As part of a meetup hosted by the OWASP Vienna Chapter in Vienna, current challenges and recurring security issues in cyber-physical systems (CPS) were brought into focus. The event gathered experts from research, industry, and practice to exchange insights on application and IT security in an increasingly interconnected world.
At the center of the event was the talk“Recurring Security Pitfalls in Cyber-Physical Systems: A Cross-Domain Analysis”, delivered byMatthias Eckhart and Philipp-Sebastian Vogt, cyber security experts at the Center for Digital Safety & Security.
The speakers demonstrated that, despite differing technologies and operational environments—such as manufacturing, energy, and aerospace—cyber-physical systems often exhibit strikingly similar security weaknesses.
The presentation highlighted recurring vulnerability patterns that stem from fundamental structural challenges. These include insufficient integration of security requirements in early design phases, a lack of consistent security-by-design approaches, and the growing complexity of interconnected systems.
At the end of the presentation, two practical scenarios were demonstrated: First, it was shown that drone communication can be fully intercepted using low-cost software-defined radio (SDR) equipment (around €50). Second, it was illustrated that discrepancies between the operator view and the ground truth view can reveal vulnerabilities and potential misbehavior.
Overall, the examples highlighted that typical security risks—such as unprotected interfaces, insufficient segmentation, and inadequate monitoring—recur across different domains. These findings emphasize the need for a holistic security approach that integrates technical, organizational, and procedural measures.
Beyond the technical insights, the meetup also provided a valuable platform for networking and knowledge exchange within the cybersecurity community. Events like this play a key role in strengthening collaboration and advancing the development of resilient and secure cyber-physical systems—an essential prerequisite for safeguarding critical infrastructures in the digital age.
