Skip to content
Conference

OT Cybersecurity: From Perimeter Security to Zero Trust: An AI-Governed OT Cybersecurity Architecture for Industrial Systems

Jul 2026 · 2026 6th International Conference on Electrical, Computer and Energy Technologies (ICECET) · pp. 1-7 · 0 citations · 19 references

Abstract

The progressive convergence of Information Technology (IT) and Operational Technology (OT) environments has introduced new cybersecurity challenges for industrial and critical infrastructure systems. This work presents a generalized OT cybersecurity architecture that combines the Purdue reference model with Zero Trust principles to enforce strict segmentation, continuous verification, and controlled information flows across IT/OT boundaries. The architecture incorporates Artificial Intelligence (AI)-driven monitoring to support anomaly detection, contextual risk assessment, and automated response mechanisms under operational constraints. Additionally, a governance and assurance layer is discussed, aligning AI-enabled security functions with recognized risk management frameworks and auditable controls to ensure trustworthiness, resilience, and operational sustainability in high-impact industrial deployments. The proposal is further contextualized with prior AI-RMFgoverned IoT-as-a-Service and OWASP ML05 middleware contributions that address AI-enabled IoT security, model protection, and governance requirements.

View source

Similar papers

Open access Aug 2026

Security-by-Design and Risk-Based Certification for AI-Enabled Smart Home

A Security-by-Design and risk-based certification framework that combines a six-layer IoT-AI reference architecture with STRIDE-based threat analysis augmented to capture AI-specific threats, including prompt injection and data poisoning is proposed.

Iván Ortiz-Garcés, Roberto O. Andrade · 0 citations
Review Open access Aug 2026

Design and Validation Framework for Multi-Level Cybersecurity and Privacy Protection in Modern Digital Infrastructures

A multi-level cybersecurity and privacy framework that integrates complementary controls across physical, network, endpoint, application, data, identity and access management, monitoring and incident response, and human and policy domains is developed.

Kennedy Owino Jaramba, Samwel Oonge · 0 citations
Open access Aug 2026

AI-Driven Threat Intelligence for National Cybersecurity Governance: A Framework for Adaptive Risk Detection and Policy-Aware Response

An AI-driven threat intelligence framework designed to enhance national cybersecurity governance through adaptive risk detection, contextual analysis, and policy-aware response orchestration is proposed, demonstrating how AI can support strategic cyber resilience while preserving transparency and policy compliance.

M. M. Salem · 0 citations
#explainable ai Review Aug 2026

Explainable Artificial Intelligence for Industrial Cybersecurity: A Review of Methods, Operational Integration, and Research Challenges

A comprehensive review of XAI techniques in industrial cybersecurity, focusing on industrial SOC environments and operational security workflows, and identifies open research directions and opportunities for developing trustworthy, operationally viable, and domain-specific XAI-enabled cybersecurity solutions for indust...

Amr S. Mohamed, Charlotte Fritz, A. M. Saber et al. · 0 citations
Open access Jul 2026

Operationalizing Deception Technology in ICS/OiticaT: A Control Mapping Framework for Crl Infrastructure Cybersecurity

This practitioner-oriented artefact translates deception technology from a novel security tool into an auditable set of governance, architecture, monitoring, response, and continuous improvement practices that organisations can use to evaluate deception readiness and plan low-risk deployment in safety-sensitive OT envi...

Daniel Ward · 0 citations
Review Open access 2024

Cybersecurity Frameworks for Digital Financial Institutions

The findings have shown that the combination of intelligent security solutions and a standardized governance model not only increases the resilience of the organisation, but also reduces cyber risks, facilitates compliance with regulatory requirements and safeguard the trust of customers.

Vladimir Glushkov, Victor Glushkov · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.