EPIC: A testbed for scientifically rigorous cyber-physical security experimentation

IEEE Transactions on Emerging Topics in Computing

Volumn 1, Issue 2, 2013, Pages 319-330

  Siaterlis, Christos ^a   Genge, Béla ^a   Hohenadel, Marc ^a  

^a JOINT RESEARCH CENTRE   (Italy)

Author keywords

Cyber physical; Emulab; Networked critical infrastructures; Simulation; Testbed

Indexed keywords

COMPUTER CRIME; CRIME; CRITICAL INFRASTRUCTURES; PUBLIC WORKS; TESTBEDS;

CYBER PHYSICALS; CYBER-PHYSICAL SECURITIES; EMULAB; INFORMATION AND COMMUNICATIONS TECHNOLOGY; PHYSICAL DIMENSIONS; SCIENTIFIC INSTRUMENT; SIMULATION; SOFTWARE SIMULATOR;

MALWARE;

EID: 84913609374     PISSN: None     EISSN: 21686750     Source Type: Journal    
DOI: 10.1109/TETC.2013.2287188     Document Type: Article

References (33)

1. S. East, J. Butts, M. Papa, and S. Shenoi, ''A taxonomy of attacks on the DNP3 protocol, '' IFIP Adv. Inf. Commun. Technol., vol. 311, pp. 67-81, Jan. 2009.
2. I. Nai Fovino, A. Carcano, M. Masera, and A. Trombetta, ''An experimental investigation of malware attacks on SCADA systems, '' Int. J. Critical Infrastruct. Protection, vol. 2, no. 4, pp. 139-145, 2009.
3. T. Chen and S. Abu-Nimeh, ''Lessons from Stuxnet, '' Computer, vol. 44, no. 4, pp. 91-93, Apr. 2011.
4. D. McElroy and C. Williams, (Jul. 2013). Flame: World's Most Complex Computer Virus Exposed [Online]. Available: http://www.telegraph.co.uk/news/worldnews/middleeast/iran/9295938/Flame%-worlds-most-complex-computer-virus-exposed.html
5. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, et al., ''An integrated experimental environment for distributed systems and networks, '' in Proc. 5th Symp. Operating Syst. Design Implement., 2002, pp. 255-270.
6. C. Siaterlis, A. Garcia, and B. Genge, ''On the use of Emulab testbeds for scientifically rigorous experiments, '' IEEE Commun. Surveys Tuts., vol. 15, no. 2, pp. 929-942, Apr. 2013.
7. I. Nai Fovino, M. Masera, L. Guidi, and G. Carpi, ''An experimental platform for assessing SCADA vulnerabilities and countermeasures in power plants, '' in Proc. 3rd Conf., 2010, pp. 679-686.
8. C. Nan, I. Eusgeld, and W. Kröger, ''Analyzing vulnerabilities between SCADA system and SUC due to interdependencies, '' Rel. Eng. Syst. Safety, vol. 113, pp. 76-93, May 2013.
9. M. McDonald, G. Conrad, T. Service, and R. Cassidy, ''Cyber effects analysis using VCSE, '' Dept. Energy, Sandia Nat. Lab., Univ. New Mexico, Albuquerque, NM, USA, Tech. Rep. SAND2008-5954, 2008.
10. N. Xiong, A. Vasilakos, J. Wu, Y. Yang, A. Rindos, Y. Zhou, W. Song, and Y. Pan, ''A self-tuning failure detection scheme for cloud computing service, '' in Proc. IPDPS, 2012, pp. 668-679.
11. Z. Bureau, (Jul. 2013). North India Blackout: Blame It on States [Online]. Available: http://zeenews.india.com/news/nation/what-causednorth- india-blackout-o%n-monday-790811.html
12. W. Chunlei, F. Lan, and D. Yiqi, ''A simulation environment for SCADA security analysis and assessment, '' in Proc. Int. Conf. Measuring Technol. Mechatron. Autom., 2010, pp. 342-347.
13. C. Queiroz, A. Mahmood, J. Hu, Z. Tari, and X. Yu, ''Building a SCADA security testbed, '' in Proc. 3rd Int. Conf. Netw. Syst. Security, 2009, pp. 357-364.
