Skip to content

Commit c888b2c

Browse files
committed
First version of the payload replay concealment
1 parent e2b6c96 commit c888b2c

File tree

11 files changed

+274
-0
lines changed

11 files changed

+274
-0
lines changed
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
inp_file: ctown_map.inp
2+
iterations: 2880
3+
network_topology_type: complex
4+
plcs: !include ctown_plcs.yaml
5+
log_level: debug
6+
simulator: epynet
7+
demand: pdd
8+
output_path: attack_output_06
9+
demand_patterns: events/demands_ctown_01.csv
10+
initial_tank_data: events/tanks_ctown_01.csv
11+
attacks: !include dataset_attacks/attack_06.yaml
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
inp_file: ctown_map.inp
2+
iterations: 2880
3+
network_topology_type: complex
4+
plcs: !include ctown_plcs.yaml
5+
log_level: debug
6+
simulator: epynet
7+
demand: pdd
8+
output_path: attack_output_07
9+
demand_patterns: events/demands_ctown_01.csv
10+
initial_tank_data: events/tanks_ctown_01.csv
11+
attacks: !include dataset_attacks/attack_07.yaml
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
inp_file: ctown_map.inp
2+
iterations: 2880
3+
network_topology_type: complex
4+
plcs: !include ctown_plcs.yaml
5+
log_level: debug
6+
simulator: epynet
7+
demand: pdd
8+
output_path: attack_output_08
9+
demand_patterns: events/demands_ctown_01.csv
10+
initial_tank_data: events/tanks_ctown_01.csv
11+
attacks: !include dataset_attacks/attack_08.yaml
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
inp_file: ctown_map.inp
2+
iterations: 2880
3+
network_topology_type: complex
4+
plcs: !include ctown_plcs.yaml
5+
log_level: debug
6+
simulator: epynet
7+
demand: pdd
8+
output_path: attack_output_09
9+
demand_patterns: events/demands_ctown_01.csv
10+
initial_tank_data: events/tanks_ctown_01.csv
11+
attacks: !include dataset_attacks/attack_09.yaml
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
inp_file: ctown_map.inp
2+
iterations: 2880
3+
network_topology_type: complex
4+
plcs: !include ctown_plcs.yaml
5+
log_level: debug
6+
simulator: epynet
7+
demand: pdd
8+
output_path: attack_output_10
9+
demand_patterns: events/demands_ctown_01.csv
10+
initial_tank_data: events/tanks_ctown_01.csv
11+
attacks: !include dataset_attacks/attack_10.yaml
Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
network_attacks:
2+
- name: plc5attack1
3+
type: concealment_mitm
4+
tags:
5+
- tag: PU10
6+
offset: 0.0
7+
- tag: PU11
8+
offset: 0.0
9+
- tag: PU10F
10+
offset: 0.0
11+
- tag: PU11F
12+
offset: 0.0
13+
target: PLC5
14+
concealment_data:
15+
type: payload_replay
16+
capture_start: 300
17+
capture_end: 672
18+
replay_start: 1440
19+
trigger:
20+
start: 295
21+
end: 1820
22+
type: time
23+
24+
- name: plc9attack
25+
type: concealment_mitm
26+
tags:
27+
- tag: T7
28+
offset: 0.0
29+
target: PLC9
30+
concealment_data:
31+
type: payload_replay
32+
capture_start: 300
33+
capture_end: 672
34+
replay_start: 1440
35+
trigger:
36+
start: 295
37+
end: 1820
38+
type: time
39+
40+
device_attacks:
41+
- actuator: PU10
42+
command: closed
43+
name: plc5attack2
44+
trigger:
45+
start: 1440
46+
end: 1812
47+
type: time
48+
- actuator: PU11
49+
command: closed
50+
name: plc5attack3
51+
trigger:
52+
start: 1440
53+
end: 1812
54+
type: time
Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
network_attacks:
2+
- name: plc5attack1
3+
type: concealment_mitm
4+
tags:
5+
- tag: PU10
6+
offset: 0.0
7+
- tag: PU11
8+
offset: 0.0
9+
- tag: PU10F
10+
offset: 0.0
11+
- tag: PU11F
12+
offset: 0.0
13+
target: PLC5
14+
concealment_data:
15+
type: network_replay
16+
capture_start: 300
17+
capture_end: 672
18+
replay_start: 1440
19+
trigger:
20+
start: 295
21+
end: 1820
22+
type: time
23+
24+
- name: plc9attack
25+
type: concealment_mitm
26+
tags:
27+
- tag: T7
28+
offset: 0.0
29+
target: PLC9
30+
concealment_data:
31+
type: network_replay
32+
capture_start: 300
33+
capture_end: 672
34+
replay_start: 1440
35+
trigger:
36+
start: 295
37+
end: 1820
38+
type: time
39+
40+
device_attacks:
41+
- actuator: PU10
42+
command: closed
43+
name: plc5attack2
44+
trigger:
45+
start: 1440
46+
end: 1812
47+
type: time
48+
- actuator: PU11
49+
command: closed
50+
name: plc5attack3
51+
trigger:
52+
start: 1440
53+
end: 1812
54+
type: time
Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
network_attacks:
2+
- name: plc9attack
3+
type: concealment_mitm
4+
tags:
5+
- tag: T7
6+
offset: 5.0
7+
target: PLC9
8+
concealment_data:
9+
type: payload_replay
10+
capture_start: 300
11+
capture_end: 672
12+
replay_start: 1440
13+
trigger:
14+
start: 295
15+
end: 1820
16+
type: time
17+
18+
- name: plc5attack
19+
type: concealment_mitm
20+
tags:
21+
- tag: PU10
22+
offset: 0.0
23+
- tag: PU11
24+
offset: 0.0
25+
- tag: PU10F
26+
offset: 0.0
27+
- tag: PU11F
28+
offset: 0.0
29+
target: PLC5
30+
concealment_data:
31+
type: payload_replay
32+
capture_start: 300
33+
capture_end: 672
34+
replay_start: 1440
35+
trigger:
36+
start: 295
37+
end: 1820
38+
type: time
Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
network_attacks:
2+
- name: plc9attack
3+
type: concealment_mitm
4+
tags:
5+
- tag: T7
6+
offset: 5.0
7+
target: PLC9
8+
concealment_data:
9+
type: network_replay
10+
capture_start: 300
11+
capture_end: 672
12+
replay_start: 1440
13+
trigger:
14+
start: 295
15+
end: 1820
16+
type: time
17+
18+
- name: plc5attack
19+
type: concealment_mitm
20+
tags:
21+
- tag: PU10
22+
offset: 0.0
23+
- tag: PU11
24+
offset: 0.0
25+
- tag: PU10F
26+
offset: 0.0
27+
- tag: PU11F
28+
offset: 0.0
29+
target: PLC5
30+
concealment_data:
31+
type: network_replay
32+
capture_start: 300
33+
capture_end: 672
34+
replay_start: 1440
35+
trigger:
36+
start: 295
37+
end: 1820
38+
type: time
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
network_attacks:
2+
- name: plc9attack
3+
type: mitm
4+
target: PLC9
5+
tag: T7
6+
offset: 4.5
7+
trigger:
8+
start: 1440
9+
end: 1812
10+
type: time
11+
12+
- name: plc9conceal
13+
type: unconstrained_blackbox_concealment_mitm
14+
trigger:
15+
start: 1440
16+
end: 1812
17+
type: time

0 commit comments

Comments
 (0)