Threat Scenario Generation for IEC104 Cyber Defense

The Industrial Control Systems (ICS) that govern critical infrastructure are increasingly targeted by cyber threats, particularly through communication protocols such as IEC 60870-5-104 (IEC104). This research paper focuses on enhancing the cybersecurity of ICS utilizing the IEC104 protocol, which is pivotal in Europe’s critical infrastructure. Through a comprehensive literature review of previous IEC104 attacks, the study establishes a detailed understanding of the threat landscape. This foundational knowledge is utilized to develop realistic threat scenarios, which are developed for generating a labeled dataset for training machine learning models aimed at attack detection and prevention. The research methodology includes a thorough analysis of historical attack vectors. The outcomes are expected to significantly contribute to the robustness of critical infrastructure against cyber threats.