14. R. Chertov, S. Fahmy, and N. B. Shroff, ''Fidelity of network simulation and emulation: A case study of TCP-targeted denial of service attacks, '' ACM Trans. Model. Comput. Simul., vol. 19, no. 1, pp. 1-29, 2009.
15. (Jul. 2013). The Network Simulator [Online]. Available: http://www.isi.edu/nsnam/ns/
16. J. Mirkovic, T. Benzel, T. Faber, R. Braden, J. Wroclawski, and S. Schwab, ''The DETER project: Advancing the science of cyber security experimentation and test, '' in Proc. IEEE Int. Conf. Technol. HST, Nov. 2010, pp. 1-7.
17. (Jul. 2013). Advanced Monitoring, Alerting and Visualization Software [Online]. Available: http://www.zabbix.com
18. R. Bell and K. Åström, ''Dynamic models for boiler-turbine-alternator units: Data logs and parameter estimation for a 160MW unit, '' Dept. Autom. Control, Lundt Inst. Technol., Boston, MA, USA, Tech. Rep. TFRT-3192, 1987.
19. J. Downs and E. Vogel, ''A plant-wide industrial process control problem, '' Comput. Chem. Eng., vol. 17, no. 3, pp. 245-255, 1993.
20. M. A. Ríos and G. Ramos, ''Power system modelling for Urban Massive transportation systems, '' Infrastruct. Design, Signalling Security Railway, vol. 3, pp. 179-202, Feb. 2012.
21. (Jul. 2013). Power Systems Test Case Archive [Online]. Available: http://www.ee.washington.edu/research/pstca/
22. (Jul. 2013). Internet Measurement Data Catalog (DatCat) [Online]. Available: http://www.datcat.org/
23. (Jul. 2013). Protected Repository for the Defense of Infrastructure Against Cyber Threats [Online]. Available: https://www.predict.org/
24. L. Rizzo, ''Dummynet: A simple approach to the evaluation of network protocols, '' SIGCOMM Comput. Commun. Rev., vol. 27, no. 1, pp. 31-41, 1997.
25. Q. Jia, Z.Wang, and A. Stavrou, ''The Heisenberg measuring uncertainty in lightweight virtualization testbeds, '' in Proc. 2ndWorkshop Cyber Security Experim. Test, 2009, pp. 1-4.
26. B. Genge, C. Siaterlis, and M. Hohenadel, ''Impact of network infrastructure parameters to the effectiveness of cyber attacks against industrial control systems, '' Int. J. Comput., Commun. Control, vol. 7, no. 4, pp. 673-686, 2012.
27. J. Sozio, ''Intelligent parameter adaptation for chemical processes, '' M.S. Thesis, Dept. Elect. Eng., Virginia Polytech. Inst. State Univ., Blacksburg, VA, USA, 1999.
28. B. Genge and C. Siaterlis, ''An experimental study on the impact of network segmentation to the resilience of physical processes, '' in Proc. 11th IFIP TC, 2012, pp. 121-134.
29. T. Tuan, J. Fandino, N. Hadjsaid, J. Sabonnadiere, and H. Vu, ''Emergency load shedding to avoid risks of voltage instability using indicators, '' IEEE Trans. Power Syst., vol. 9, no. 1, pp. 341-351, Feb. 1994.
30. M. Manera and A. Marzullo, ''Modelling the load curve of aggregate electricity consumption using principal components, '' Environ. Model. Softw., vol. 20, no. 11, pp. 1389-1400, Nov. 2005.
31. Cisco and IBM Provide High-Voltage Grid Operator with Increased Relia- bility and Manageability of its Telecommunication Infrastructure, IBM and Cisco, Bangalore, KA, India, 2007.
32. Communication Delivery Time Performance Requirements for Electric Power Substation Automation, IEEE Standard 1646-2004, 2004.
33. B. Genge and C. Siaterlis, ''Analysis of the effects of distributed denial-ofservice attacks on MPLS networks, '' Int. J. Critical Infrastruct. Protection, vol. 6, no. 2, pp. 87-95, 2013.