Categorization of cyber training environments for industrial control systems

Evan Plumley; Mason Rice; Stephen Dunlap; John Pecarina

doi:10.1007/978-3-319-70395-4_13

Categorization of cyber training environments for industrial control systems

Evan Plumley, Mason Rice, Stephen Dunlap, John Pecarina

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

5 Scopus citations

Abstract

First responders and professionals in hazardous occupations undergo intense training and evaluation to enable them to efficiently and effectively mitigate risk and damage. For example, helicopter pilots train with multiple simulations that increase in complexity before they fly real aircraft. However, in the industrial control systems domain, where incident response professionals help detect, respond and recover from cyber incidents, there is no official categorization of training environments, let alone training regimens. To address this gap, this chapter provides a categorization of industrial control training environments based on realism. Four levels of environments are proposed and mapped to Bloom’s Taxonomy. The categorization enables organizations to determine the cyber training environments that best align with their training needs and budgets.

Original language	English
Title of host publication	Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers
Editors	Sujeet Shenoi, Mason Rice
Publisher	Springer New York LLC
Pages	243-271
Number of pages	29
ISBN (Print)	9783319703947
DOIs	https://doi.org/10.1007/978-3-319-70395-4_13
State	Published - 2017
Externally published	Yes
Event	11th IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2017 - Arlington, United States Duration: Mar 13 2017 → Mar 15 2017

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	512
ISSN (Print)	1868-4238

Conference

Conference	11th IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2017
Country/Territory	United States
City	Arlington
Period	03/13/17 → 03/15/17

Funding

This research was partially supported by the U.S. Department of Homeland Security Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).

Funders	Funder number
U.S. Department of Homeland Security

Keywords

Incident response
Industrial control systems
Training environments

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1007/978-3-319-70395-4_13

Cite this

Plumley, E., Rice, M., Dunlap, S., & Pecarina, J. (2017). Categorization of cyber training environments for industrial control systems. In S. Shenoi, & M. Rice (Eds.), Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers (pp. 243-271). (IFIP Advances in Information and Communication Technology; Vol. 512). Springer New York LLC. https://doi.org/10.1007/978-3-319-70395-4_13

Plumley, Evan ; Rice, Mason ; Dunlap, Stephen et al. / Categorization of cyber training environments for industrial control systems. Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers. editor / Sujeet Shenoi ; Mason Rice. Springer New York LLC, 2017. pp. 243-271 (IFIP Advances in Information and Communication Technology).

@inproceedings{b643b80865d64c619ff52c6539a6605b,

title = "Categorization of cyber training environments for industrial control systems",

abstract = "First responders and professionals in hazardous occupations undergo intense training and evaluation to enable them to efficiently and effectively mitigate risk and damage. For example, helicopter pilots train with multiple simulations that increase in complexity before they fly real aircraft. However, in the industrial control systems domain, where incident response professionals help detect, respond and recover from cyber incidents, there is no official categorization of training environments, let alone training regimens. To address this gap, this chapter provides a categorization of industrial control training environments based on realism. Four levels of environments are proposed and mapped to Bloom{\textquoteright}s Taxonomy. The categorization enables organizations to determine the cyber training environments that best align with their training needs and budgets.",

keywords = "Incident response, Industrial control systems, Training environments",

author = "Evan Plumley and Mason Rice and Stephen Dunlap and John Pecarina",

note = "Publisher Copyright: {\textcopyright} IFIP International Federation for Information Processing 2017.; 11th IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2017 ; Conference date: 13-03-2017 Through 15-03-2017",

year = "2017",

doi = "10.1007/978-3-319-70395-4_13",

language = "English",

isbn = "9783319703947",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "243--271",

editor = "Sujeet Shenoi and Mason Rice",

booktitle = "Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers",

}

Plumley, E, Rice, M, Dunlap, S & Pecarina, J 2017, Categorization of cyber training environments for industrial control systems. in S Shenoi & M Rice (eds), Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers. IFIP Advances in Information and Communication Technology, vol. 512, Springer New York LLC, pp. 243-271, 11th IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2017, Arlington, United States, 03/13/17. https://doi.org/10.1007/978-3-319-70395-4_13

Categorization of cyber training environments for industrial control systems. / Plumley, Evan; Rice, Mason; Dunlap, Stephen et al.
Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers. ed. / Sujeet Shenoi; Mason Rice. Springer New York LLC, 2017. p. 243-271 (IFIP Advances in Information and Communication Technology; Vol. 512).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Categorization of cyber training environments for industrial control systems

AU - Plumley, Evan

AU - Rice, Mason

AU - Dunlap, Stephen

AU - Pecarina, John

N1 - Publisher Copyright: © IFIP International Federation for Information Processing 2017.

PY - 2017

Y1 - 2017

N2 - First responders and professionals in hazardous occupations undergo intense training and evaluation to enable them to efficiently and effectively mitigate risk and damage. For example, helicopter pilots train with multiple simulations that increase in complexity before they fly real aircraft. However, in the industrial control systems domain, where incident response professionals help detect, respond and recover from cyber incidents, there is no official categorization of training environments, let alone training regimens. To address this gap, this chapter provides a categorization of industrial control training environments based on realism. Four levels of environments are proposed and mapped to Bloom’s Taxonomy. The categorization enables organizations to determine the cyber training environments that best align with their training needs and budgets.

AB - First responders and professionals in hazardous occupations undergo intense training and evaluation to enable them to efficiently and effectively mitigate risk and damage. For example, helicopter pilots train with multiple simulations that increase in complexity before they fly real aircraft. However, in the industrial control systems domain, where incident response professionals help detect, respond and recover from cyber incidents, there is no official categorization of training environments, let alone training regimens. To address this gap, this chapter provides a categorization of industrial control training environments based on realism. Four levels of environments are proposed and mapped to Bloom’s Taxonomy. The categorization enables organizations to determine the cyber training environments that best align with their training needs and budgets.

KW - Incident response

KW - Industrial control systems

KW - Training environments

UR - http://www.scopus.com/inward/record.url?scp=85036618261&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-70395-4_13

DO - 10.1007/978-3-319-70395-4_13

M3 - Conference contribution

AN - SCOPUS:85036618261

SN - 9783319703947

T3 - IFIP Advances in Information and Communication Technology

SP - 243

EP - 271

BT - Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers

A2 - Shenoi, Sujeet

A2 - Rice, Mason

PB - Springer New York LLC

T2 - 11th IFIP WG 11.10 International Conference on Critical Infrastructure Protection, ICCIP 2017

Y2 - 13 March 2017 through 15 March 2017

ER -

Plumley E, Rice M, Dunlap S, Pecarina J. Categorization of cyber training environments for industrial control systems. In Shenoi S, Rice M, editors, Critical Infrastructure Protection XI - 11th IFIP WG 11.10 International Conference, ICCIP 2017, Revised Selected Papers. Springer New York LLC. 2017. p. 243-271. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-319-70395-4_13

Categorization of cyber training environments for industrial control systems

Abstract

Publication series

Conference

Funding

Keywords

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this