Establishment of intrusion detection testbed for CyberManufacturing systems

Abstract

CyberManufacturing System (CMS) is a vision for the factory of the future where physical components are fully and seamlessly integrated with computation resources through connected networks. Despite many benefits that CMS can usher in, realizing it is not possible without addressing a new class of security issues that accompany with the increased connectivity. The cyber-physical attack is new type of intrusion that penetrates via cyber-attack vectors, but causes physical consequences on manufacturing environment. A CMS testbed was built for the purpose of: (i) simulating cyber-physical intrusions in CMS environment, (ii) collecting data for a cyber-physical intrusion detection system—DACDI (Define, Audit, Correlate, Disclose, and Improve), and (iii) building an environment with necessary set of equipment for further CMS security investigations. To test the environment, different attack scenarios have been created and tested on the system. Experiments generated promising results for using DACDI where both cyber and physical data are utilized.