97 Things Every Application Security Professional Should Know

Chapter 97. Application Security in Cyber–Physical Systems

Yaniv Vardi

You’d be hard-pressed to find a physical process in our connected world that isn’t controlled and managed over the internet. These so-called cyber–physical systems (CPS) are prevalent everywhere—and behind every good CPS is an application responsible for its intended purpose.

Factory floors, for example, are automated marvels where devices are programmed to build the things central to our lives. Engineers and asset operators use applications known as Engineering WorkStations (EWS) to upload data from devices, download new instructions, and respond to failures in order to ensure that critical services remain available and safe.

Treatment within hospitals and physicians’ offices is also increasingly reliant on connected devices that share patient information that rapidly informs diagnosis and treatment. Remote patient monitoring applications, medical diagnosis software, imaging applications, and digital electronic health record systems are just some examples of CPS and their impact on patient care and safety.

Every modern building is essentially a connected device managed by software applications. Smart homes are rife with connected devices that can be managed by an app that allows users to control climate conditions, oversee home surveillance systems, or raise and lower shades. HVAC and elevators in pharmaceutical ...