2025年CPS网络物理系统安全成熟度曲线-gartner conv.docxVIP

HypeCycleforCyber-PhysicalSystemsSecurity,2025

15July2025-ID-109minread

By:WamVoster,KatellThielemann

Initiatives:CyberRisk;MeetDailyCybersecurityNeeds

Cyber-physicalsystemscontinuetomultiplyinallindustriesduetodigitaltransformationefforts,withsecurityeffortsevolvinginparallel.Securityandriskmanagementleaders,increasinglytaskedwithsecuringCPS,canusethisHypeCycletoprioritizestrategicinvestments.

Gartner,Inc.|Page1of104

Thisresearchnoteisrestrictedtothepersonaluseofzengsenye03@.

Analysis

WhatYouNeedtoKnow

Cyber-physicalsystems(CPS)areengineeredsystemsthatorchestratesensing,computation,control,networkingandanalyticstointeractwiththephysicalworld,includinghumans.Theyconnectthedigitalandphysicalworldsandcancomeinmanyforms,including:

■ Industrialcontrolsystems(ICS)

■ Operationaltechnology(OT)devices

■ InternetofThings(IoT)

■ IndustrialIoT(IIoT)

■ InternetofMedicalThings(IoMT)

■ Roboticandautonomoussystems

AsCPSconnecttoeachotherandtoenterprisesystems,theygreatlyexpandtheattacksurfacealongabidirectionalcyber-physicalcontinuum.

Whensecure,CPSenablesafe,real-time,reliable,resilientandadaptableperformance.Whennotsecure,theyaretargetsforransomware,industrialespionageornation-statesseekingtocauseharm,asintheattacksonUkraine’spowergridstartingin2015.Theymayalsobetargetedtoprepareforfuturecon?icts,asintheVoltTyphooncampaigndisclosedin2024.

Thedisruptiveimpactofarmedcon?ictsislikelytocontinue.AsdemonstratedbyRussiancyberattacksagainstUkrainiancriticalinfrastructure,cyberskirmishesbetweenIranandIsrael,andthedefacingofawaterutilityprogrammablelogiccontroller(PLC)intheU.S.(Pennsylvania),CPSdeployedfarawayfromthebattle?eldarebecominggeopoliticaltargets.

Inaddition,generativeAIistakingcenterst