Study of Adversarial and Defensive Components in an Experimental Machinery Control Systems Laboratory Environment.

摘要

Industrial control systems (ICS) are a major part of the nation's critical infrastructure. ICS are heavily relied upon within the Department of Defense, including the U.S. Navy. Securing these systems is vital to our national security. The lack of a centralized repository of tools to experiment with ICS from a cyber-security perspective makes this task difficult. This study examines publicly available defensive and adversarial ICS-related tools, to create a consolidated list based on relevance in the ICS domain. A small number of tools are selected for hands-on evaluation in an experimental Supervisory Control and Data Acquisition test environment to verify the tool's availability, investigate if the tool works as described, and to confirm the existence of appropriate documentation sufficient to install and use the tool. As a result of our survey and tools evaluation, we developed and released the Moki Linux distribution, an ICS-centric version of Kali Linux tailored with defensive and adversarial tools for security practitioners and researchers in the ICS domain.