Assured Software for Advanced Intelligent Manufacturing Intelligent Smart

Assured Software for Advanced Intelligent Manufacturing Intelligent = Smart + Digital + Advanced + Energy_Efficient + Secure Gabriela Ciocarlie, SRI Greg Shannon, CMU/SEI September 25, 2019

U. S. Manufacturing • Definition: Manufacturing activities that take place in the U. S. • Over 12 million employed • 250, 000 enterprises, 98. 5% small businesses • Consumes 25% of our nations energy each year • $900 B of economic activity each year • Preparing for the industrial Io. T revolution

Goals for Intelligent Manufacturing • Operational Efficiency • Agility • Resilience • Supply Chain Integration • Energy Efficiency • Manage Risk

Goals for Intelligent Manufacturing • Operational Efficiency • Agility • Resilience • Supply Chain Integration • Energy Efficiency • Manage Risk • Security is not a first-order goal!

Improving Competitiveness • Digitize control loops • Sensorize operations • Network plant floor operations • Digitally integrate up/downstream supply chains • Capable workforce for intelligent manufacturing

Improving Competitiveness • Digitize control loops • Sensorize operations • Network plant floor operations • Digitally integrate up/downstream supply chains • Capable workforce for intelligent manufacturing • Cybersecurity is becoming a roadblock

Cybersecurity Challanges • Current operations have limited/no cybersecurity • Digitization expands incident opportunity & impacts • the impact of incidents • Malicious cyber actors are active • No easy answers on the horizon • Manufacturers have a dilemma • Increase risk with digitization? or • Increase risk of not being competitive?

Cybersecurity Challanges • Current operations have limited/no cybersecurity • Digitization expands incident opportunity & impacts • the impact of incidents • Malicious cyber actors are active • No easy answers on the horizon • Manufacturers have a dilemma • Increase risk with digitization? or • Increase risk of not being competitive?

What do U. S. Manufacturers Need? • ”Invisible” cybersecurity • Doesn’t obstruct operations • Effective cybersecurity • Strong enough to even challenge capable adversaries • Broadly adopted cybersecurity • Supply chain integration requires it • Affordable cybersecurity • Costs, time, and skills required are reasonable (low)

The Opportunity for se. L 4 etc. • ”Invisible” security • Products are “born” assured • Dev. Ops friendly for agility • Effective security • Vulnerabilities are difficult to find and execute • Broadly adopted • As OS/element can be part of standard components • Affordable • USG investing in the needed R&D • Users of products with se. L 4 won’t see high costs in time, skills, staff, and acquisition