Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Industrial Network Security: OT Cybersecurity & IEC 62443

Name: Industrial Network Security: OT Cybersecurity & IEC 62443
Rating: 3.8 (10 reviews)

SCADA, ICS, OSI Model Security, Firewalls, IPsec, Network Segmentation, Cryptography & Critical Infrastructure Defense

Created byProjectEngPro Engineering and Project Management

Last updated 11/2026

English

English [Auto],

What you'll learn

Apply the OSI 7-layer model to secure a control system network from the physical layer up to the application layer
Design network segmentation aligned with IEC 62443 zones and conduits to protect an OT environment
Configure firewalls, NAT and IPsec to secure the OT and IT boundary and encrypt industrial traffic
Recognise and prevent ARP spoofing, SYN floods and DNS cache poisoning in an ICS network
Deploy monitoring, logging, IDS and SIEM tools suited to an industrial control system
Apply encryption, hashing and key management to protect data and commands in OT systems
Use QoS traffic prioritisation to keep critical industrial communications running
Secure DNS, NTP and precision time protocol (IEEE 1588) in a control system network

Course content

7 sections • 29 lectures • 7h 15m total length

Course Introduction and Cyber Security Relevance17:46
What the course covers and why network security is critical for industrial control systems, where a cyber attack can affect safety and plant reliability.
Standard Industrial Network Technology20:54
How standard industrial networks are built, covering ICS and SCADA architectures, common industrial protocols, OT security challenges and the role of segmentation.
The OSI 7-Layer Reference Model27:26
How the OSI seven layer model describes network communication, what each layer does, and why it is the reference for securing industrial networks.
Section 1 Quiz: Introduction to Network Security Context

Physical Layer11:01
What the physical layer does in industrial networks, covering cabling, connectors, media and signal encoding, and the security risks found at layer one.
OSI Layer 1 – Deep Dive10:26
A closer look at OSI layer 1, showing how physical security of cables, cabinets and network hardware affects the reliability and protection of industrial networks.
Data Link Layer11:04
How the data link layer handles framing and MAC addressing, and which layer 2 weaknesses attackers target in operational networks.
OSI Layer 2 – Deep Dive9:15
A deeper look at OSI layer 2, covering Ethernet, MAC addresses and switching, and how local network traffic is controlled between connected devices.
Switching / Routing Fundamentals15:36
Core switching and routing ideas for industrial networks, including link aggregation, redundancy and how traffic is forwarded securely between segments.
Section 2 Quiz: Physical and Data Link Layers - Foundations for Security
A Rogue Switch in the Control Cabinet

Network Layer17:07
How the network layer uses IP addressing and routing to move packets between networks, and the security issues this raises in industrial settings.
OSI Layer 3 – Deep Dive11:13
A closer look at OSI layer 3, covering the IP packet, IP addressing logic and how routers direct traffic across industrial networks.
IP Security (IPsec)14:12
How IPsec protects industrial network traffic using AH, ESP and IKE for authentication, encryption and secure key exchange.
Network Address Translation (NAT) and Firewalls13:42
How NAT and firewalls protect industrial network boundaries, covering firewall types, access control lists, deployment options and security zones.
Network Segmentation (Advanced)17:17
Advanced network segmentation for industrial sites, using VLANs and zones to isolate critical assets and limit how far an attacker can move.
Network Segmentation – Deep Dive13:23
How logical segmentation with VLANs and layer 3 switches creates network boundaries without physical separation, improving security and organisation.
Section 3 Quiz: Network Layer - Routing and IP Security
Subnet and Segment a Bottling Plant

Transport Layer13:15
How the transport layer provides end-to-end connections with TCP and UDP, and how to secure ports and sessions in industrial networks.
Application Layer17:05
How application layer protocols such as Modbus TCP, DNP3 and OPC UA work in control systems, and the security weaknesses each brings.
DNS Security17:54
Why DNS security matters for industrial networks, how DNS spoofing and similar attacks work, and the controls that prevent them.
Managed vs. Unmanaged Networks (Security Perspective)19:03
The security differences between managed and unmanaged industrial switches, and why managed switches give the control and monitoring OT networks need.
Section 4 Quiz: Transport and Application Layers - Security in Communication

