Modelling and Simulating Advanced Cyber-threats to Industrial Control Systems with an Emulated Testbed

The evolving landscape of cybersecurity threats to Industrial Control Systems (ICS) necessitates a deep understanding of potential attack methodologies and their implications. Building upon the previous introduction of the Virtualised Industrial Control Systems Open-source Research Testbed (VIC-SORT), this paper expands on that work to explore cybersecurity threats within ICS settings, which emulate real-world ICS cyber-attack scenarios. This paper outlines the specific techniques and strategies employed in the simulation of attacks on ICS, leveraging VIC-SORT's simulation capabilities. Central to this approach is the application of the ICS Cyber Kill Chain framework, which guides the exploration of various attack strategies. The approach detailed herein is not only instrumental in exposing the possible fragility of ICS configured in a similar manner to VICSORT, to a range of cyber threats, but also sets the groundwork for future explorations into effective defence mechanisms. The insights gained from these simulations are pivotal for cybersecurity practitioners and learners, offering a practical and resource-efficient means to gain hands-on experience. The comprehensive approach outlined in this paper contributes significantly to the field of ICS cybersecurity, bridging the gap between theoretical knowledge and practical application, and paving the way for the development of robust defence strategies in subsequent works. The experience and findings gained through VICSORT underscore the urgent need for robust security strategies in safeguarding critical infrastructure.