Open Access

ARTICLE

MSICST: Multiple-Scenario Industrial Control System Testbed for Security Research

Wei Xu^1,2, Yaodong Tao^2,3, Chunfang Yang^4,*, Huiqin Chen⁵
1 University of Science and Technology of China, Hefei, Anhui, 230026, China.
2 National Joint Engineering Lab for ICS Security of 360ESG, Beijing, 100000, China.
3 Shenyang Institute of Computing Technology of CAS, Shenyang, Liaoning, 110168, China.
4 Zhengzhou Science and Technology Institute, Zhengzhou, Henan, 450001, China.
5 University of Michigan Transportation Research Institute, USA.
* Corresponding Author: Chunfang Yang. Email: .

Computers, Materials & Continua 2019, 60(2), 691-705. https://doi.org/10.32604/cmc.2019.05678

Abstract

A security testbed is an important aspect of Industrial Control System (ICS) security research. However, existing testbeds still have many problems in that they cannot fully simulate enterprise networks and ICS attacks. This paper presents a Multiple-Scenario Industrial Control System Testbed (MSICST), a hardware-in-the-loop ICS testbed for security research. The testbed contains four typical process scenarios: thermal power plant, rail transit, smart grid, and intelligent manufacturing. We use a combination of actual physical equipment and software simulations to build the process scenario sand table and use real hardware and software to build the control systems, demilitarized zone, and enterprise zone networks. According to the ICS cyber kill chain, the attacker is modeled, and two typical attack scenarios are constructed in the testbed. Through research into this security solution, whitelist-based host protection and a new Intrusion Detection System (IDS) are proposed and tested.

---

Keywords

Industrial control system, security testbed, simulation, attack, network

---

Citations