Adaptable Critical Infrastructure ICS Training Apparatus
Team: Hayden Baird, Jared Tobler, and Boyce White
Sponsor: INL
Project Description
Idaho National Laboratory (INL) has long been involved in providing cybersecurity education to people and companies in public service sectors such as: energy, water, transportation, and communications. INL has previously created mobile training apparatus which can be transported and taken to schools and workplaces to give students a hands-on learning experience. This creates more awareness of potential cyber threats and allows students to develop skills to avoid and mitigate these threats when they arise. Our team has been tasked with designing and building a new or adapted version of this training apparatus which is specifically targeted towards the water sector.
Requirements & Constraints
- Interface panel which accurately represents a wastewater treatment facility
- Components of the interface panel need to be controlled by a programmable logic controller (PLC).
- Incorporate two laptops, one for the attack vector and one to control the interface panel.
- Small enough to be taken on a plane.
- User manual which describes how to setup and use the product.
- Includes an attack vector, which means the user manual contains instructions on completing the attack vector and the attack laptop has the necessary software.
Design Description
Cyber Tsunami is an Industrial Control System (ICS) cyber training module that simulates a waste-water treatment facility. The purpose of this training module is to informusers on the impact cyber threats can have on the ICSs our societies rely.
Performance Review
| Requirement/Constraint | Target | Threshold | Predicted Performance | Actual Performance |
|---|---|---|---|---|
| Time spent in setup | 15mins | 40mins | 15mins | 8mins |
| Number of interaction points | 8 | 2 | 5 | 6 |
| Time to reset System | 5mins | 30mins | 15mins | 10mins |
| Non-industry parts | 4 | 10 | 8 | 5 |
| Cost of parts | $3000 | $8000 | $2000 | $1000 |
| Apparatus user interface options | 4 | 1 | 3 | 3 |
| # of machines on network | 3 | 0 | 2 | 3 |
| Test rating score | 8 | 5 | 6 | 8 |
| Variety of training exercises | 10 | 3 | 3 | 0.5 |
Conclusion
- Majority of system requirements met
- Completed well within the project budget
- Nice looking and useful interface panel
- User manual is well written, educational, and understandable
- Training Exercises design requires further development and testing