ZAUANA, M. Problém kybernetické bezpečnosti v průmyslovém prostředí EU [online]. Brno: Vysoké učení technické v Brně. Fakulta strojního inženýrství. 2024.

Posudek vedoucího

Maradová, Karla

The submittted work was devoted to "The problem of cyber security in th EU industrial environment". The student met the objectives of the thesis. The thesis is logically organized into an introduction, seven chapters and a conclusion. Formally, the assessed work is prepared at the required level with a minimum of stylistic and grammatical incorrectness.  The EU has introduced various regulations and standards to effectively address cyber security issues in the industrial environment. In the 2022 Cybersecurity Strategy press release, the EU announced that it aims to build strong resilience to cyber attacks and ensure that citizens and businesses can use trusted digital technologies by introducing the new Directive (EU) 2022/2555 or NIS2. The NIS2 Directive is now not only about critical infrastructure, but covers a large number of other industries such as engineering. A student at work did an experiment using a virtual box and identified some vulnerabilities using FMECA. The student worked on the thesis independently and took advantage of the opportunity for tutorials. The student worked mainly with foreign sources and cited everything properly. The thesis can be used in practice as an inspiration to companies, as cybersecurity is still underestimated in the world despite the increasing attacks. I recommend this thesis to be defended.

Posudek oponenta

Kovář, Jiří

The student dealt with the topic The problem of cyber security in the EU industrial environment. The first and important note is that the issue is very actively developed by the relevant community at this time and is also very topical, especially in terms of industrial informatics. The topic of the thesis, by which I mean its assignment and stated objectives, are each sufficiently comprehensive in themselves for the subject matter. This fact also determines the overall content and textual level of the final thesis - the student tried to process the extensive issues in the area of one diploma thesis, even though it is almost a hundred pages long. In terms of the content of the work, the student tried to work responsibly on all points of the assignment, although not always with success. For example, the experiment being conducted is at best conducted in a less enlightened manner and the result corresponds to that. For example, the "post-attack recovery" section consists of what I refer to as well-intentioned advice that can be found in any network administrator's manual. The chapter "FMECA For X&X COMPANY" demonstrates the student's effort to apply the acquired knowledge, which I consider positive. Although the proposed improvement is not well desribed and the result could be improved, I appreciate the student's efforts to achieve at least some result. The graphic and stylistic design is not at a good level, it does not use the recommended template, the citation method is unclear and inappropriate. For example, it is inappropriate to use citations in the introduction of a thesis, citations in the title of tables, etc. Considering the above, I evaluate the thesis as satisfactory/D.

eVSKP id 154086