arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1507.04860cs.NIcs.CR
收藏

MiniCPS:一个用于CPS网络安全研究的工具包

MiniCPS: A toolkit for security research on CPS Networks

Daniele Antonioli, Nils Ole Tippenhauer

摘要:

近年来,已经花费了巨大的努力来使诸如工业控制系统(ICS)和相关的监督控制和数据采集(SCADA)系统的信息物理系统(CPS)中的通信基础设施现代化。在对办公网络和家庭网络的安全性进行了大量研究的同时,CPS及其相关系统的安全性也得到了广泛的关注。不幸的是,现实世界的CPS通常不对安全研究人员开放,因此很少有参考系统和拓扑可用。在这项工作中,我们提出了MiniCPS,CPS模拟工具箱,旨在缓解这个问题。MiniCPS的目标是创建一个可扩展的,可复制的研究环境,针对CPS中的通信和物理层交互。MiniCPS建立在Mininet的基础上,提供轻量级的实时网络仿真,并通过工具扩展Mininet,以模拟典型的CPS组件,如使用工业协议(以太网/IP,Modbus/TCP)的可编程逻辑控制器。此外,MiniCPS定义了一个简单的API来实现物理层交互模拟。在这项工作中,我们演示了MiniCPS的应用程序在两个示例场景中,并显示如何MiniCPS可以用来开发攻击和防御,直接适用于真实的系统。

英文摘要:

In recent years, tremendous effort has been spent to modernizing communication infrastructure in Cyber-Physical Systems (CPS) such as Industrial Control Systems (ICS) and related Supervisory Control and Data Acquisition (SCADA) systems. While a great amount of research has been conducted on network security of office and home networks, recently the security of CPS and related systems has gained a lot of attention. Unfortunately, real-world CPS are often not open to security researchers, and as a result very few reference systems and topologies are available. In this work, we present MiniCPS, a CPS simulation toolbox intended to alleviate this problem. The goal of MiniCPS is to create an extensible, reproducible research environment targeted to communications and physical-layer interactions in CPS. MiniCPS builds on Mininet to provide lightweight real-time network emulation, and extends Mininet with tools to simulate typical CPS components such as programmable logic controllers, which use industrial protocols (Ethernet/IP, Modbus/TCP). In addition, MiniCPS defines a simple API to enable physical-layer interaction simulation. In this work, we demonstrate applications of MiniCPS in two example scenarios, and show how MiniCPS can be used to develop attacks and defenses that are directly applicable to real systems.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