ICS安全性教育与研究的游戏化--S3的设计、实施与结果
Gamifying Education and Research on ICS Security: Design, Implementation and Results of S3
摘要：
在这项工作中，我们认为有关安全的工业控制系统（ICS）的ICS安全教育和研究的背景下，以学术界和工业界的挑战。我们建议通过游戏化的攻击训练和对策评估来应对这些挑战。我们在（据我们所知）第一个针对ICS安全的捕获旗帜（CTF）事件（称为SWaT安全摊牌（S3））的背景下测试了我们提出的ICS安全游戏化想法。六个团队在利用ICS测试平台的安全竞赛中充当攻击者，几个学术防御系统试图检测正在进行的攻击。活动分两个阶段进行。在线阶段（危险风格的CTF）作为培训课程。现场阶段的结构是一个攻击-防御CTF。我们担任裁判，根据我们内部开发的基于多种因素（包括真实的攻击者模型）的评分系统为攻击者团队分配分数。最后，我们对S3进行了评估和讨论，包括从S3每个阶段收集的数据中得出的统计数据。
英文摘要：
In this work, we consider challenges relating to security for Industrial Control Systems (ICS) in the context of ICS security education and research targeted both to academia and industry. We propose to address those challenges through gamified attack training and countermeasure evaluation. We tested our proposed ICS security gamification idea in the context of the (to the best of our knowledge) first Capture-The-Flag (CTF) event targeted to ICS security called SWaT Security Showdown (S3). Six teams acted as attackers in a security competition leveraging an ICS testbed, with several academic defense systems attempting to detect the ongoing attacks. The event was conducted in two phases. The online phase (a jeopardy-style CTF) served as a training session. The live phase was structured as an attack-defense CTF. We acted as judges and we assigned points to the attacker teams according to a scoring system that we developed internally based on multiple factors, including realistic attacker models. We conclude the paper with an evaluation and discussion of the S3, including statistics derived from the data collected in each phase of S3.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
