An Industrial Control System Testbed Based on Emulation, Physical Devices and Simulation

Gao, Haihui; Peng, Yong; Dai, Zhijiang; Wang, Ting; Han, Xuefeng; Li, Hanjing

doi:10.1007/978-3-662-45355-1_6

Cited by 11 publications

(7 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This modelling approach have been adapted by [17] for developing a SCADA testbed for security analysis. In [1], [18], we can find similar topological view of the architecture. A relevant architectural modelling approach is proposed by the U. S. National Institute of Standards and Technology (NIST).…”

Section: Related Workmentioning

confidence: 89%

A Security Assessment Model for Electrical Power Grid SCADA System

2019

IJITEE

View full text Add to dashboard Cite

Due to the wide application of SCADA systems in national critical infrastructure, their cyber security issues and vulnerabilities have been a primary concern; whereas, the impact and consequences of cyber-attacks to these systems have the potential to result in catastrophic consequences in the physical domain. Therefore, estimating possible attack impacts and identifying system vulnerabilities are major concern in SCADA management and operations. However, it is quite difficult to plan, execute and review vulnerability analysis in critical infrastructure systems as well as in industrial control systems (such as SCADA system) due to its complexity, large-scale and heterogeneity. Consequently, a consistent domain-specific conceptual model is required to establish a generic framework for cyber security analysis to examine and investigate security threats on cyber-physical systems, the role of the entities within the system as well as system operations. The main contribution of this work is to present a multi-facets model to support cyber security analysis practices such as penetration testing, vulnerability assessment and risk analysis. The proposed model presents a common insight among different SCADA configurations, implementations and the employed protocols to handle its complexity, heterogeneous and scale. To demonstrate the usability as a proof of concept and applicability of the proposed model, the paper also presents an example illustrating how the proposed model can be employed to carry out security vulnerability assessment.

show abstract

Section: Related Workmentioning

confidence: 89%

A Security Assessment Model for Electrical Power Grid SCADA System

2019

IJITEE

View full text Add to dashboard Cite

show abstract

“…Cost-effectiveness describes the attributes of a testbed to be within defined budgets (Holm et al, 2015). Often, there are trade-offs between testbed development cost and its fidelity (Gao et al, 2014). The Safe execution or Isolation attribute pertains to real world test cases linked to testbeds.…”

Section: Mapping Credibility-supporting Design Factors For Ics Security Testbedsmentioning

confidence: 99%

What Makes an Industrial Control System Security Testbed Credible and Acceptable? Towards a Design Consideration Framework

Ani,

Watson

2021

Proceedings of the 11th International Conference on Simulation and Modeling Methodologies, Technologies and Applications

View full text Add to dashboard Cite

The convergence of Industrial Control System (ICS) with Information Technologies (IT) coupled with the resulting and widely publicized cyber security incidents have made ICS security and resilience issues of critical concern to operators and governments. The inability to apply traditional IT security practice to ICSs further complicates the challenges of effectively securing critical industrial systems. To investigate these challenges without impacting upon live system operations, testbeds are being widely used as viable options to explore, develop and assess security risks and controls. However, how an ICS testbed is designed, and its attributes, can directly impact not only on its viability but also its credibility and acceptance for use as a whole. Through a systematic review and analysis of ICS security testbed design factors, a novel outline conceptual mapping of design factors for building credibility and acceptance is proposed. These design considerations include: design objectives, implementation approach, architectural component coverage, core operational characteristics, and evaluation approach.

show abstract

“…Cost-effectiveness is a property that relates to achieving testbed design objectives and scenarios within financial budgets that are affordable for research purposes [11], [69]. The emphasis is on using smaller budgets/costs (in comparison to actual system costs) to achieve the same design objectives and scenarios (including architectural setups and configurations) as the real.…”

Section: • Core Characteristics (Structural and Functional)mentioning

confidence: 99%

“…This is typically subjective and varies across projects, depending on budgetary availabilities and research/test requirements. Often, a trade-off and balance is required between the cost of constructing testbeds and the fidelity of the system, and the decision that needs to be informed [69].…”

Section: • Core Characteristics (Structural and Functional)mentioning

confidence: 99%

“…sensors) or features for verifying attributes like traffic flows and response times amongst components. The capability to show and document data and values associated with these features also needs to be demonstrated [26], [69] typically at the documentation stages of an evaluation procedure (e.g. verification).…”

Section: • Core Characteristics (Structural and Functional)mentioning

confidence: 99%

See 1 more Smart Citation