CoFacS -- Simulating a Complete Factory to Study the Security of Interconnected Production

arXiv (Cornell University)

Abstract

While the digitization of industrial factories provides tremendous improvements for the production of goods, it also renders such systems vulnerable to serious cyber-attacks. To research, test, and validate security measures protecting industrial networks against such cyber-attacks, the security community relies on testbeds to simulate industrial systems, as utilizing live systems endangers costly components or even human life. However, existing testbeds focus on individual parts of typically complex production lines in industrial factories. Consequently, the impact of cyber-attacks on industrial networks as well as the effectiveness of countermeasures cannot be evaluated in an end-to-end manner. To address this issue and facilitate research on novel security mechanisms, we present CoFacS, the first COmplete FACtory Simulation that replicates an entire production line and affords the integration of real-life industrial applications. To showcase that CoFacS accurately captures real-world behavior, we validate it against a physical model factory widely used in security research. We show that CoFacS has a maximum deviation of 0.11% to the physical reference, which enables us to study the impact of physical attacks or network-based cyber-attacks. Moreover, we highlight how CoFacS enables security research through two cases studies surrounding attack detection and the resilience of 5G-based industrial communication against jamming.

Authors 6

1. Stefan Lenz Aachen Security and Privacy in Industrial Cooperation

   RWTH Aachen University

   Affiliation as printed

   Security and Privacy in Industrial Cooperation , RWTH Aachen University , Germany

2. David Schachtschneider Aachen Security and Privacy in Industrial Cooperation

   RWTH Aachen University

   Affiliation as printed

   Security and Privacy in Industrial Cooperation , RWTH Aachen University , Germany

3. Simon Jonas Aachen Security and Privacy in Industrial Cooperation

   RWTH Aachen University

   Affiliation as printed

   Security and Privacy in Industrial Cooperation , RWTH Aachen University , Germany

4. Liam Tirpitz Aachen Data Stream Management and Analysis (DSMA)

   RWTH Aachen University

   Affiliation as printed

   Data Stream Management and Analysis , RWTH Aachen University , Germany

5. Sandra Geisler Aachen Data Stream Management and Analysis (DSMA)

   RWTH Aachen University

   Affiliation as printed

   Data Stream Management and Analysis , RWTH Aachen University , Germany

6. Martin Henze Aachen Security and Privacy in Industrial Cooperation

   Fraunhofer Institute for Communication, Information Processing and Ergonomics · RWTH Aachen University

   Affiliation as printed

   Cyber Analysis & Defense , Fraunhofer FKIE , Germany

   Security and Privacy in Industrial Cooperation , RWTH Aachen University , Germany