A security test-bed for industrial control systems

Abstract

Industrial Control Systems (ICS) such as Supervisory ControlAnd Data Acquisition (SCADA), Distributed Control Systems (DCS) and Distributed Automation Systems (DAS) control and monitor critical infrastructures. In recent years, proliferation of cyber-attacks to ICS revealed that a large number of security vulnerabilities exist in such systems. Excessive security solutions are proposed to remove the vulnerabilities and improve the security of ICS. However, to the best of our knowledge, none of them presented or developed a security test-bed which is vital to evaluate the security of ICS tools and products. In this paper, a test-bed is proposed for evaluating the security of industrial applications by providing different metrics for static testing, dynamic testing and network testing in industrial settings. Using these metrics and results of the three tests, industrial applications can be compared with each other from security point of view. Experimental results on several real world applications indicate that proposed test-bed can be successfully employed to evaluate and compare the security level of industrial applications.

Untitled

“…Comparing the model with alternative detection platform, this platform covers all components of the ICS development and provides metrics for evaluations [35]. Also proposed was another security solution that uses cryptography implementations to protect the communication (SCADA/DNP3 protocol communication) and attacking scenarios that could be abnormal.…”