Skip to content

A6-MITM is a program which mutates packets using ENIP (Ethernet/IP) and CIP (Common Industrial Protocol) protocols.

License

Notifications You must be signed in to change notification settings

iTrust-SUTD/A6-MITM

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

19 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

=======
A6-MITM
=======

A6-MITM is a program which mutates packets using ENIP (Ethernet/IP) and CIP (Common Industrial Protocol) protocols. 

This project has been created to help analyzing the behavior of SWaT, a water treatment testbed built at SUTD (Singapore University of Technology and Design).


Requirements
============

Hardware

* Ubuntu OS
* Laptop with at least two network interfaces

Software

* Python 2.7
* Bridge Control (https://help.ubuntu.com/community/NetworkConnectionBridge)
* NetfilterQueue (https://github.com/kti/python-netfilterqueue)
* Scapy (http://www.secdev.org/projects/scapy/)
* Ethernet/IP dissectors for Scapy (https://github.com/scy-phy/scapy-cip-enip)

Setup
=====

1. Ensure the device is physically connected in the middle of two PLCs.
2. Edit start.sh to bridge the two network adaptors.
3. Edit mutate.py Line 202 with the incoming Ethernet interface.

Mutation Operators
==================


.. csv-table:: 
   :header: "Mutation Name", "Code", "Description"
   :widths: 35, 20, 50

   "Add static 𝛿", "ASD(𝛿)", "Adds/subtracts an absolute, unchanging 𝛿 to state measurements"
   "Add Limits 𝛿", "ALD(𝛿)", "Adds/subtracts random value between -𝛿 and +𝛿 to state measurements"
   "Add Random 𝛿", "ARD(𝛿\ :sub:`1`\,𝛿\ :sub:`2`\)", "Adds/subtracts a random value between 𝛿\ :sub:`1`\ and 𝛿\ :sub:`2`\ to state measurements"
   "Set to Zero", "STZ", "Sets state measurement to zero"
   "Set to One", "STO", Sets state measurement to one"
   "Set to Static", "STS(𝛿)", "Sets state measurement to static value"
   "Set to Random", "STR(𝛿\ :sub:`1`\,𝛿\ :sub:`2`\)", "Set state measurement to a random value between 𝛿\ :sub:`1`\ and 𝛿\ :sub:`2`\"
   "Bit Shift Left", "BSL(𝛿)", "Sets state measurement is bit-shifted to left by 𝛿 bits"
   "Bit Shift Right", "BSR(𝛿)", "Sets state measurement is bit-shifted to right by 𝛿 bits"

Contributing
=====
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

* Fork the Project
* Create your Feature Branch (git checkout -b feature/AmazingFeature)
* Commit your Changes (git commit -m 'Add some AmazingFeature')
* Push to the Branch (git push origin feature/AmazingFeature)
* Open a Pull Request


License
=====
Distributed under the GNU License. See `LICENSE.txt` for more information.


Contact
=====
iTrust - itrust@sutd.edu.sg

Acknowledgments
=====
* Francisco Furtado (ifyouaretea@gmail.com)

About

A6-MITM is a program which mutates packets using ENIP (Ethernet/IP) and CIP (Common Industrial Protocol) protocols.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published