CEER Cyber-Physical Testbeds (a generational leap)

Transcription

1 CEER Cyber-Physical Testbeds (a generational leap)

2 CEER: Cyber-Physical Experimentation (testbed operation support) DATA ASSETS CLOUD Customer TESTBED PEOPLE PROVISION LOCAL SCIENCE Other Testbeds

3 Testbed Lineage An Evolution Inception Identified needs and started on solution for NSF TCIP project Internal to External Began transition to support external external users, via collaborative tools and federation Future Expand capabilities in other critical infrastructure domains FUTURE Evolution and Growth Evolved capabilities and increased capacity (largely for DOE supported projects) Refine and Expand Refine usability and expand capabilities, changing the testbed landscape

4 Value proposition Usability Scientific Advances Capability Increase the usability, accessibility, and capability of evaluation / experimentation infrastructure Advance the state of art to provide support for research and development of next generation OT forensics and cyber-system evaluation tools Continue to tackle needed capabilities that cannot be provided in facilities today

5 Our approach Driven Models Modularity Instrumentation Knowledge Scalable, accurate, and encompassing cyber and physical Adaptable composition, configuration, and Appropriate and accurate instrumentation to Blend of academic, enterprise, manufacturing, and models that adapt to exercise needs based on performer input deployment of testbed assets to accomplish exercise goals capture needed assessment knowledge without affecting results asset owner knowledge to ensure a multi-dimensional approach

6 10,00 Mile View Physical testbed access Dedicated (isolated) office space on site Dedicated remote access ICS software and equipment Computation and Storage support (within reason) Capacity to bring in special software and equipment

7 Capabilities Full end-to-end Smart Grid capabilities Deployed Advanced Metering Infrastructure (AMI) Solar research platforms Real, emulated, and simulated hardware/software for scalability Real data from the grid, Industry partners, etc. Power simulation, modeling, and optimization of various forms Network simulation, modeling, and visualization of various forms Advanced hardware-in-the-loop cyber-physical simulation WAN/LAN/HAN integration and probes Security and protocol assessment tools (static/dynamic analysis, test harnesses, fuzzing) On-grid testing capabilities via Ameren TAC facility (with fiber optic interconnects to our primary testbed)

8 System Details (current) Illinois Campus Network Core TechServices Managed Router 10G Fiber <vlan 822> Switch C1 10G Copper <vlan 822> 10G Copper <vlan 1> 10G Copper 802.1q Firewall 10 Gbs Fiber UI TechServices 10 Gbs Copper Testbed Core 1 Gbs Copper Testbed Peripheral 10 Gbs Copper Firewall 10 Gbs VRF UI TechServices Dual Constellation GPS Antenna Roof Dual Constellation GPS Antenna Ameren TAC Switch R4 Switch R5 GPS Clocks SEL Security Gateway GPS Clocks SEL Security Gateway Switch C2 Switch C3 Switch R1 Switch R2 SEL Relays Substation Computers GE Relay Switch R3 BWR Reactor Simulator SDN Testbed SEL Relays GE Relay ABB Relays OrionLX Router Testbed Compute Cluster Testbed Floor/Wall Jacks RTDS Racks Triconex Digital Nuclear Reactor Controller Armore EMS OSIsoft PI System Arbiter PMU SEL AMS SEL RTAC ABB Relays SEL AMS SEL Relays

9 Challenges It s Impossible Duplication of effort on the same problem Safety (protection of national infrastructure) vs Realism Automating both cyber and physical components Lowering the barrier to entry broadly Need open datasets that are more than just synthetic Seamless operation regardless of locale Integration of black boxes Existing tools aren t very good

10 Observations Universal authentication and access scheduling is not a solved problem Fully dynamic asset management bucks ICS industry trends Existing automation/cyber experimentation frameworks are not sufficient Co-Simulation systems work but are not very flexible ICS datasets and tools to generate them are sparce Federation is helpful, but only in very specific use cases due to unsolved science problems Usability, flexibility and accessibility are key

11 Salient Points Be Open! How-to, data, tools, etc. Focusing on infrastructure/assets alone is short-sighted Scientific advances are necessary in our space Field of Dreams doesn t really apply Breaking down barriers is absolutely required We need systems that enable not dissuade We need communities to promote, discuss, and exchange knowledge We need to be open and work together to realize the true potential Stop just competing! Collaborate instead.

12 Testbed Donations Provided By

13 THANK YOU Tim Yardley Associate Director of Technology University of Illinois Urbana-Champaign