CPS security testbed: requirement analysis, prototype design and protection framework
| dc.contributor.author | Talukder, Md Rakibul Hasan, author | |
| dc.contributor.author | Ray, Indrajit, advisor | |
| dc.contributor.author | Malaiya, Yashwant, committee member | |
| dc.contributor.author | Vijayasarathy, Leo, committee member | |
| dc.date.accessioned | 2023-08-28T10:28:05Z | |
| dc.date.available | 2023-08-28T10:28:05Z | |
| dc.date.issued | 2023 | |
| dc.description.abstract | Testbeds are a practical way to perform security exercises on cyber physical systems (CPS) to understand vulnerabilities and the progression/impact of cyber-attacks. However, it is challenging to replicate a large CPS, such as nuclear power plant or an electrical power grid, within the confines of a laboratory that would allow security experiments to be carried out. Thus, software-based simulations are getting increasingly popular as opposed to hardware-in-the-loop based simulations for CPS that form a critical infrastructure. Unfortunately, a software-based CPS testbed oriented towards security-centric experiments requires a careful re-examination of requirements and architectural design different from a CPS testbed for non-security related experiments. On a security-focused testbed there is a need to run real attack scripts for red-teaming/blue-teaming exercises, which are, in the strictest sense of the term, malicious in nature. Thus, there is a need to protect the testbed itself from these attack experiments that have the potential to go awry. The overall effect of an exploit on the whole system or vulnerabilities at communication channels needs to be particularly explored while building a simulator for a security-centric CPS. Besides, when multiple experiments are conducted on the same testbed, there is a need to maintain isolation among these experiments so that no experiment can accidentally or maliciously compromise others and affect the fidelity of those results. Specific security experiment-related supports are essential when designing such a testbed but integrating a software-based simulator within the testbed to provide necessary experiment support is challenging. In this thesis, we make three contributions. First, we present the design of an ideal testbed based on a set of requirements and supports that we have identified, focusing specifically on security experiment as the primary use case. Next, following these requirements analysis, we integrate a software-based simulator (Generic Pressurized Water Reactor) into a testbed design by modifying the implementation architecture to allow the execution of attack experiments on different networking architectures and protocols. Finally, we describe a novel security architecture and framework to ensure the protection of security-related experiments on a CPS testbed. | |
| dc.format.medium | born digital | |
| dc.format.medium | masters theses | |
| dc.identifier | Talukder_colostate_0053N_17827.pdf | |
| dc.identifier.uri | https://hdl.handle.net/10217/236905 | |
| dc.language | English | |
| dc.language.iso | eng | |
| dc.publisher | Colorado State University. Libraries | |
| dc.relation.ispartof | 2020- | |
| dc.rights | Copyright and other restrictions may apply. User is responsible for compliance with all applicable laws. For information about copyright law, please see https://libguides.colostate.edu/copyright. | |
| dc.subject | cyber physical system | |
| dc.subject | framework | |
| dc.subject | testbed | |
| dc.subject | experiments | |
| dc.subject | access control | |
| dc.subject | security | |
| dc.title | CPS security testbed: requirement analysis, prototype design and protection framework | |
| dc.type | Text | |
| dcterms.rights.dpla | This Item is protected by copyright and/or related rights (https://rightsstatements.org/vocab/InC/1.0/). You are free to use this Item in any way that is permitted by the copyright and related rights legislation that applies to your use. For other uses you need to obtain permission from the rights-holder(s). | |
| thesis.degree.discipline | Computer Science | |
| thesis.degree.grantor | Colorado State University | |
| thesis.degree.level | Masters | |
| thesis.degree.name | Master of Science (M.S.) |
Files
Original bundle
1 - 1 of 1
Loading...
- Name:
- Talukder_colostate_0053N_17827.pdf
- Size:
- 3.4 MB
- Format:
- Adobe Portable Document Format