An Experimental Testbed and Methodology for Security Analysis of SCADA Systems

Bernardo Lamas (1) , Ayoub Soury (1) , Bilel Saadallah (1) , Abdelkader Lahmadi (1) , Olivier Festor (1)

1 MADYNES - Management of dynamic networks and services

In this report, we detail the development of an experimental testbed dedicated to the security analysis of process control networks (SCADA) employed in industrial systems. The testbed is built on real hardware controllers and simulated physical processes which makes it suitable for laboratory environments. Its process-level modularity makes it easy to configure and develop multiple networked control scenarios. We designed and implemented a variety of networked process control systems using the PROFINET protocol at their communication layer. Using the developed experimental processes, we elaborated a methodology to infer a discrete model of the running controlled system through network traffic observation and process mining techniques. Secondly, we carried data manipulations on PROFINET messages to identify their impact on the controlled process behaviour. We evaluated our approach by comparing the inferred models with the designed baseline models.

Domaines: Réseaux et télécommunications [cs.NI]

Bernardo Lamas, Ayoub Soury, Bilel Saadallah, Abdelkader Lahmadi, Olivier Festor. An Experimental Testbed and Methodology for Security Analysis of SCADA Systems. [Technical Report] RT-0443, INRIA. 2013, pp.89. ⟨hal-00920828⟩