Infrastructure and Tools for Testing the Vulnerability of Control Systems to Cyberattacks: A Coal Mine Industrial Facility Case
Source abstract
Abstract
Testing the vulnerability of information systems to cyberattacks is essential to ensure the operational security of organizations and industrial processes. In particular, it is essential to ensure the resilience of industrial processes, as a possible cyberattack can lead to process malfunctions and even process shutdowns, which can lead to substantial economic losses. The possibility of various attacks, e.g., ransomware, phishing, or advanced persistent threats (APTs), requires the evaluation of the effectiveness of cyberattack detection and incident response mechanisms. In industry, it is often impossible to carry out this type of test without risking system disruption, making it difficult to assess the true effectiveness of security features. This article discusses the issues concerned with testing the cyber resilience of a system operating in a real coal mine. First, this work briefly presents the hardware and software architecture used in the coal mine. Secondly, it describes the problem of replicating a real system in the laboratory and the necessary tools and methods used to implement a resilient system architecture. Finally, the scenarios of cyberattacks are detailed, and the obtained results are discussed.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Smart Grid Security and Resilience · Risk and Safety Analysis · Information and Cyber Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Institute of Control and Computation Engineering, Faculty of Electronics and Information Technology, Warsaw University of Technology, 00-665 Warsaw, Poland
Funding
National Centre of Research and Development
References (71)
Show source-provided references
1. A comprehensive review study of cyber-attacks and cyber security; Emerging trends and recent developments10.1016/j.egyr.2021.08.126 ↗
2. Igbekele Emmanuel, O., Ekele Victoria, C., Omonigho Efeoghene, I., and Nwachuwku Praise, C. (2023, January 5–7). Overview of Recent Cyberattacks: A Systematic Review. Proceedings of the 2023 International Conference on Science, Engineering and Business for Sustainable Development Goals (SEB-SDG), Omu-Aran, Nigeria.10.1109/SEB-SDG57117.2023.10124473 ↗
3. Toker, O., and Ozdemir, O. (2020, January 16–18). Physical-layer Cyberattack Resilient OFDM Automotive Radars. Proceedings of the 2020 IEEE Vehicular Networking Conference (VNC), New York, NY, USA.10.1109/VNC51378.2020.9318366 ↗
4. Hou, B., Zeng, S., Xi, B., Jia, S., Guo, Q., Xu, L., and Sun, H. (2021, January 28–30). Performance of Neighborhood-Watch-Based Resilient Distributed Energy Management Algorithm Under Different Types of Cyberattacks. Proceedings of the 2021 IEEE 4th International Electrical and Energy Conference (CIEEC), Wuhan, China.10.1109/CIEEC50170.2021.9510236 ↗
5. Zabetian-Hosseini, A., Mehrizi-Sani, A., and Liu, C.C. (2018, January 21–23). Cyberattack to Cyber-Physical Model of Wind Farm SCADA. Proceedings of the IECON 2018—44th Annual Conference of the IEEE Industrial Electronics Society, Washington, DC, USA.10.1109/IECON.2018.8591200 ↗
6. Colter, J., Kinnison, M., Henderson, A., Schlager, S.M., Bryan, S., O’Grady, K.L., Abballe, A., and Harbour, S. (2022, January 18–22). Testing the Resiliency of Consumer Off-the-Shelf Drones to a Variety of Cyberattack Methods. Proceedings of the 2022 IEEE/AIAA 41st Digital Avionics Systems Conference (DASC), Portsmouth, VA, USA.10.1109/DASC55683.2022.9925879 ↗
7. Buoy Sensor Cyberattack Detection in Offshore Petroleum Cyber-Physical Systems10.1109/TSC.2020.2964548 ↗
8. A Deep Learning-Based Cyberattack Detection System for Transmission Protective Relays10.1109/TSG.2020.3040361 ↗
