AHS Cybersecurity Architecture Reference Design (NIST SP 800-82)

NIST SP 800-82 provides foundational guidance for securing Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments—systems that share architectural similarities with AHS, such as distributed sensors, real-time controllers, wireless vehicle-to-infrastructure (V2I) links, and centralized dispatch systems. The AHS Cybersecurity Architecture Reference Design extends this guidance by modeling AHS-specific assets—including autonomous haul trucks, onboard perception/decision systems, GNSS/RTK positioning infrastructure, edge compute gateways, fleet management software, and mine-wide OT/IT convergence points—into a hierarchical, zone-based architecture aligned with the ISA/IEC 62443 standard. Key principles include segregation of safety-critical control traffic from non-critical IT traffic, zero-trust enforcement at zone boundaries (e.g., between truck ECU networks and the operations center), cryptographic authentication of firmware updates and remote commands, and continuous monitoring via embedded security agents compliant with IEC 62443-3-3 SL2 requirements. Applications span threat modeling (e.g., spoofing GNSS signals or injecting false obstacle data), secure over-the-air (OTA) update mechanisms, and integration with Security Information and Event Management (SIEM) platforms using standardized logging formats (e.g., RFC 5424). Crucially, the design mandates co-engineering of cybersecurity and functional safety (per ISO 26262 and IEC 61508), recognizing that cyber compromises can directly induce hazardous motion or control failures—requiring joint hazard analysis (JHA) and security assurance levels (SAL) mapped to safety integrity levels (SIL).