ICSs virtualized lab for cybersecurity testing

Description

• This project is currently under development and is supported by @sfl0r3nz05. The aim of this project is to develop the deployment of an ICS network on which to perform security tests.

• The specific use case to be implemented is that of a Waster Water Treatment Plant (WWTP). However the project may integrate other use cases such as the Tennesse-Eastman.

• This project is related to the OT-NWbasedOnGNS3 project, aiming to deploy the use case of this project on a larger ICS network.

• The project consists of four container-based components: OpenPLC, Scada-LTS, ICS Process and Attacker.

• These components are deployed in two ways: Docker compose network and GNS3 network simulation.

Project Status: in progress

State of the Art

This is a compilation of works related to the theme of the project:

1. Development of an Open-Source Testbed Based on the Modbus Protocol for Cybersecurity Analysis of Nuclear Power Plants

Requirements

• For deployment based on docker compose:

  1. Install basic requirements.

• For deployment based on GNS3:

  Note: For deployment over GNS3, the same previous requirements should be used.

  1. GNS3 server installation

Build and set up the component containers and network to be deployed

• This section explains how to build and set-up the containers that will be imported in both the docker compose and GNS3.

  1. OpenPLC container creation

  2. ICS Process containers:

     Note: The following containers will be associated with the industrial processes to be integrated in the project

     1. WWTP Process container based on Matlab

  3. Scada-LTS:

     1. For docker-compose deployment use the container included into the docker-compose.yml file.

     2. For gns3 use the following Scada-BR container importation

        Note: Follow this step to set-up the ScadaBR container once it is deployed: Scada-BR

  4. Attacker container creation

• This section also considers how to build and set-up the network to be deployed.

  1. Network

Use cases virtualized

Note: Next it is analyzed how to deploy the different use cases.

1. Water Heater Experiment
2. Water Waste Tratement Plant (WWTP)

To Do

1. Migrate ScadaBR to ScadaLTS
2. Properly document the use case Water Heater Experiment
3. Properly document the use case Water Waste Tratement Plant (WWTP)