Building a SCADA security testbed

NSS 2009 - Network and System Security

Volumn , Issue , 2009, Pages 357-364

  Queiroz, Carlos ^a   Mahmood, Abdun ^a   Hu, Jiankun ^a   Tari, Zahir ^a   Yu, Xinghuo ^a  

^a RMIT UNIVERSITY   (Australia)

Author keywords

DDoS; SCADA; Security; Testbed

Indexed keywords

CONTROL AND MONITOR; CRITICAL INFRASTRUCTURE; DDOS; DISTRIBUTED DENIAL OF SERVICE; SCADA SECURITY; SENSORS AND ACTUATORS; SUPERVISORY CONTROL AND DATA ACQUISITION;

INDUSTRIAL RAILROADS; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; NETWORK SECURITY; SENSOR NETWORKS; TEST FACILITIES; TESTBEDS;

SCADA SYSTEMS;

EID: 72849150312     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2009.82     Document Type: Conference Paper

References (25)

1. Slay, J. and M. Miller, Lessons Learned from the Maroochy Water Breach. Intl. Federation for Information Processing Publications, 2008. 253: p. 73.
2. Abrams, M. and J. Weiss, Malicious Control System Cyber Security Attack Case Study - Maroochy Water Services, Australia. 2008, Technical Report, Mitre.org. p. 1-16.
3. Poulsen, K. Slammer Worm Crashed Ohio Nuke Plant Network. 2003 [cited 2009; Available from: http://www.securityfocus.com/news/6767.
4. Bessani, A., et al., The Crutial Way of Critical Infrastructure Protection. Security & Privacy, IEEE, 2008. 6(6): p. 44-51.
5. Brundle, M. and M. Naedele, Security for Process Control Systems: An Overview. Security & Privacy, IEEE, 2008. 6(6): p. 24-29.
6. Dzung, D., et al., Security for industrial communication systems. Proceedings of the IEEE, 2005. 93(6): p. 1152-1177.
7. The Center for SCADA Security - Sandia National Labs. [cited 2009; Available from: http://www.sandia.gov/scada/home.htm.
8. National Laboratory - National SCADA Test Bed Program. [cited 2009; Available from: http://www.inl.gov/scada.
9. Davis, C.M., et al. SCADA Cyber Security Testbed Development. in Power Symposium, 2006. NAPS 2006. 38th North American. 2006.
10. Oman, P. and M. Phillips. Intrusion Detection and Event Monitoring in SCADA Networks. in Critical Infrastructure Protection. 2008.
11. Deconinck, G., et al., Testbed deployment of representative control algorithms. Deliverable D9, Project CRUTIAL EC IST-FP6-STREP, 2008. 27513.
12. Christiansson, H. and E. Luiijf. Creating a European SCADA Security Testbed. in Critical Infrastructure Protection Critical Infrastructure Protection. 2007.
13. Igure, V., S. Laughter, and R. Williams, Security issues in SCADA networks. Computers & Security, 2006. 25(7): p. 498-506.
14. Verissimo, P., N. Ferreira Neves, and M. Correia, The CRUTIAL reference critical information infrastructure architecture: a blueprint. International Journal of System of Systems Engineering, 2008. 1(1): p. 78-95.
15. Group, L. Lego Mindstorms NXT. 2009 14/04/2009]; Available from: http://mindstorms.lego.com.
16. Varga, A., The OMNeT++ discrete event simulation system. Proceedings of the European Simulation Multiconference (ESM'2001), 2001.
17. Swales, A. and S. Electric, OPEN MODBUS/TCP SPECIFICATION. Schneider Electric, 1999.
18. INET Framework for OMNeT++ 4.0. 2009 [cited 2009; Available from: http://inet.omnetpp.org/.
19. Organization, B. Bluetooth Technical Specification. 2009 [cited 2009; Available from: http://www.bluetooth.com/Bluetooth/Technology/Building/ Specifications/.
20. LeJOS - Java for Lego Mindstorms. 2009 [cited 2009 29/04/2009]; Available from: http://lejos.sourceforge.net/.
21. Modicon, I. Modicon Modbus Protocol Reference Guide. 1996; 121]. Available from: http://modbus.org/docs/PI-MBUS-300.pdf.
22. Raimbault, S., Libmodbus - A modbus library for Linux and OSX.. 2009.
23. Huitsing, P., et al., Attack taxonomies for the Modbus protocols. International Journal of Critical Infrastructure Protection, 2008. 1: p. 37-44.
24. Gamer, T. and M. Scharf, Realistic simulation environments for IP-based networks. Simutools '08: Proceedings of the 1st international conference on Simulation tools and techniques for communications, networks and systems & workshops, 2008: p. 1-7.
25. Dittrich, D. The "Tribe Flood Network" distributed denial of service attack tool 1999 [cited 2009; Available from: http://staff. washington.edu/dittrich/misc/tfn.analysis.