# Use Case Based Blended Teaching of IIoT Cybersecurity in the Industry 4.0 Era
## 3 Blended Teaching Methodology  
This article suggests structuring the content of the proposed IIoT cybersecurity course in three theoretical parts:  
* Basic industrial cybersecurity concepts and cyberattacks. This first part deals with the main concepts on critical infrastructures, essential services, industrial security policies and cyberattack impact. This part can be illustrated with practical examples of industrial cyberattacks, like the ones performed by Agent.btz, Stuxnet or Night Dragon [75]. * Introduction to ICSs. In this second part the essential concepts on ICSs, PLCs, SCADAs, CPSs and Distributed Control Systems (DCSs) are imparted. * IIoT and Industry 4.0 cybersecurity. The last part of the course introduces the IIoT paradigm, the different Industry 4.0 technologies and analyzes the most relevant attacks on them. Although the previously mentioned theoretical content is really specific, students with a minimum knowledge on computers and computer networks usually do not have problems to understand it. However, the proposed methodology obtains its better results with students that come from IT fields,  
like computer scientists and electrical engineers, who often have previously learned the essential concepts on computer network architectures and computer security. The theoretical content is taught following the flipped classroom principles [44], so students receive theoretical content and additional material before the class (e.g., presentations on industrial cybersecurity from the most relevant security conferences, like DEF CON [76], BlackHat [77], or CCC [78]), which are discussed during the face-to-face time. In addition to the theoretical part, six labs are imparted. In such labs the students first learn how to use Shodan (Lab 1) and then put in practice the learned theoretical concepts on industrial cybersecurity. Thus, the course content is structured according to the following syllabus:  
* Week 1: Industrial cybersecurity basics. * Learning goals:
* To learn the essential concepts behind industrial network security. * Developed competences:
* To gain knowledge about legal and technical standards used in industrial cybersecurity, their implications in systems design, in the use of security tools and in the protection of information in industrial scenarios. * To gain knowledge about the role of cybersecurity in the design of new industrial processes, as well as of the singularities and restrictions to be addressed in order to build a secure industrial infrastructure. * Ability to identify and diagnose the associated risks of cyberattacks on industry and critical infrastructures. * Addressed topics:
* Introduction to industrial cybersecurity. * Industrial cybersecurity policies. * Impact of cyberattacks on industry and critical infrastructures. * Practical industrial cyberattack use cases. * Lab 1: Shodan basics. * Weeks 2 and 3: ICS cybersecurity. * Learning goals:
* To learn the essential concepts on the different types of ICSs and their security. * Developed competences:
* To gain knowledge about how the most popular ICS hardware and protocols work and their role in industrial processes. * To gain knowledge about ICS cybersecurity, including the most relevant attacks and potential defense strategies. * Addressed topics:
* Types of ICSs. * Traditional industrial communications architectures. * Advanced communications architectures. * Labs 2 and 3: Practical use cases. * Week 4: IIoT and Industry 4.0 cybersecurity. * Learning goals:
* To learn the essential concepts on the security of IIoT and the latest Industry 4.0 technologies. * To understand the security implications of making use of Industry 4.0 technologies. * Developed competences:
* To gain knowledge about IIoT hardware, software and infrastructure, as well as about their role in industrial scenarios. * To gain knowledge about Industry 4.0 technologies and their cybersecurity. * Addressed topics:
* Introduction to Industry 4.0. * Introduction to IoT and IIoT systems. * Main IIoT cyberattacks. * Main Industry 4.0 cyberattacks.