Supervisory Control and Data Acquisition (SCADA) systems are widely adopted in critical infrastructures and prime targets of cyberattacks. Ecological Interface Design (EID) is postulated to be an invaluable framework for supporting operators to cope with cyber intrusions, particularly zero-day attacks because prior research has demonstrated effectiveness of ecological interfaces during unanticipated events. However, a suitable research platform is absent for studying user interface in cybersecurity of SCADA systems. This paper presents a SCADA system simulation being designed and implemented for the DURESS thermohydraulic process control simulation common in EID studies. Based on the open literature and industrial standards to ensure representativeness of industrial SCADA systems, the simulation includes two programable logical controllers, seven routers, and a server in a wired communication network. These components should be sufficient to study human response to common cyberattacks on SCADA systems and support future work in prototyping and evaluating user interfaces for SCADA cybersecurity.
Get full access to this article
View all access options for this article.
References
1.
AbbasH. A. (2014). Future SCADA challenges and the promising solution: the agent-based SCADA. International journal of critical infrastructures, 10(3-4), 307-333.
AghamolkiH. G.MiaoZ.FanL. (2015). A hardware-in-the-loop SCADA testbed. Paper presented at the 2015 North American Power Symposium (NAPS).
4.
AkhtarT.GuptaB. (2021). Analysing smart power grid against different cyber attacks on SCADA system. International Journal of Innovative Computing and Applications, 12(4), 195-205.
5.
AlmalawiA.TariZ.KhalilI.FahadA. (2013). SCADAVT-A framework for SCADA security testbed based on virtualization technology. Paper presented at the 38th Annual IEEE Conference on Local Computer Networks.
6.
BennettK. B.BryantA.SusherebaC. (2018). Ecological interface design for computer network defense. Human factors, 60(5), 610-625.
7.
BoyerS. A. (2009). SCADA: supervisory control and data acquisition: International Society of Automation.
BurnsC. M.KuoJ.NgS. (2003). Ecological interface design: a new approach for visualizing network management. Computer Networks, 43(3), 369-388.
10.
BurnsC. M.SkraaningG.JrJamiesonG. A.LauN.KwokJ.WelchR.AndresenG. (2008). Evaluation of ecological interface design for nuclear process control: situation awareness effects. Human factors, 50(4), 663-679.
11.
ChabukswarR.SinopoliB.KarsaiG.GianiA.NeemaH.DavisA. (2010). Simulation of network attacks on SCADA systems. Paper presented at the First Workshop on Secure Control Systems.
12.
ChristoffersenK.HunterC. N.VicenteK. J. (1996). A longitudinal study of the effects of ecological interface design on skill acquisition. Human factors, 38(3), 523-541.
DuezP.VicenteK. J. (2005). Ecological interface design and computer network management: The effects of network size and fault frequency. International Journal of Human-Computer Studies, 63(6), 565-586.
GoldenbergN.WoolA. (2013). Accurate modeling of Modbus/TCP for intrusion detection in SCADA systems. international journal of critical infrastructure protection, 6(2), 63-75.
18.
HalenarI.JuhasM.JuhasovaB.BorkinD. (2019). Virtualization of production using digital twin technology. Paper presented at the 2019 20th International Carpathian Control Conference (ICCC).
19.
JamiesonG. A. (2007). Ecological interface design for petrochemical process control: An empirical assessment. IEEE Transactions on Systems, Man, and Cybernetics-Part A: Systems and Humans, 37(6), 906-920.
20.
JarmakiewiczJ.MaślankaK.ParobczakK. (2015). Development of cyber security testbed for critical infrastructure. Paper presented at the 2015 International Conference on Military Communications and Information Systems (ICMCIS).
21.
KimI. (2001). Human reliability analysis in the man–machine interface design review. Annals of nuclear energy, 28(11), 1069-1081.
22.
LauN.JamiesonG. A.SkraaningG.BurnsC. M. (2008). Ecological interface design in the nuclear domain: an empirical evaluation of ecological displays for the secondary subsystems of a boiling water reactor plant simulator. IEEE Transactions on nuclear science, 55(6), 3597-3610.
23.
LauN.WangH.GerdesR.TenC.-W. (2018). Securing supervisory control and data acquisition control systems. In Human-Computer Interaction and Cybersecurity Handbook (pp. 237-256): CRC Press.
24.
MorrisT.PavurapuK. (2010). A retrofit network transaction data logger and intrusion detection system for transmission and distribution substations. Paper presented at the 2010 IEEE International Conference on Power and Energy.
25.
NIST. (2014). NIST Special Publication 800-82: Guide to Industrial Control Systems (ICS) Security. In: National Institue of Standards and Technology.
