Master's Thesis: Secure IT/OT Convergence in Network-Centric Control Architectures

Job description

At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world. This Position reports to: R&D Team Lead Master’s Thesis at ABB Automation Background This role sits within ABB’s Automation business area, which is world-leading in the industrial automation industry through their Distributed Control System (DCS) offering. Recent years have seen an increasing technology shift in the world of automation where ABB is at forefront of research and development. One of the most significant changes is the introduction of network-centric architectures where distributed controllers, I/O modules and process equipment across large networks can share data securely and robustly and thereby act as a single organism. These developments have brought about possibilities of flexibly distributing workloads and control logic in ways that were not possible historically. Thesis Description Traditionally, industrial systems have been structured according to the Purdue Model, also known as the industrial pyramid, in which higher-level corporate systems are separated from lower-level Operational Technology (OT) networks. One of the hallmarks of this model is its layered architecture, in which communication is typically restricted to adjacent layers. This segmentation helps contain failures and cyber threats, but can also limit flexibility and direct access to operational data. Network-centric architectures reduce the strict separation between enterprise and operational environments, enabling more efficient communication across layers. While this improves flexibility and operational efficiency, it also diminishes the layer segmentation that has traditionally served as an important security mechanism. As a result, OT/IT convergence is creating new opportunities for cyber threats. As the separation between IT and OT environments decreases, threats originating in IT systems and propagating into OT environments become increasingly important to consider. Consequently, there is a need to understand how OT/IT convergence can be achieved without compromising the security, safety, and reliability requirements of industrial systems. The objective of this thesis is to investigate secure approaches to OT/IT convergence, explain the underlying mechanisms that enable them, and demonstrate their applicability within an industrial use case. The work should provide a comprehensive overview of the cybersecurity challenges associated with OT/IT convergence, identify relevant mitigation strategies, and evaluate their effectiveness in a practical setting. The main tasks are: 1. Investigate the cybersecurity challenges introduced by OT/IT convergence. 2. Review and evaluate security mechanisms and solutions that can mitigate these challenges. 3. Design and implement selected solutions within the ABB "Ice Cream Factory" use case (written in .NET10). 4. Assess the effectiveness, benefits, and limitations of the implemented solutions. QualificationsWe are looking for one or two candidates that can collaborate on the described Master’s thesis topics and may have competence in the following areas: Knowledge of computer networks and communication systems, including IP addressing, TCP/IP, subnetting, routing, and common network troubleshooting concepts Understanding of cybersecurity fundamentals (e.g., authentication, authorization, encryption, PKI) Understanding of network security concepts (e.g., firewalls, network segmentation, VPNs) Familiarity with threat modeling and risk assessment methodologies Programming experience in C# or a similar programming language Knowledge of industrial communication protocols (e.g., OPC UA, Modbus TCP, PROFINET) Furthermore, we value personal skills such as openness and ability to collaborate - being able to present findings, discuss different approaches and take self-leadership on focus and direction of the work. Proficiency in English is required. Details Period: 1H 2027 Number of credits:  Master thesis - 30 ECTS/högskolepoäng (hp) Number of students for this thesis work: One or Two Location: You will be offered a desk at our office at Ängsgärdsgatan 6, 721 30 Västerås. It will also be possible to spend large amount of the time remotely, although we prefer someone who is based within commuting distance from Västerås. More about usAt ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking on a journey where each and every one of us, individually and collectively, welcomes and celebrates individual differences. You will be part of Process Control Platform (PCP), which is a unit within ABB business area Automation. PCP develops automation products - hardware and software - for monitoring, process control and optimization. We have automation products for all kinds of industries all over the world. You will be sitting at our R&D department office in Västerås with access to our R&D experts and engineers and will get a general feeling of how it is to work on large-scale development projects. Contact Recruiting Manager Oliver Ehlorsson Lindberg, +46 72 461 21 08, will answer your questions. Positions are filled continuously. Please apply with your CV, academic transcripts, and a cover letter in English. We look forward to receiving your application! A future opportunity This role is part of our talent pipeline, which means it’s not currently open, but we’re always looking for curious minds, bold thinkers, and people who want to make an impact. Click Apply to express your interest and be considered for future opportunities that match your experience and aspirations. At ABB, we welcome people from all backgrounds and believe that diverse perspectives help us build a cleaner, smarter future. Apply today or visit https://www.abb.com to learn more about how we help run what runs the world.