Industrial Internet of Things (IIoT): Testbed and Datasets for CyberSecurity and Digital Forensics

Abstract

Industrial Internet of Things (IIoT) datasets are hard to obtain due to confidentiality and security reasons. Consequently, evaluation of security solutions tailored for IIoT systems bears a significant research gap in the industrial security domain. An IIoT testbed that represents real-world scenarios comprising physical processes and its related controls would enable researchers to deploy and analyze solutions better, to explore and model vulnerabilities, understand the flow of data for forensic purposes, and to model viable datasets that help test and validate security measures. However, development and implementation of such testbeds is highly composite and brings along significant challenges upfront. In addition, the existence of legacy systems in the industrial environments, such as SCADA systems, hinders prompt deployment of sophisticated security controls against industrial systems. We propose the design of an IIoT testbed that comprises a wide range of physical processes through diverse controllers, applications, and devices interacting with each other and fostering acquisition of multidimensional data from diverse data sources. In addition, we propose a realistic IIoT dataset that would facilitate understanding of traffic flow and device/application analysis for our Digital Forensic Readiness (DFR) experimentation.