Lightweight Testbed for Cybersecurity Experiments in SCADA-based Systems

Khan, Mohsin; Rehman, Osama; Rahman, Ibrahim M. H.; Ali, Saqib

doi:10.1109/iccit-144147971.2020.9213791

Cited by 7 publications

(6 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…A configurabilidade da topologia também é um requisito proposto em testbeds emulados [E. Petersen 2020, G. Bonofiglio 2018, M. Khan 2020.…”

Section: Trabalhos Relacionadosunclassified

“…Um dos meios de destaque para realizac ¸ão e reproduc ¸ão de cenários de redes e ataques são os testbeds, que auxiliam na criac ¸ão de experimentos sobre infraestruturas físicas utilizando virtualizac ¸ão das mesmas. Esses testbeds permitem a criac ¸ão de cenários experimentais de rede seguindo rigorosos critérios que permitem identificar vulnerabilidades, analisar o impacto de ataques e testar mecanismos de defesa através de um ambiente emulado adequado [M. Khan 2020]. No entanto, em vários estudos de seguranc ¸a são criados testbeds próprios [K. Wrona 2017], os quais geralmente são restritos ao contexto de aplicac ¸ão para o qual foram desenvolvidos, [S. Srisawai 2018] [M. Ring 2017], limitando o reuso da ferramenta.…”

Section: Introduc ¸ãOunclassified

“…[E. Petersen 2020, G. Bonofiglio 2018), mas que não foram desenvolvidas com foco em aplicac ¸ões de seguranc ¸a. Por outro lado, ferramentas desenvolvidas exclusivamente para experimentos em seguranc ¸a [M. Khan 2020Khan , M. Šimon 2016 geralmente estão limitadas quanto ao contexto de uso e quanto à aplicabilidade em redes de última gerac ¸ão que utilizam, por exemplo, SDN. Portanto, no melhor dos conhecimentos dos autores, faltam ferramentas capazes de uma maior configurabilidade da topologia, facilidade de instalac ¸ão e configurac ¸ão, menor consumo de recursos computacionais e baixo custo, que possam ser utilizadas para experimentar aplicac ¸ões de seguranc ¸a, mas sem estarem limitadas a apenas esse contexto.…”

Section: Introduc ¸ãOunclassified

See 2 more Smart Citations

LST: Testbed Emulado Leve para Redes SDN Aplicado ao Contexto de Segurança

Kaihara

Bondan

Gondim

et al. 2022

Anais Estendidos Do XL Simpósio Brasileiro De Redes De Computadores E Sistemas Distribuídos (SBRC Estendido 2022)

View full text Add to dashboard Cite

Existem muitos testbeds emulados propostos para experimentação de Redes Definidas por Software, do inglês Software-Defined Networking (SDN). Entretanto, poucas propostas focam em segurança, as quais geralmente são restritas ao contexto de aplicação para o qual foram desenvolvidas e/ou nem sempre atendem a requisitos como facilidade de instalação e configuração, configurabilidade da topologia e baixo custo, prejudicando a reusabilidade da ferramenta. Visando preencher a lacuna de pesquisa identificada, o presente trabalho apresenta o Lightweight SDN Testbed (LST), uma ferramenta leve para execuções locais de aplicações para SDN no contexto de segurança. Para diminuir o custo computacional bem como propiciar configurabilidade ao testbed proposto, o LST foi desenvolvido utilizando Docker, Docker Compose, Python e Open vSwitch.

show abstract

“…A configurabilidade da topologia também é um requisito proposto em testbeds emulados [E. Petersen 2020, G. Bonofiglio 2018, M. Khan 2020.…”

Section: Trabalhos Relacionadosunclassified

Section: Introduc ¸ãOunclassified

See 1 more Smart Citation

LST: Testbed Emulado Leve para Redes SDN Aplicado ao Contexto de Segurança

Kaihara

Bondan

Gondim

et al. 2022

Anais Estendidos Do XL Simpósio Brasileiro De Redes De Computadores E Sistemas Distribuídos (SBRC Estendido 2022)

View full text Add to dashboard Cite

show abstract

“…However, it is impractical to test real-world security flaws, countermeasures, and performance impact on a live system without interfering with critical functions that could affect grid operations [1]. Researchers and system operators place a high premium on test-beds that accurately simulate the operation of critical infrastructures.…”

Section: Introductionmentioning

confidence: 99%

Hybrid Digital Twin Architecture for Power System Cyber Security Analysis

Ayyalusamy

Sivaneasan

Kandasamy

et al. 2022

2022 IEEE PES Innovative Smart Grid Technologies - Asia (ISGT Asia)

View full text Add to dashboard Cite

This paper presents the system architecture and communication system design of a new hybrid digital twin (HDT) system for smart grid cyber security studies. The HDT system emulates the smart grid cyber-physical system using MATLAB-SIMULINK model (digital) and single board computers (physical). The methodology to establish the HDT including the network segmentation using configurable network switch and communication protocol using Node-RED is described in detail. The performance of the HDT communication system in terms of round trip time between the digital and physical models and within network components in the physical model is also studied. The development of the HDT will provide a new reconfigurable, scalable and low-cost platform to study the cybersecurity vulnerabilities in smart grids and other cyber-physical systems.

show abstract

“…It is impractical to test real world security vulnerabilities, countermeasures and performance impact on a live system without interrupting critical functions that may affect grid operations [1]. Test-beds that can represent the realistically operation of critical infrastructures are of significant value to researchers and system operators.…”

Section: Introductionmentioning

confidence: 99%

EPICTWIN: An Electric Power Digital Twin for Cyber Security Testing, Research and Education

Kandasamy,

Venugopalan,

Wong

et al. 2021

Preprint

View full text Add to dashboard Cite

Cyber-Physical Systems (CPS) rely on advanced communication and control technologies to efficiently manage devices and the flow of information in the system. However, a wide variety of potential security challenges has emerged due to the evolution of critical infrastructures (CI) from siloed sub-systems into connected and integrated networks. This is also the case for CI such as a smart grid. Smart grid security studies are carried out on physical test-beds to provide its users a platform to train and test cyber attacks, in a safe and controlled environment. However, it has limitations w.r.t modifying physical configuration and difficulty to scale.To overcome these shortcomings, we built a digital power twin for a physical test-bed that is used for cyber security studies on smart grids. On the developed twin, the users can deploy real world attacks and countermeasures, to test and study its effectiveness. The difference from the physical test-bed is that its users may easily modify their power system components and configurations. Further, reproducing the twin for using and advancing the research is significantly cheaper. The developed twin has advanced features compared to any equivalent system in the literature. To illustrate a typical use case, we present a case study where a cyber attack is launched and discuss its implications.

show abstract

Lightweight Testbed for Cybersecurity Experiments in SCADA-based Systems

Cited by 7 publications

References 18 publications

LST: Testbed Emulado Leve para Redes SDN Aplicado ao Contexto de Segurança

LST: Testbed Emulado Leve para Redes SDN Aplicado ao Contexto de Segurança

Hybrid Digital Twin Architecture for Power System Cyber Security Analysis

EPICTWIN: An Electric Power Digital Twin for Cyber Security Testing, Research and Education

Contact Info

Product

Resources

About