Cyber Security of SCADA Systems test bed - Senior Design - Iowa ...

More documents

Recommendations

Info

Approach Used Design objectives Create a SCADA Testbed that can be used to simulate cyber attacks o This testbed will allow us to mimic real-world power systems and demonstrate the effects of a cyber-attack on a SCADA system. Develop a method to plan, execute, and analyze cyber-attacks on our system o We want to be methodical in our approach to testing our finished system. It is important that we have a consistent system that we can use to report our findings. Functional Requirements Virtualization Create a virtualized platform that allows network stack inspection. o Creating a virtualized platform will be the basis of adding more substations to the current test bed. Since we are limited on financial resources, we are unable to purchase more SIPROTEC Relays and SCALANCE devices. We need a virtualized platform that will allow virtual substations that can connect to the physical test bed. We also need this platform to have the ability of network stack inspection in order for us to test cyberattack scenarios. Create virtualized images for RTUs, Control Center, firewalls and Relays o In order to fully virtualize a substation, we will need to create virtual images for each segment of the substation. Creating a virtualized image for the RTU should be somewhat basic since it is a software application that runs on Windows. Creating a virtualized relay will be more difficult since it will require finding a relay simulator that can communicate with the RTU. We can use an open source firewall solution to simulate the SCALANCE firewalls. Virtualized system should be scalable to provide more realistic scenarios. o We want this system to be scalable to upwards of 30, if not more, substations. To be able to do this, we will first need to purchase and install a physical virtual host server with properly allocated physical resources. The substations should be deployed from the server. Power System Simulation and Integration Integrate DIgSILENT PowerFactory with SCADA test bed o DIgSILENT PowerFactory has the power flow simulation capabilities that we need for our system. We can set breakers and other components on a PowerFactory schematic to correspond to data points stored on our SICAM terminals. We will link PowerFactory and our SICAM RTU’s together via OPC protocol. Power Simulation should represent real world scenarios SDMAY11-11 7
o We want to integration between the Power Flow Simulation of PowerFactory and the test bed to be able to represent real world scenarios. This will make the test bed more realistic and applicable to the world’s SCADA systems. Cyber Security Assessment Produce report detailing security vulnerabilities of the system o The report will detail each vulnerability found during the assessment, what the possible impact an attack would be if carried out using a particular vulnerability, as well as possible countermeasures to mitigate the effect of each attack. Shall implement attacks discovered during the vulnerability assessment o We will think of scenarios where an attacker could use a particular vulnerability to attack the system, try to implement that attack, and attempt to get the attack to work on a consistent basis. Design Constraints We have a few minor requirements that we have deemed “non-functional”: Minimal configuration on virtual image deployment o We want our system to be easy to set up and analyze. We don’t want to have to configure each of our virtual images individually. Images should have backups to prevent loss o We are currently using one external hard drive to accomplish this task, but we are looking into other solutions. Attack scenarios can be demonstrated without requiring detailed information on attack functionality o The simpler we make our system to operate, the easier it will be to demonstrate it to the Senior Design Review Board and others who wish to see a demonstration. We will document how to perform each attack, and if possible, create shell scripts or batch files to automate the attack. Assessment shall function as comprehensive documentation on the security state of the system o This assessment will attempt to be as comprehensive as possible during the information gathering phase, and will thoroughly document any progress made or failures encountered. This will help any future project teams build upon it the work accomplished this year, and hopefully let them avoid repeating any work that has already been accomplished. All test equipment should function correctly Power system should be represented in a manner that is easy to understand o This will help observers quickly and easily understand the implications of a cybersecurity attack. We are considering using a projector to project our system’s one-line diagram onto a wall. However, we would prefer to create an easy to understand display— other than a one-line diagram— to represent our system. This could be a simple program that we create that reads data points off our OPC server and represents SDMAY11-11 8
Page 1 and 2: 12/6/2010 SDMAY11-11 CYBER SECURITY
Page 3 and 4: Virtualization: ...................
Page 5 and 6: Executive Summary Supervisory Contr
Page 7: Operating Environment The operating
Page 11 and 12: Software Selection for a Virtual Hy
Page 13 and 14: Is limited by the plugins that have
Page 15 and 16: Who will be doing testing and how w
Page 17 and 18: Figure 4: System Diagram Power Flow
Page 19 and 20: Figure 6: Using Spectrum Power TG t
Page 21 and 22: Validate the System The initial ste

Cyber Security of SCADA Systems test bed - Senior Design - Iowa ...

Create successful ePaper yourself

Delete template?

Save as template?