ICS Virtual Testbed

virtual testbed, ICS communication, IEC 104, emulation, anomaly detection

This paper describes a virtual environment for emulating IEC 104 traffic. Implementation is based on the open framework developed by Peter Maynard, Kieran McLaughlin and Sakir Sezer from Queen's University of Belfast. The framework implements behavior of Human Machine Interface (HMI), Remote Terminal Unit (RTU) and Data Historian devices which are typical components of IEC 104 network. During our project we extended the framework by additional functionality of HMI and RTU so that we can build a large IEC 104 with more components communicating independently each other. We also implemented several scenarios representing attacks against IEC 104 control protocol. This technical report describes the extended library, configuration of virtual environment and our experiments results.