A new London-based training centre will produce 50+ PhD graduates equipped to manage threats that cross between the digital and physical worlds—such as a hacker taking control of a power grid or a disinformation campaign inciting real-world violence. Nation-state actors are developing tools that damage cyber-physical systems, and the risk of these tools spreading beyond conflict zones is rising. Meanwhile, society’s growing reliance on social media, connected devices, and AI creates new vulnerabilities. When combined with physical attacks, these become “hybrid threats” that existing security approaches struggle to handle. The centre addresses a specific skills gap: a government report found that 40% of businesses say cybersecurity job applicants lack complementary skills beyond pure technical expertise. If successful, the centre will create leaders who can manage risks across both domains—for example, reducing physical threats by intervening in the cyber domain, or pre-empting unintended consequences that jump from one to the other. This could improve the resilience of critical infrastructure such as energy grids, water treatment plants, and communications networks, as well as counter online crimes like hate speech incitement and dark-web communication analysis. The programme also trains students to navigate the ethical dilemmas such work raises in democratic societies.
View original technical description
Cyber-physical risks pose new challenges to the UK security and defence community. Nation state actors are increasingly equipping themselves with tools capable of causing damage to cyber-physical systems. During times of elevated threat, e.g. the Ukraine war, it has become common for such tools to be used in the theatre of conflict, but the risk that they will be used outside the affected region also increases, as does the risk that they will fall into the hands of non-state actors and used more widely than against conventional cyber-physical systems. At the same time, society as a whole is developing a growing reliance on social-media, apps, connected IoT devices and both AI and Mixed Reality. By itself, this also has major security implications leading to high volumes of new crimes that need addressing but, when used in combination with cyber-physical attacks, a qualitatively different form of attack is experienced, known as a hybrid threat because of its similarity to the hybrid cyber/kinetic warfare that has emerged as a feature of recent conflicts. Our team will create a cohort of leaders equipped with specialist skills specifically adapted to tomorrow's cyber-physical risks. They will learn how to (1) manage risks that develop jointly across the cyber and physical domains, (2) reduce risks in one domain by intervening in the other domain, (3) understand how criminal groups protect their interest by operating across domains, and (4) pre-empt the propagation of unintended consequences from one domain to the next. These future leaders will also undertake an intense programme of activities designed to nurture key complementary skills. The eXchange, Lead!, Get it Done, and Next Step schemes will be shaped with our industry partners to address important gaps highlighted in a recent government report: "40% of businesses reported that cybersecurity job applicants are deficient in their complementary skills". Beyond fostering technical expertise, the CDT will help students and partners develop an acute awareness of the wider issues and dilemmas posed by all such work in democratic societies. To deliver an exceptional learning experience, we bring a powerful group of industry partners and academic experts from the engineering, natural and social sciences within a single-site research training centre in London. Academically excellent and pro-active within and between cohorts, the 50+ CDT students will specialise in a range of scientific techniques from at least two of the following four 'cyber-physical risk' themes. These were selected in consultation with students and partners based on their relevance, attractiveness and employment opportunities: 1. Futures: forecast how future socio-technical trends will shape the geopolitical implications of cyber-physical risk, understand how to co-design effective control and mitigation measures for different legal, technical, and policy contexts in order to support societal resilience. 2. Cyber-physical systems: support regulation of IoT devices, detect 'below the radar' attacks against cyber-physical control systems; contribute to the resilience of critical infrastructures. 3. Online Communication: prevent the misuse of social media for disinformation campaigns, detect incitement to hate crime in games, analyse crime related communication on the dark web, etc. 4. Simulation and Interaction: develop and apply simulation technologies (e.g., digital twins, VR, XR) for the study of human behaviour in a range of cyber-physical risk scenarios. EPSRC areas directly relevant to the following themes: Artificial intelligence technologies, Building a secure and resilient world, Digital security by design, Digital signal processing, Human communication in information and communication technologies, Human-computer interaction, ICT networks and distributed systems, Image and vision computing, Natural language processing, Operational research, Pervasive and ubiquitous computing.
Plain English summaries and category classifications on this site are generated by AI and may not perfectly reflect the original research.
Is something wrong? Let us know