In this work, a high-fidelity virtual testbed modeling a networked diesel generator, similar to those used commercially and by the military, is described. This testbed consists of a physical system model of a generator, a digital control system, a remote monitoring system, and physical and networked connections. The virtual testbed allows researchers to emulate a cyber-physical system and perform cyber attacks against the system without the monetary and safety risks associated with a testbed created from physical components. The testbed was used to feasibly simulate network, hardware Trojan, and software Trojan attacks against the diesel generator, and to observe the cyber and physical outcomes.
SrivastavaAMorrisTErnsterT, et al. Modeling cyber-physical vulnerability of the smart grid with incomplete information. IEEE Trans Smart Grid2013; 4(1): 235–244.
2.
AlvesTDasRMorrisT. Virtualization of industrial control system testbeds for cybersecurity. In: Proceedings of the Second Annual Industrial Control System Security (ICSS) Workshop at the 2016 Annual Computer Security Applications Conference. Los Angeles, CA. 5–9 December 2016, pp. 10–14.
3.
AlvesTDasRWerthAMorrisT. Virtualization of SCADA testbeds for cybersecurity research: a modular approach. Comput Security2018; 77: 531–546.
4.
KorkmazEDolgikhADavisM, et al. Industrial control systems security testbed. In: Proceedings of 11th Annual Symposium on Information Assurance, Albany, NY, 8–9 June 2016, pp. 13–18.
5.
AshokAWangPBrownM, et al. Experimental evaluation of cyber attacks on automatic generation control using a CPS security testbed. In: Proceedings of the IEEE Power & Energy Society General Meeting, Denver, CO, 26–30 July 2015, pp. 1–5. Piscataway, NJ: IEEE.
6.
MallouhiMAl-NashifYCoxD, et al. A testbed for analyzing security of SCADA control systems (TASSCS). InISGT 2011, Anaheim, CA, 17 January 2011, pp. 1–7. Piscataway, NJ: IEEE.
7.
AdhikariUMorrisTPanS. WAMS cyber-physical test bed for power system, cybersecurity study, and data mining. IEEE Trans Smart Grid2016; 8(6): 2744–2753.
8.
ReavesBMorrisT. An open virtual testbed for industrial control system security research. Int J Inf Secur2012; 11(4): 215–229.
9.
CintugluMHMohammedOAAkkayaK, et al. A survey on smart grid cyber-physical system testbeds. IEEE Commun Surv Tutor2016; 19(1): 446–464.
10.
YeagerKEWillisJR. Modeling of emergency diesel generators in an 800 megawatt nuclear power plant. IEEE Trans Energy Convers1993; 8(3): 433–441.
11.
GertlerJ. Fault detection and diagnosis in engineering systems. Boca Raton: CRC Press, 1998.
12.
ZellerM. Myth or reality – Does the aurora vulnerability pose a risk to my generator? In: Proceedings of the 64th Annual Conference for Protective Relay Engineers, College Station, TX, 11–14 April 2011, pp. 130–136. Piscataway, NJ: IEEE.
AlvesTRBurattoMDe SouzaFM, et al. OpenPLC: An open source alternative to automation. In: Proceedings of the IEEE Global Humanitarian Technology Conference (GHTC 2014), San Jose, CA, 10–13 October 2014, pp. 585–589. Piscataway, NJ: IEEE.
DasRMorrisT. Modeling a midstream oil terminal for cyber security risk evaluation. In: Proceedings of the International Conference on Critical Infrastructure Protection 2018, Arlington, VA, 12–14 March 2018, pp. 149–175. Cham: Springer.
18.
MorrisTHGaoW. Industrial control system cyber attacks. In: Proceedings of the 1st International Symposium for ICS & SCADA Cyber Security Research 2013 (ICS-CSR 2013), Leicester, UK, 16–17 September 2013, pp. 22–29.
19.
KirbyBJDyerJMartinezC, et al. Frequency control concerns in the North American electric power system. United States Department of Energy. Oak Ridge, TN: Oak Ridge National Laboratory, 2003.
WagnerR. Address Resolution Protocol Spoofing and Man-in-the-Middle Attacks Practical Assignment GSEC Version 1.2f. Swansea, UK: Sans Institute.
22.
AhmedCMMathurAOchoaM. NoiSense: Detecting data integrity attacks on sensor measurements using hardware based fingerprints. arXiv preprint arXiv:1712.01598.5December2017.
23.
GovilNAgrawalATippenhauerNO. On ladder logic bombs in industrial control systems. In: KatsikasS, et al. (eds) Computer Security. SECPRE 2017, CyberICPS 2017. Lecture Notes in Computer Science, vol 10683. Cham: Springer, pp. 110–126.
24.
ChakrabortyRSNarasimhanSBhuniaS. Hardware Trojan: Threats and emerging solutions. In: Proceedings of the 2009 IEEE International high level design validation and test workshop, San Francisco, 4–6 November 2009, pp. 166–171. Piscataway, NJ: IEEE.
25.
MarquseeJSchultzCRobynD. Power begins at home: Assured energy for US military bases. Reston, VA: Noblis, 2017.
