A Modbus traffic generator for evaluating the security of SCADA systems

Geese: A traffic generator for performance and security evaluation of IEC 61850 networks

“…In order to rate the system vulnerability to ensure a safer SAS, Sierla et al [5] use Matlab/Simulink to simulate a SCADA system and show the importance of simulated tests to obtain valid results. Dalky et al [8] use an existing Scapy extension to generate malicious MODBUS packets. As in [5], the authors simulate a SCADA system to assess the system security.…”

“…As in [5], the authors simulate a SCADA system to assess the system security. Also, in [8], the authors extend the tool to generate DNP3 packets. Gonzalez-Redondo et al [3] do tests between two boards simulating a GOOSE communication to individually measure transfer time and processor time involved with the communication described on the standard.…”

“…Also, it allows the creation and arrangement of new fields as preferred in the desired network layer. In summary, Scapy has a flexible model that tries to avoid the limitations of other tools, where you can add any value you want in any field, and stack them as you want and send the packet [7,8,13].…”

“…For further analysis, such as network stress [7] and system vulnerabilities [5,7], tests with traffic generators are best suited for allowing packets to be changed [8]. In addition, a traffic generator allows generating a large amount of data with low cost, which makes possible tests that require an emulation of a great numbers of IEDs.…”

“…It is a consensus that a test platform is an important item for performance evaluation of real-time applications for substations [3,5,7,8]. For further analysis, such as network stress [7] and system vulnerabilities [5,7], tests with traffic generators are best suited for allowing packets to be changed [8].…”