9. Pazouki, S., Bibek, K.C., Alkhwaildi, H.A., and Asrari, A. (2021, January 11–13). Modelling of Smart Homes Affected by Cyberattacks. Proceedings of the 2020 52nd North American Power Symposium (NAPS), Tempe, AZ, USA.10.1109/NAPS50074.2021.9449777 ↗
10. Zhang, Y., Jiang, Y., Xu, A., Hong, C., and Chen, J. (2020, January 20–23). Method to Evaluate the Impact of Cyberattacks Against Charging Piles on Distribution Network. Proceedings of the 2020 12th IEEE PES Asia-Pacific Power and Energy Engineering Conference (APPEEC), Nanjing, China.10.1109/APPEEC48164.2020.9220574 ↗
11. Ransomware Attacks in Cyber-Physical Systems: Countermeasure of Attack Vectors Through Automated Web Defenses10.1109/ACCESS.2024.3477631 ↗
12. Targeted Ransomware: A New Cyber Threat to Edge System of Brownfield Industrial Internet of Things10.1109/JIOT.2019.2914390 ↗
13. Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems10.1109/JSYST.2022.3150576 ↗
14. Amer, E. (2023, January 15–16). Identification of Malware Mimicry Attacks Using Process Escalating Visualization. Proceedings of the 2023 Intelligent Methods, Systems, and Applications (IMSA), Giza, Egypt.10.1109/IMSA58542.2023.10217436 ↗
15. Devising and Detecting Phishing Emails Using Large Language Models10.1109/ACCESS.2024.3375882 ↗
16. Eth-PSD: A Machine Learning-Based Phishing Scam Detection Approach in Ethereum10.1109/ACCESS.2022.3220780 ↗
17. DIDDOS: An approach for detection and identification of Distributed Denial of Service (DDoS) cyberattacks using Gated Recurrent Units (GRU)10.1016/j.future.2021.01.022 ↗
18. DDoS Attack Detection Method Based on Improved KNN With the Degree of DDoS Attack in Software-Defined Networks10.1109/ACCESS.2019.2963077 ↗
19. Vulnerability Assessments of Induction Machine-Based Multistage Rolling Mill System Under Sensor Integrity Attacks10.1109/TII.2024.3370240 ↗
20. Dynamic manufacturing costs—Describing the dynamic behavior of downtimes from a cost perspective10.1016/j.cirpj.2012.09.003 ↗
21. Marusak, P., Nebeluk, R., Wojtulewicz, A., Cabaj, K., Chaber, P., Ławryńczuk, M., Plamowski, S., and Zarzycki, K. (2024). Efficient Cyberattack Detection Methods in Industrial Control Systems. Sensors, 24.10.3390/s24123860 ↗
22. Cyberattacks on Critical Infrastructure and Potential Sustainable Development Impacts10.4018/IJCWT.2015070101 ↗
23. Shakarian, P., Shakarian, J., and Ruef, A. (2013). Chapter 13—Attacking Iranian Nuclear Facilities: Stuxnet. Introduction to Cyber-Warfare, Syngress.10.1016/B978-0-12-407814-7.09987-5 ↗
24. Whitehead, D.E., Owens, K., Gammel, D., and Smith, J. (2017, January 3–6). Ukraine cyber-induced power outage: Analysis and practical mitigation strategies. Proceedings of the 2017 70th Annual Conference for Protective Relay Engineers (CPRE), College Station, TX, USA.10.1109/CPRE.2017.8090056 ↗
25. Cyber attacks on critical infrastructures and satellite communications10.1016/j.ijcip.2024.100701 ↗
26. Cyber Threats to Critical Infrastructure: Assessing Vulnerabilities Across Key Sectors
27. Safe mining operations through technological advancement10.1016/j.psep.2023.05.052 ↗
28. Cascade failure modeling and resilience analysis of mine cyber physical systems under deliberate attacks
29. Strojny, J., Krakowiak-Bal, A., Knaga, J., and Kacorzyk, P. (2023). Energy Security: A Conceptual Overview. Energies, 16.10.3390/en16135042 ↗
30. The obstacles and challenges of transition towards a renewable and sustainable energy system in Azerbaijan and Poland10.1007/s13563-021-00288-x ↗
31. Challenges of the Polish coal mining industry on its way to innovative and sustainable development10.1016/j.jclepro.2022.134061 ↗
32. A Comprehensive Review on Cyber-Attacks in Power Systems: Impact Analysis, Detection, and Cyber Security10.1109/ACCESS.2024.3361039 ↗
33. Deep Learning Strategies for Detecting and Mitigating Cyber-Attacks Targeting Water-Energy Nexus10.1109/ACCESS.2024.3458788 ↗
34. Methodology for Conducting a Study of the Vulnerability of PLC Control Algorithms to Cyber Attacks10.1109/ACCESS.2024.3461549 ↗
35. Hardware-in-Loop (HIL) Testbed Design of Thermal Power Plant for Threat Modeling and Attack Vector Analysis10.1016/j.ijcip.2024.100675 ↗
36. Implementation and development of an offline co-simulation testbed for studies of power systems cyber security and control verification10.1016/j.ijepes.2018.07.058 ↗
37. Eleftherios, E., Papatsaroucha, D., and Markakis, E.K. (2024, January 29–31). Leveraging Industrial IoT Infrastructure for Remote Sensing and Edge Computing in the Mining Sector. Proceedings of the 2024 5th International Conference in Electronic Engineering, Information Technology & Education (EEITE), Chania, Greece.10.1109/EEITE61750.2024.10654424 ↗
38. Bebikhov, Y., Podkamenniy, Y., Golikov, V., and Spiridonov, V. (2020, January 6–9). On the Issue of Complex Automation of Mining Operations in the Diamond Mining Industry. Proceedings of the 2020 International Multi-Conference on Industrial Engineering and Modern Technologies (FarEastCon), Vladivostok, Russia.10.1109/FarEastCon50210.2020.9271623 ↗
39. Mazur, D.C., Kay, J.A., and Mazur, K.D. (2014, January 5–9). Advancements in vibration monitoring for the mining industry. Proceedings of the 2014 IEEE Industry Application Society Annual Meeting, Vancouver, BC, Canada.10.1109/IAS.2014.6978459 ↗
40. Zhang, Z., Li, T., Chen, G., Xiao, Y., Li, M., Wang, J., Zhao, Y., and Sun, S. (2023, January 26–28). Research on 5G Network System Construction of Intelligent Open-pit Mine. Proceedings of the 2023 IEEE 3rd International Conference on Information Technology, Big Data and Artificial Intelligence (ICIBA), Chongqing, China.10.1109/ICIBA56860.2023.10165107 ↗
41. Cao, Y., Gao, S., Yu, Y., and Ma, X. (2023, January 6–8). Research on 5G Radio Access Network(RAN) Solution for Coal Mine Industry. Proceedings of the 2023 3rd International Conference on Consumer Electronics and Computer Engineering (ICCECE), Guangzhou, China.10.1109/ICCECE58074.2023.10135506 ↗
42. Zhao, P., and Guo, X. (2007, January 8–11). The Applications of The Industrial Ethernet Switching Technique in The Coalmine Field. Proceedings of the 2007 International Conference on Information Acquisition, Jeju City, Republic of Korea.10.1109/ICIA.2007.4295763 ↗
43. Luo, Y., Jiang, M., Sun, H., Zeng, T., and Effenberger, F. (2023, January 2–6). Industrial Passive Optical Network (PON) Applications in Smart Mining. Proceedings of the 2023 Opto-Electronics and Communications Conference (OECC), Shanghai, China.10.1109/OECC56963.2023.10209829 ↗
44. Wei, Y., Hu, J., Zhang, T., Jin, G., and Liu, T. (2017, January 8–10). Mine Laser Methane Sensor and Its Application Development. Proceedings of the 2017 2nd International Conference for Fibre-optic and Photonic Sensors for Industrial and Safety Applications (OFSIS), Brisbane, Australia.10.1109/OFSIS.2017.15 ↗
45. Aminossadati, S.M., and Amanzadeh, M. (August, January 31). Development of fibre-optic sensors for Australian mining industry. Proceedings of the 2017 Conference on Lasers and Electro-Optics Pacific Rim (CLEO-PR), Singapore.10.1109/CLEOPR.2017.8118988 ↗
46. Pan, F., Shi, H., and Duan, B. (August, January 31). Manufacturing Execution System present situation and development trend analysis. Proceedings of the 2015 IEEE International Conference on Information and Automation, Singapore.10.1109/ICInfA.2015.7279345 ↗
47. Câmara, R.A., Mamede, H.S., and Santos, V.D.d. (2019, January 23–25). Predictive Industrial Maintenance with a Viable Systems Model and Maintenance 4.0. Proceedings of the 2019 8th International Conference on Software Process Improvement (CIMPS), Leon, Mexico.10.1109/CIMPS49236.2019.9082435 ↗
48. Yubo, S., Gang, L., and Huaizhen, Y. (2010, January 24–26). Resolution to ERP system model of coalmine enterprise. Proceedings of the 2010 International Conference on Networking and Digital Society, Beijing, China.
49. Sishi, M.N., and Telukdarie, A. (2017, January 10–13). Implementation of industry 4.0 technologies in the mining industry: A case study. Proceedings of the 2017 IEEE International Conference on Industrial Engineering and Engineering Management (IEEM), Singapore.10.1109/IEEM.2017.8289880 ↗
50. Li, C., and Zhang, X. (2023, January 15–17). Operation Technology of Unmanned Mining Robot for Coal Mine Based on Intelligent Control Technology. Proceedings of the 2023 International Conference on Computer Simulation and Modeling, Information Security (CSMIS), Buenos Aires, Argentina.10.1109/CSMIS60634.2023.00021 ↗
51. Tian, B., Kou, Y., and Liu, Y. (2022, January 21–23). Design of Coal Mine Electrical Control System under Soft Start Technology. Proceedings of the 2022 3rd International Conference on Intelligent Design (ICID), Xi’an, China.10.1109/ICID57362.2022.9969708 ↗
52. Smirnova, D.O., and Skreblo, E.K. (2024, January 29–30). Comparative Analysis of Application of Artificial Intelligence, Neural Networks and Control Systems in the Mining Industry: Advantages, Limitations and Prospects. Proceedings of the 2024 Conference of Young Researchers in Electrical and Electronic Engineering (ElCon), Saint Petersburg, Russia.10.1109/ElCon61730.2024.10468306 ↗
53. Álvarez Tuñón, O., Rodríguez, A., Jardón, A., and Balaguer, C. (2018, January 1–5). Underwater Robot Navigation for Maintenance and Inspection of Flooded Mine Shafts. Proceedings of the 2018 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), Madrid, Spain.10.1109/IROS.2018.8594445 ↗
54. Engelbrecht, J., Theron, A., and Haupt, S. (2017, January 23–28). Evidence of roof collapse detected on South African coal mines using sentinel-1 interferometry. Proceedings of the 2017 IEEE International Geoscience and Remote Sensing Symposium (IGARSS), Fort Worth, TX, USA.10.1109/IGARSS.2017.8128297 ↗
55. Zhang, X., Tang, X., Li, T., Ji, Y., and Zhang, X. (2024, January 7–12). Multi-Temporal Monitoring and Analysis for Alxa Left Banner Open-Pit Mining Area Collapse Based on Lutan-1 SAR Satellites. Proceedings of the IGARSS 2024—2024 IEEE International Geoscience and Remote Sensing Symposium, Athens, Greece.10.1109/IGARSS53475.2024.10640707 ↗
56. (2024, October 01). Wireshark. Available online: https://www.wireshark.org/.
57. (2024, October 01). Tcpdump. Available online: https://www.tcpdump.org/.
58. Tusing, N., Oakley, J., Barrineau, G., Yu, L., Wang, K.C., and Brooks, R.R. (2019, January 8–10). Traffic Analysis Resistant Network (TARN) Anonymity Analysis. Proceedings of the 2019 IEEE 27th International Conference on Network Protocols (ICNP), Chicago, IL, USA.10.1109/ICNP.2019.8888134 ↗
59. (2024, October 01). Scapy. Available online: https://scapy.net/.
60. Rohith, R., Moharir, M., and Shobha, G. (2018, January 27–28). SCAPY- A powerful interactive packet manipulation program. Proceedings of the 2018 International Conference on Networking, Embedded and Wireless Systems (ICNEWS), Bangalore, India.
61. (2024, October 01). Ettercap. Available online: https://www.ettercap-project.org/.
62. Ning, B., Qiu, S., Zhao, T., and Li, Y. (November, January 30). Power IoT Attack Samples Generation and Detection Using Generative Adversarial Networks. Proceedings of the 2020 IEEE 4th Conference on Energy Internet and Energy System Integration (EI2), Wuhan, China.10.1109/EI250167.2020.9346661 ↗
63. Sun, W., Zhang, B., Ding, J., and Tang, M. (2022, January 19–21). MaskFuzzer: A MaskGAN-based Industrial Control Protocol Fuzz Testing Framework. Proceedings of the 2022 IEEE International Conference on Smart Internet of Things (SmartIoT), Suzhou, China.10.1109/SmartIoT55134.2022.00018 ↗
64. GAN Neural Networks Architectures for Testing Process Control Industrial Network Against Cyber-Attacks10.1109/ACCESS.2023.3277250 ↗
65. (2024, October 01). Tcpreplay. Available online: https://tcpreplay.appneta.com/.
66. (2024, October 01). Caldera. Available online: https://caldera.mitre.org/.
67. (2024, October 01). MITRE ATT&CK. Available online: https://attack.mitre.org/.
68. A systematic literature review on advanced persistent threat behaviors and its detection strategy10.1093/cybsec/tyad023 ↗
69. Zhao, J., Wang, Z., Lv, Y., Na, J., Liu, C., and Zhao, Z. (2024). Data-Driven Learning for H∞ Control of Adaptive Cruise Control Systems. IEEE Trans. Veh. Technol., 1–15. in press.10.1109/TVT.2024.3447060 ↗
70. Distributed real-time control architecture for electrohydraulic humanoid robots
71. Okulski, M., and Ławryńczuk, M. (2022). A Small UAV Optimized for Efficient Long-Range and VTOL Missions: An Experimental Tandem-Wing Quadplane Drone. Appl. Sci., 12.10.3390/app12147059 ↗