用于配水系统的IoT安全测试工具包
IoT Security and Safety Testing Toolkits for Water Distribution Systems
摘要：
由于工业控制系统（ICS）对城市和国家的运营至关重要，对关键基础设施安全性的研究变得越来越重要和必要。作为智慧城市发展研究和应用的组成部分，准确和精确的建模，仿真和验证是强大的设计和开发工具的关键部分，这些工具为构成现代ICS系统的传感器，控制器和执行器的异常行为的预防，检测和恢复提供了关键帮助。然而，虽然这些工具具有潜力，但如果要广泛使用它们，则目前需要帮助工具来协助它们的设置和配置。现有的最先进的工具通常在技术上很复杂，难以针对任何给定的IoT/ICS流程进行定制。对于大多数技术人员、工程师、研究人员和智慧城市规划者来说，这是一个严重的进入障碍，同时也减缓了安全和安全验证的关键方面。为了解决这个问题，我们对水管理领域现有的仿真工具包进行了案例研究，并使用更深入和可用的自定义界面扩展了现有的工具和算法，这些工具和算法具有简单的自动检索功能，以加速仿真场景的设计和实施，允许自定义网络物理网络基础设施和网络攻击场景。我们还提供了一种新的工具，根据图论路径多样性的网络的弹性评估。此外，我们还为未来的开发和应用制定了路线图，包括对弹性和潜在漏洞模型检验的扩展，并讨论了我们的工作在与智慧城市的设计和运营相关的其他领域的应用。
英文摘要：
Due to the critical importance of Industrial Control Systems (ICS) to the operations of cities and countries, research into the security of critical infrastructure has become increasingly relevant and necessary. As a component of both the research and application sides of smart city development, accurate and precise modeling, simulation, and verification are key parts of a robust design and development tools that provide critical assistance in the prevention, detection, and recovery from abnormal behavior in the sensors, controllers, and actuators which make up a modern ICS system. However, while these tools have potential, there is currently a need for helper-tools to assist with their setup and configuration, if they are to be utilized widely. Existing state-of-the-art tools are often technically complex and difficult to customize for any given IoT/ICS processes. This is a serious barrier to entry for most technicians, engineers, researchers, and smart city planners, while slowing down the critical aspects of safety and security verification. To remedy this issue, we take a case study of existing simulation toolkits within the field of water management and expand on existing tools and algorithms with simplistic automated retrieval functionality using a much more in-depth and usable customization interface to accelerate simulation scenario design and implementation, allowing for customization of the cyber-physical network infrastructure and cyber attack scenarios. We additionally provide a novel in-tool-assessment of network's resilience according to graph theory path diversity. Further, we lay out a roadmap for future development and application of the proposed tool, including expansions on resiliency and potential vulnerability model checking, and discuss applications of our work to other fields relevant to the design and operation of smart cities.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
