Machine learning models identify suspicious processes or cyberattacks in real time—without disrupting the production flow. |
| + | Expert Training for Industry We offer simulations and training for security measures as well as specialized continuing education courses. |
Opportunities for Industry Partners
| + | Security Analysis & Penetration Testing for Production Systems : Systematic security assessment of industrial IT/OT system landscapes using scientific methods. |
| + | Research Collaborations & Pilot Projects : Development and testing of new security concepts in collaboration with industry partners. |
| + | Secure IIoT Component Development : Support for the design and validation of sensors, gateways, and controllers with verifiable “security-by-design” implementation. |
| + | Security Architectures & Risk Analyses : Creation of robust security concepts based on current research and standards. |
| + | Training & Technology Transfer Training courses on “Embedded Security”—thorough, practical, and vendor-neutral. “Cyber Range” training with a focus on industrial environments. |
USP – Research Meets Industry
| + | Research-Based Solutions: We develop security concepts with scientific depth and direct industrial applicability. |
| + | Holistic Cybersecurity: From sensors to control systems to the cloud—we think “end-to-end.” |
| + | Neutral & independent: As a research institute, we are technology-neutral and objective. |
| + | Strong Focus on Technology Transfer: We guide projects from the initial idea through prototyping to industrial implementation. |
| + | Interdisciplinary: Cybersecurity, mechanical engineering, AI, regulation—all brought together in a strong team. |