Traffic Prioritization (Quality of Service - QoS)13:20
How Quality of Service prioritises control, alarm and safety traffic so critical data arrives on time in industrial networks.
Traffic Prioritization - Quality of Service (QoS) Deep Dive9:26
A deeper look at QoS mechanisms, showing how traffic is classified and prioritised to protect real-time control traffic from delays.
Network Monitoring and Logging17:26
How network monitoring and logging give visibility of OT traffic and devices, helping detect abnormal activity and support incident investigation.
Network Security Tools19:08
The main network security tools for industrial systems, including intrusion detection and prevention systems, and how each strengthens the defence.
Network Security Best Practices and Hardening17:49
How to harden industrial networks using clear security policies, procedures and best practices, from access control to incident response.
Scalable Time Distribution14:28
Why accurate, scalable time distribution matters in industrial systems, from time stamping and event records to motion control.
Precision Time Protocol (PTP) - IEEE 158814:26
How Precision Time Protocol, IEEE 1588, gives sub-microsecond time synchronisation across industrial networks, and why it matters for automation and safety.
Section 5 Quiz: Network Optimization and Security Tools

Symmetric and Asymmetric Cryptography14:38
How symmetric and asymmetric cryptography protect industrial communications, and where each one fits in terms of speed, keys and security.
Hashing and Digital Signatures14:26
How hashing algorithms such as SHA-256 and digital signatures prove data integrity and authenticity in industrial control systems.
Key Management and Cryptographic Protocols22:24
How to manage cryptographic keys and use protocols such as TLS and SSH securely, including their weaknesses in industrial environments.
Section 6 Quiz: Cryptography and Network Security
Capstone: Keys and Certificates for a SCADA Upgrade

Requirements

No prior cybersecurity knowledge is required — the course builds from networking basics
A basic understanding of networks or IT is helpful but not essential
Helpful but not essential: some exposure to control systems or operational technology
No software or purchases needed

Description

This course contains the use of artificial intelligence.

Industrial networks were built to keep running, not to keep attackers out. Now they connect to business networks, remote sites and vendors, and the gaps show.

Most network security training is written for IT. Control systems have different priorities, older protocols and less tolerance for change. The fundamentals are the same, but they are applied differently.

This course works up the OSI model layer by layer, from the physical cable to cryptography, and applies each layer to control systems, SCADA and OT networks, with segmentation aligned to IEC 62443 zones and conduits.

WHAT YOU WILL LEARN TO DO

By the end of this course you will be able to:

Apply the OSI 7-layer model to an industrial control system network
Secure the physical and data link layers against attacks on industrial infrastructure
Design network segmentation aligned with IEC 62443 zones and conduits
Configure firewalls, NAT and IPsec at the OT and IT boundary
Recognise common network attacks such as ARP spoofing, SYN floods and DNS cache poisoning
Secure DNS, NTP and precision time protocol (PTP / IEEE 1588) in a control network
Use QoS to protect critical industrial traffic
Deploy monitoring, logging, IDS and SIEM for an OT environment
Apply symmetric and asymmetric encryption, hashing and key management to industrial communications

HOW THE COURSE IS TAUGHT

Built layer by layer on the OSI model, so every control has a clear place in the stack
Every topic applied to OT, ICS and SCADA networks rather than office IT
Short lectures, each followed by a quiz with explanations
No prior cybersecurity knowledge assumed

WHAT IS COVERED

Network security context, standard industrial network technology and the OSI model
Physical and data link layers, switching and routing fundamentals
The network layer, IPsec, NAT, firewalls and advanced network segmentation
Transport and application layers, DNS security, and managed versus unmanaged networks
Quality of service, monitoring and logging, security tools and network hardening
Scalable time distribution and precision time protocol (IEEE 1588)
Symmetric and asymmetric cryptography, hashing, digital signatures and key management

110 PRACTICE QUESTIONS

Every section ends with a quiz built around realistic scenarios, so you test your understanding as you go and reinforce what you have learned. Each answer comes with a short explanation.

HANDS-ON PRACTICE

1 roleplay: talk through real workplace situations with a character, such as a sceptical manager, a contractor cutting corners or a client pushing back, and get feedback on how you handled it
2 practical assignments: realistic engineering tasks with full worked solutions and the common mistakes to avoid

Enrol today and learn to secure an industrial network layer by layer.

Who this course is for:

IT security professionals moving into OT and ICS roles who need to know what changes on an industrial network
Control system engineers and SCADA technicians who must secure the networks they already run
Network engineers in energy, utilities, oil and gas or manufacturing who look after control networks
Security analysts protecting industrial networks and responding to alerts from them
Engineers designing segmentation, firewalls and remote access for control systems
Students building a foundation for a career in OT cybersecurity

Industrial Network Security: OT Cybersecurity & IEC 62443

What you'll learn

Explore related topics

Course content

Introduction to Network Security Context3 lectures • 1hr 6min

Physical and Data Link Layers - Foundations for Security6 lectures • 57min

Network Layer - Routing and IP Security6 lectures • 1hr 27min

Transport and Application Layers - Security in Communication4 lectures • 1hr 7min

Network Optimization and Security Tools7 lectures • 1hr 46min

Cryptography and Network Security3 lectures • 51min

Course Exam1 lecture • 1min

Requirements

Description

Who this course is for: