Prototyping a Portable SCADA Platform for Vulnerability Analysis in OT Networks

Abstract

Operational technology (OT according to their acronym) is hardware and software that directly monitors physical devices and processes in industrial environments. OT systems seek to maintain the continuity, security, and reliability of operations. They are responsible for the automation of industrial processes. However, due to their robustness, they are used in critical national infrastructure. New requirements for efficient production management suggest the integration of production networks with corporate or IT (Information Technology) networks. With completely different philosophies, the integration between the two technologies opens security gaps. Cybersecurity in OT networks is a growing challenge due to the priority of maintaining physical processes in continuous operation versus the limited application of protection mechanisms. In this context, SCADA systems play a central role by concentrating the monitoring and control of industrial operations, while programmable logic controllers (PLCs according to their acronym) represent the layer of direct interaction with the physical infrastructure. To facilitate the study of these technologies and their vulnerabilities, a portable SCADA system allows for the recreation of network scenarios, enabling deployable cyber defense analysis and the collection of data on attacks targeting PLCs in a controlled environment. This approach enables practical experimentation without compromising critical infrastructure and contributes to strengthening security in strategic industrial environments.