A SCADA testbed for investigating cyber security vulnerabilities in critical infrastructures
Abstract
Supervisory Control and Data Acquisition (SCADA) systems are widely used in critical infrastructures such as water distribution networks, electricity generation and distribution plants, oil refineries, nuclear plants, and public transportation systems. However, the increased use of standard protocols and interconnectivity has exposed SCADA systems for potential cyber-attacks. In recent years, the cyber-security of SCADA systems has become a hot issue for governments, industrial sectors and academic community. Recently some security solutions have been proposed to secure SCADA systems. However, due to the critical nature of SCADA systems, evaluation of such proposed solutions on real system is im-practical. In this paper, we proposed an easily scalable and reconfigurable virtual SCADA security testbed, which can be used for developing and evaluating SCADA specific security solutions. With Distributed Denial of Service (DDoS) and false data injection attack scenarios, we demonstrated how attackers could disrupt the normal operation of SCADA systems. Experimental results show that, the pro-posed testbed can be effectively used for cyber security assessment and vulner-ability investigation on SCADA systems. One of the outcomes of this work is a labeled dataset, which can be used by researchers in the area of SCADA security.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Stateful analysis compares predetermined acceptable protocol behaviours against observed activities to detect deviations or intrusions.
“Stateful analysis compares predetermined acceptable protocol behaviours against observed activities to detect deviations or intrusions.”
From Assessing and augmenting SCADA cyber security: A survey of techniques (2017) · cites this paper as [105]
Cites
Stuxnet: Dissecting a cyberwarfare weapon
Langner, R. (2011) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2011.67 · Cited by 1,922 · see citing works
Lessons Learned from the Maroochy Water Breach
Slay, J., & Miller, M. (2007) · Critical Infrastructure Protection · doi:10.1007/978-0-387-75462-8_6 · Cited by 721 · see citing works
Stuxnet worm impact on industrial cyber-physical system security
Karnouskos, S. (2011) · Annual Conference of the IEEE Industrial Electronics Society (IECON) · doi:10.1109/iecon.2011.6120048 · Cited by 542 · see citing works
Chen, T. M., & Abu-Nimeh, S. (2011) · Computer · doi:10.1109/mc.2011.115 · Cited by 398 · see citing works
A survey SCADA of and critical infrastructure incidents
Miller, B., & Rowe, D. (2012) · Proceedings of the 1st Annual conference on Research in information technology · doi:10.1145/2380790.2380805 · Cited by 336 · see citing works
SCADA Cyber Security Testbed Development
Davis, C. M., Tate, J. E., Okhravi, H., Grier, C., Overbye, T. J., & Nicol, D. M. (2006) · North American Power Symposium (NAPS) · doi:10.1109/naps.2006.359615 · Cited by 203 · see citing works
(2005) · Cited by 189 · see citing works
Comparison of CORE network emulation platforms
Ahrenholz, J. (2010) · doi:10.1109/milcom.2010.5680218 · Cited by 178 · see citing works
A control system testbed to validate critical infrastructure protection concepts
Morris, T. H., Srivastava, A. K., Reaves, B., Gao, W., Pavurapu, K., & Reddi, R. M. (2011) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2011.06.005 · Cited by 162 · see citing works
Stouffer, K. A., Falco, J., & Scarfone, K. A. (2011) · doi:10.6028/nist.sp.800-82 · Cited by 118 · see citing works
Building a SCADA Security Testbed
Queiroz, C., Mahmood, A. N., Hu, J., Tari, Z., & Yu, X. (2009) · International Conference on Network and System Security (NSS) · doi:10.1109/nss.2009.82 · Cited by 90 · see citing works
An open virtual testbed for industrial control system security research
Reaves, B., & Morris, T. H. (2012) · International Journal of Information Security · doi:10.1007/s10207-012-0164-7 · Cited by 69 · see citing works
SCADAVT-A framework for SCADA security testbed based on virtualization technology
Almalawi, A., Tari, Z., Khalil, I., & Fahad, A. (2013) · Conference on Local Computer Networks · doi:10.1109/lcn.2013.6761301 · Cited by 55 · see citing works
Cyber Security Backdrop: A SCADA testbed
Farooqui, A. A., Zaidi, S. S. H., Memon, A. Y., & Qazi, S. (2014) · IEEE Computers, Communications and IT Applications Conference (ComComAp) · doi:10.1109/comcomap.2014.7017178 · Cited by 28 · see citing works
Smart Grid Test Bed Design and Implementation
Kush, N., Clark, A. J., & Foo, E. (2010) · QUT ePrints (Queensland University of Technology) · Cited by 11 · see citing works
An intrusion detection system for supervisory control and data acquisition systems
Hansen, S. D. (2008) · Cited by 3 · see citing works
Flagged first, then by citations
1 of the 19 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
Assessing and augmenting SCADA cyber security: A survey of techniques
Nazir, S., Patel, S., & Patel, D. (2017) · Computers & Security · doi:10.1016/j.cose.2017.06.010 · Cited by 167 · see citing works
“The large data generated [61] in a smart system can be used to extract information through data analytics for effective management.”
