Cyber-Physical Battlefield Platform for Large-Scale Cybersecurity Exercises

Kim, Joon-Soo; Kim, Kyeongho; Jang, Moonsu

doi:10.23919/cycon.2019.8756901

Cited by 16 publications

(9 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Kim et al [74] proposed a platform to perform cybersecurity exercise for national critical infrastructure protection. The testbed was designed to replicate a realistic ICS environment that matches the characteristics of the Cyber Conflict Excercise (CCE).…”

Section: F Hybridmentioning

confidence: 99%

“…It contains symbolic structures representing the critical infrastructures, surrounded by residential and commercial buildings, and tri-color LED lights to introduce a physical representation of attacks' effects. The paper [74] describes an implementation of the proposed platform, which includes six different critical infrastructures: a power grid, a nuclear plant, a water purification plant, railroad control, airport control, and traffic light control. The system contains two PLCs of different vendors that control some typical actuators (e.g., mechanical relay, magnetic switch, motor).…”

Section: F Hybridmentioning

confidence: 99%

See 1 more Smart Citation

A Survey on Industrial Control System Testbeds and Datasets for Security Research

Conti,

Donadel,

Turrin

2021

Preprint

View full text Add to dashboard Cite

The increasing digitization and interconnection of legacy Industrial Control Systems (ICSs) open new vulnerability surfaces, exposing such systems to malicious attackers. Furthermore, since ICSs are often employed in critical infrastructures (e.g., nuclear plants) and manufacturing companies (e.g., chemical industries), attacks can lead to devastating physical damages. In dealing with this security requirement, the research community focuses on developing new security mechanisms such as Intrusion Detection Systems (IDSs), facilitated by leveraging modern machine learning techniques. However, these algorithms require a testing platform and a considerable amount of data to be trained and tested accurately. To satisfy this prerequisite, Academia, Industry, and Government are increasingly proposing testbed (i.e., scaled-down versions of ICSs or simulations) to test the performances of the IDSs. Furthermore, to enable researchers to cross-validate security systems (e.g., security-bydesign concepts or anomaly detectors), several datasets have been collected from testbeds and shared with the community.In this paper, we provide a deep and comprehensive overview of ICSs, presenting the architecture design, the employed devices, and the security protocols implemented. We then collect, compare, and describe testbeds and datasets in the literature, highlighting key challenges and design guidelines to keep in mind in the design phases. Furthermore, we enrich our work by reporting the best performing IDS algorithms tested on every dataset to create a baseline in state of the art for this field. Finally, driven by knowledge accumulated during this survey's development, we report advice and good practices on the development, the choice, and the utilization of testbeds, datasets, and IDSs.

show abstract

Section: F Hybridmentioning

confidence: 99%

Section: F Hybridmentioning

confidence: 99%

A Survey on Industrial Control System Testbeds and Datasets for Security Research

Conti,

Donadel,

Turrin

2021

Preprint

View full text Add to dashboard Cite

show abstract

“…For example, an ability to show that a simulation system initially purposed for security vulnerability analysis can be easily re-structured to perform security impact analysis. This attribute can promote continuous innovation with integrated knowledge and with accumulated testbed design experiences [62].…”

Section: • Core Characteristics (Structural and Functional)mentioning

confidence: 99%

Design Considerations for Building Credible Security Testbeds: Perspectives from Industrial Control System Use Cases

Ani

Watson

Green

et al. 2020

Journal of Cyber Security Technology

View full text Add to dashboard Cite

show abstract

“…For this purpose, the most adopted enablers implement web services (e.g., Apache or Nginx coupled with Content Management System (CMS)), but there are exceptions that explore the application of advanced Human–Machine Interfacing (HMI) capabilities such as Augmented Reality (AG), speech recognition, etc. [ 26 ].…”

Section: Introductionmentioning

confidence: 99%

Introducing the CYSAS-S3 Dataset for Operationalizing a Mission-Oriented Cyber Situational Awareness

Choumanof

Sánchez

Mayo

et al. 2022

Sensors

View full text Add to dashboard Cite

The digital transformation of the defence sector is not exempt from innovative requirements and challenges, with the lack of availability of reliable, unbiased and consistent data for training automatisms (machine learning algorithms, decision-making, what-if recreation of operational conditions, support the human understanding of the hybrid operational picture, personnel training/education, etc.) being one of the most relevant gaps. In the context of cyber defence, the state-of-the-art provides a plethora of data network collections that tend to lack presenting the information of all communication layers (physical to application). They are synthetically generated in scenarios far from the singularities of cyber defence operations. None of these data network collections took into consideration usage profiles and specific environments directly related to acquiring a cyber situational awareness, typically missing the relationship between incidents registered at the hardware/software level and their impact on the military mission assets and objectives, which consequently bypasses the entire chain of dependencies between strategic, operational, tactical and technical domains. In order to contribute to the mitigation of these gaps, this paper introduces CYSAS-S3, a novel dataset designed and created as a result of a joint research action that explores the principal needs for datasets by cyber defence centres, resulting in the generation of a collection of samples that correlate the impact of selected Advanced Persistent Threats (APT) with each phase of their cyber kill chain, regarding mission-level operations and goals.

show abstract

Cyber-Physical Battlefield Platform for Large-Scale Cybersecurity Exercises

Cited by 16 publications

References 16 publications

A Survey on Industrial Control System Testbeds and Datasets for Security Research

A Survey on Industrial Control System Testbeds and Datasets for Security Research

Design Considerations for Building Credible Security Testbeds: Perspectives from Industrial Control System Use Cases

Introducing the CYSAS-S3 Dataset for Operationalizing a Mission-Oriented Cyber Situational Awareness

Contact Info

Product

Resources

About