26.
NormanyoE.HusinuF.AgyareO. R. (2014). Developing a human machine interface (HMI) for industrial automated systems using siemens simatic WinCC flexible advanced software. Journal of Emerging Trends in Computing and Information Sciences, 5(2), 134-144.
27.
OrchanianL. C.SmahelT. P.HowieD. E.VicenteK. J. (1996). DURESS II user’s manual: A thermal-hydraulic process simulator for research and teaching. Cognit. Eng. Lab., Toronto.
28.
PawlakW. S.VicenteK. J. (1996). Inducing effective operator control through ecological interface design. International Journal of Human-Computer Studies, 44(5), 653-688.
29.
QassimQ.JamilN.AbidinI. Z.RusliM. E.YussofS.IsmailR.… DaudM. (2017). A survey of scada testbed implementation approaches. Indian Journal of Science and Technology, 10(26), 1-8.
30.
QueirozC.MahmoodA.HuJ.TariZ.YuX. (2009). Building a SCADA security testbed. Paper presented at the 2009 Third International Conference on Network and System Security.
31.
RasmussenJ. (1983). Skills, rules, and knowledge; signals, signs, and symbols, and other distinctions in human performance models. IEEE Transactions on systems, man, and cybernetics(3), 257-266.
32.
RasmussenJ. (1985). The role of hierarchical knowledge representation in decisionmaking and system management. IEEE Transactions on systems, man, and cybernetics(2), 234-243.
33.
RasmussenJ. (2000). Human factors in a dynamic information society: where are we heading?Ergonomics, 43(7), 869-879. doi:10.1080/001401300409071
34.
RasmussenJ.VicenteK. J. (1989). Coping with human errors through system design: implications for ecological interface design. International Journal of Man-Machine Studies, 31(5), 517-534.
35.
ShengZ.JiC.HuaS. (2018). Application of Siemens PLC and WinCC in the monitoring-control system of bulk grain silo. Paper presented at the 2018 Chinese Control And Decision Conference (CCDC).
StaheliD.YuT.CrouserR. J.DamodaranS.NamK.O’GwynnD.… HarrisonL. (2014). Visualization evaluation for cyber security: Trends and future directions. Paper presented at the Proceedings of the Eleventh Workshop on Visualization for Cyber Security.
38.
TorenvlietG. L.JamiesonG. A.VicenteK. J. (2000). Making the most of ecological interface design: the role of individual differences. Applied ergonomics, 31(4), 395-408.
39.
VicenteK. J. (1996). Improving dynamic decision making in complex systems through ecological interface design: A research overview. System Dynamics Review: The Journal of the System Dynamics Society, 12(4), 251-279.
40.
VicenteK. J. (2000). HCI in the global knowledge-based economy: designing to support worker adaptation. ACM Transactions on Computer-Human Interaction (TOCHI), 7(2), 263-280.
41.
VicenteK. J. (2002). Ecological interface design: Progress and challenges. Human factors, 44(1), 62-78.
42.
VicenteK. J.ChristoffersenK.PereklitaA. (1995). Supporting operator problem solving through ecological interface design. IEEE Transactions on systems, man, and cybernetics, 25(4), 529-545.
43.
VicenteK. J.PawlakW. (1994). Cognitive work analysis for the DURESS II system. Cognitive Engineering Laboratory, Department of Industrial Engineering, University of Toronto, Toronto, Canada CEL, 94-03.
44.
VicenteK. J.RasmussenJ. (1988). On applying the skills, rules, knowledge framework to interface design. Paper presented at the Proceedings of the Human Factors Society Annual Meeting.
45.
VicenteK. J.RasmussenJ. (1992). Ecological interface design: Theoretical foundations. IEEE Transactions on systems, man, and cybernetics, 22(4), 589-606.
46.
WangH.LauN.GerdesR. (2017). Application of work domain analysis for cybersecurity. Paper presented at the International Conference on Human Aspects of Information Security, Privacy, and Trust.
47.
WangH.LauN.GerdesR. (2018). Examining cybersecurity of cyberphysical systems for critical infrastructures through work domain analysis. Human factors, 60(5), 699-718.
48.
WuT.DissoJ. F. P.JonesK.CamposA. (2013). Towards a SCADA forensics architecture. Paper presented at the 1st International Symposium for ICS & SCADA Cyber Security Research 2013 (ICS-CSR 2013) 1.
ZhuB.JosephA.SastryS. (2011). A taxonomy of cyber attacks on SCADA systems. Paper presented at the 2011 International conference on internet of things and 4th international conference on cyber, physical and social computing.