BackgroundAttack Detection Using Artificial Intelligence Methods for SCADA Security
Yalçın, N., ÇAKIR, S., & Ünaldı, S. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3447876 · Cited by 36 · see citing works
A survey of industrial control system testbeds
Geng, Y., Wang, Y., Liu, W., Wei, Q., Liu, K., & Wu, H. (2019) · IOP Conference Series Materials Science and Engineering · doi:10.1088/1757-899x/569/4/042030 · Cited by 33 · see citing works
Towards a Cyber-Physical Range
Kavallieratos, G., Katsikas, S. K., & Gkioulos, V. (2019) · doi:10.1145/3327961.3329532 · Cited by 32 · see citing works
Application Perspective on Cybersecurity Testbed for Industrial Control Systems
Pospíšil, O., Blažek, P., Kuchař, K., Fujdiak, R., & Mišurec, J. (2021) · Sensors · doi:10.3390/s21238119 · Cited by 30 · see citing works
Employing Digital Twins for Security-by-Design System Testing
Dietz, M., Hageman, L., von Hornung, C., & Pernul, G. (2022) · ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SaT-CPS) · doi:10.1145/3510547.3517929 · Cited by 23 · see citing works
A Multi-Model Proposal for Classification and Detection of DDoS Attacks on SCADA Systems
Söğüt, E., & Erdem, O. A. (2023) · Applied Sciences · doi:10.3390/app13105993 · Cited by 21 · see citing works
Security gaps assessment of smart grid based SCADA systems
Mir, A. W., & Ramachandran, R. K. (2019) · Information and Computer Security · doi:10.1108/ics-12-2018-0146 · Cited by 21 · see citing works
Key pre-distribution scheme with join leave support for SCADA systems
Pramod, T. C., Boroojeni, K. G., Amini, M. H., Sunitha, N. R., & Iyengar, S. S. (2018) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2018.10.011 · Cited by 20 · see citing works
Robles-Durazno, A., Moradpoor, N., McWhinnie, J., Russell, G., & Porcel-Bustamante, J. (2021) · Symmetry · doi:10.3390/sym13030519 · Cited by 18 · see citing works
Negi, R., Parvin, K., Ghosh, S., Shukla, S. K., & Gahlot, A. (2019) · IEEE International Conference on Industrial Cyber-Physical Systems (ICPS) · doi:10.1109/icphys.2019.8780291 · Cited by 17 · see citing works
Gulzar, Q., & Mustafa, K. (2024) · Security and Privacy · doi:10.1002/spy2.440 · Cited by 16 · see citing works
Enhancing Modbus-RTU Communications for Smart Metering in Building Energy Management Systems
Urrea, C., & Morales, C. (2019) · Security and Communication Networks · doi:10.1155/2019/7010717 · Cited by 16 · see citing works
Vulnerability-Based Impact Criticality Estimation for Industrial Control Systems
Ani, U., He, H., & Tiwari, A. (2020) · International Conference on Cyber Security and Protection of Digital Services (Cyber Security) · doi:10.1109/cybersecurity49315.2020.9138886 · Cited by 15 · see citing works
A Review on Current and Old SCADA Networks Applied to Water Distribution Systems
Franco, D. J., Muhammed, A., Subramaniam, S. K., Abdullah, A., Silva, R. M. S., & Akram, O. K. (2019) · International Conference of Intelligent Computing and Engineering (ICOICE) · doi:10.1109/icoice48418.2019.9035134 · Cited by 13 · see citing works
Survey on Cyber Security for Industrial Control Systems
Ali, R. F., Muneer, A., Dominic, P. D. D., Ghaleb, E. A. A., & AL-Ashmori, A. M. (2021) · International Conference on Data Analytics for Business and Industry (ICDABI) · doi:10.1109/icdabi53623.2021.9655902 · Cited by 12 · see citing works
Assessing the impact of Modbus/TCP protocol attacks on critical infrastructure: WWTP case study
Machaka, V., Figueroa-Lorenzo, S., Arrizabalaga, S., Elduayen-Echave, B., & Hernantes, J. (2025) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2025.110485 · Cited by 10 · see citing works
Adaptive Attack Mitigation for IoV Flood Attacks
Erol Gelenbe, A., & Nasereddin, M. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3529615 · Cited by 9 · see citing works
Realistic measurement protection schemes against false data injection attacks on state estimators
Wang, J., Shi, D., Li, Y., Chen, J., & Duan, X. (2017) · IEEE Power Engineering Society General Meeting · doi:10.1109/pesgm.2017.8274291 · Cited by 6 · see citing works
VNWTS: A Virtual Water Chlorination Process for Cybersecurity Analysis of Industrial Control Systems
Robles-Durazno, A., Moradpoor, N., McWhinnie, J., & Porcel-Bustamante, J. (2021) · International Conference on Security of Information and Networks (SIN) · doi:10.1109/sin54109.2021.9699375 · Cited by 5 · see citing works
