The call for applications is now open for the second edition of the Cybersecurity Scholarships offered by the BeOneSec Chair in Cybersecurity and Cyber Intelligence. This is an opportunity for technically driven students with a genuine desire to learn to take part in real projects and gain hands-on experience from within.s y se formen desde dentro.
Two part-time scholarships are available, each lasting six months, offering the opportunity to work closely with the research team from the Department of Telematics Engineering and the BeOneSec team.
The objective is clear: ensuring that learning does not remain theoretical, but is translated into practical experience, sound judgement and real-world application.
Objectives – Scholarship 1
Development of an OT asset modelling system using OpenMaint (https://www.openmaint.org/en) as a reference, following the ISA/IEC 62443 specification.
This modelling process will result in:
A managed asset inventory within a dedicated tool (including asset listings and properties).
Automated report generation, including threat modelling and risk analysis outputs.
Tasks include:
- Passive identification (fingerprinting) of OT assets and their baseline vulnerabilities.
- Mapping identified information to ISA/IEC 62443 controls.
- Configuring OpenMaint for OT asset management.
Developing automated audit reports and proof-of-concept implementations.
More information:
Objectives – Scholarship 2
Practical implementation of OT asset identification software within an industrial plant — what we refer to as an “OT asset discovery”.
This involves implementing a probe composed of passive or non-intrusive active capture software components, supported by lightweight hardware (such as a Raspberry Pi or similar SBC) equipped with different capture “gadgets” capable of translating protocols or wiring into various interfaces.
The objective is to analyse industrial network traffic in order to:
- Discover connected devices.
- Infer firmware or software versions (for subsequent vulnerability assessment).
- Identify potential physical or logical location (based on switch or audited zone).
- Extract relevant metadata to support asset inventory management. The focus will be on commonly used technologies (SCADA, Modbus, etc.), using protocols or devices referenced by collaborating organisations.
Application Process.
To participate in the selection process, interested candidates must send an email to
rafaestepa@us.es
including:
- An updated CV
- Contact details (email address and phone number)
Applications will be accepted until 1 March 2026.
