Adaptable Critical Infrastructure ICS Training Apparatus

Team: Hayden Baird, Jared Tobler, and Boyce White

Sponsor: INL

Project Description

Idaho National Laboratory (INL) has long been involved in providing cybersecurity education to people and companies in public service sectors such as: energy, water, transportation, and communications. INL has previously created mobile training apparatus which can be transported and taken to schools and workplaces to give students a hands-on learning experience. This creates more awareness of potential cyber threats and allows students to develop skills to avoid and mitigate these threats when they arise. Our team has been tasked with designing and building a new or adapted version of this training apparatus which is specifically targeted towards the water sector.

Requirements & Constraints

  • Interface panel which accurately represents a wastewater treatment facility
  • Components of the interface panel need to be controlled by a programmable logic controller (PLC).
  • Incorporate two laptops, one for the attack vector and one to control the interface panel.
  • Small enough to be taken on a plane.
  • User manual which describes how to setup and use the product.
  • Includes an attack vector, which means the user manual contains instructions on completing the attack vector and the attack laptop has the necessary software.

Design Description

Cyber Tsunami is an Industrial Control System (ICS) cyber training module that simulates a waste-water treatment facility. The purpose of this training module is to informusers on the impact cyber threats can have on the ICSs our societies rely.

System diagram
System on a desk with some labels added

Performance Review

Requirement/Constraint Target Threshold Predicted Performance Actual Performance
Time spent in setup 15mins 40mins 15mins 8mins
Number of interaction points 8 2 5 6
Time to reset System 5mins 30mins 15mins 10mins
Non-industry parts 4 10 8 5
Cost of parts $3000 $8000 $2000 $1000
Apparatus user interface options 4 1 3 3
# of machines on network 3 0 2 3
Test rating score 8 5 6 8
Variety of training exercises 10 3 3 0.5

Conclusion

  • Majority of system requirements met
  • Completed well within the project budget
  • Nice looking and useful interface panel
  • User manual is well written, educational, and understandable
  • Training Exercises design requires further development and testing