SES Lecture—Why Control System Cyber-Security Sucks

The control systems at CERN (the European Organization for Particle Physics) is one of the most complex in the world. This, coupled with the institution's high profile makes securing these systems a unique challenge.

Dr Lüders will discuss the general principles of control systems used for running the experiments and accelerators of the Large Hadron Collider complex at the European Organization for Particle Physics (CERN). In particular, it will focus on the struggles to deploy adequate security measures while maintaining a suitable balance with the academic nature of the Organization. Or, bluntly: Why control system cyber-security just plainly sucks.

Stefan Lüders, PhD, graduated from the Swiss Federal Institute of Technology in Zurich and joined the European Organization for Particle Physics (CERN) in 2002. Since 2009, he is heading the CERN Computer Security Incident Response Team as CERN’s Computer Security Officer with the mandate to coordinate all aspects of CERN’s computer security – office computing security, computer centre security, GRID computing security and control system security – whilst taking into account CERN’s operational needs.

Dr Lüders has presented on computer security and control system cyber-security topics at many different occasions to international bodies, governments, and companies, and published several articles.