Protecting IoT Servers Against Flood Attacks with the Quasi Deterministic Transmission Policy
Erol Gelenbe, A., & Nasereddin, M. (2023) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom60117.2023.00068 · Cited by 5 · see citing works
Cyber Security of Critical Infrastructures in Smart Cities
Göçoğlu, V. (2019) · Uluslararası Yönetim Akademisi Dergisi · doi:10.33712/mana.548909 · Cited by 5 · see citing works
Convergence of IT and SCADA: Associated Security Threats and Vulnerabilities
Smurthwaite, M., & Bhattacharya, M. (2020) · IOP Conference Series Materials Science and Engineering · doi:10.1088/1757-899x/790/1/012041 · Cited by 5 · see citing works
A Survey on Security Challenges and Research Opportunities in Smart Grid based SCADA Systems
Mir, A. W., & Kumar, K. R. (2019) · International Journal of Computer Sciences and Engineering · doi:10.26438/ijcse/v7i3.689706 · Cited by 4 · see citing works
Measurement Based Evaluation and Mitigation of Flood Attacks on a LAN Test-Bed
Nasereddin, M., Nakıp, M., & Erol Gelenbe, A. (2023) · Conference on Local Computer Networks · doi:10.1109/lcn58197.2023.10223358 · Cited by 3 · see citing works
Simulation-Based Evaluation of DDoS Against Smart Grid SCADAs
Gogić, D., Jelačić, B., & Lendák, I. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-42048-2_6 · Cited by 3 · see citing works
Simulation and Analysis of Cyber-Attack on Modbus Protocol for Smart Grids in Virtual EnvironmentPreprint
Banik, T., Manicavasagam, R., Banik, S., & Banik, S. (2023) · Preprints.org · doi:10.20944/preprints202309.0984.v2 · Cited by 3 · see citing works
Simulation Implementation and Verification of a Security Framework for ICS Based on SPD
Xian, G., Xue, Y., Feng, T., Jiang, Y., & Yan, Y. (2023) · Automatic Control and Computer Sciences · doi:10.3103/s0146411623010042 · Cited by 2 · see citing works
Venerability and Protection Tool Surveys of Industrial Control System
Lu, K., Liu, I., & Li, J.-S. (2018) · International Symposium on Computing and Networking Workshops (CANDARW) · doi:10.1109/candarw.2018.00099 · Cited by 2 · see citing works
Simulation and Analysis of Cyber-Attack on Modbus Protocol for Smart Grids in Virtual Environment
Banik, S., Manicavasagam, R., Banik, S., & Banik, S. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-62277-9_25 · Cited by 2 · see citing works
Using Virtual Environment to Analyze Cyber-Attacks on Smart Grid ProtocolPreprint
Banik, S., Banik, S., & Banik, S. (2023) · Preprints.org · doi:10.20944/preprints202309.0984.v1 · Cited by 1 · see citing works
Experimental Testbeds and Design of Experiments
Smidts, C. S., Ray, I., Zhu, Q., Vaddi, P. K., Zhao, Y., Huang, L., Diao, X., Talukdar, R., & Pietrykowski, M. C. (2022) · SpringerBriefs in computer science · doi:10.1007/978-3-031-12711-3_5
Franco, D. J., & Akram, O. K. (2024) · International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME) · doi:10.1109/iceccme62383.2024.10796678
THE ROLE OF ARTIFICIAL INTELLIGENCE IN ENSURING THE CYBER SECURITY OF SCADA SYSTEMS
Alakbarov, R. G., & Hashimov, M. A. (2025) · International Journal of Artificial Intelligence & Applications · doi:10.5121/ijaia.2025.16301
Operational Technology Sandbox Environment for Malware Detection
Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · International Convention on Information and Communication Technology, Electronics and Microelectronics · doi:10.1109/mipro65660.2025.11132061
- Authors
- Tesfahun, A., & Bhaskari, D. L.
- Affiliations
- Andhra University (IN)
- Corresponding author
- Tesfahun, Abebe
- Venue
- Automatic Control and Computer Sciences
- Publisher
- Allerton Press
- Published
- 2016-01
- Volume
- 50
- Issue
- 1
- Pages
- 54-62
- ISSN
- 0146-4116 (ISSN-L)
- 1558-108X
- OpenAlex
- W2471947132
- Cited by
- 36
- References
- 19
- Citations by year
- 2025: 5 · 2024: 4 · 2023: 6 · 2022: 2 · 2021: 4 · 2020: 3 · 2019: 8 · 2018: 2 · 2017: 2
- FWCI
- 3.36
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- Automatic Control and Computer Sciences (publishedVersion)
- Topics
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- SCADA security, virtual testbed, vulnerability assessment, DDoS attacks, false data injection attacks, cyberattacks, annotated dataset
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
