ICS Basics Scenario

​​​​​This collection of resources, from the Cybersecurity Education for Advanced Manufacturing Organizations project, is a part of the Industrial Control Systems Basics Scenario. This scenario is a training module that provides background on industrial networking protocols and their security concerns. Throughout the scenario, the following three protocols are analyzed in detail: Modbus TCP/IP, PROFINET/S7, and Ethernet/IP.

Collection Contents:

This scenario includes a PowerPoint presentation, practices for learning, a scenario overview, lab instructions, lab questions and answers, and a document with a link to four corresponding video lessons. The presentation starts by summarizing the history and purpose of industrial network protocols, then discusses the "basics and security concerns associated with Modbus TCP/IP, PROFINET/S7, and Ethernet/IP." Finally, the presentation goes over "common security tools to examine industrial protocols in action."

The 2-page scenario overview includes a summary of the scenario, learning outcomes, a list of systems used, a description of the general lab, a diagram of setup and deploy, and a list of resources for more information. PDF and Word copies are included.

The 37-page lab includes a scenario overview, lab setup information, and lab instructions. In the lab, students will use a Human Machine Interface (HMI) system to control and configure an ICS. Next, they will use Wireshark to monitor the typical Modbus/TCP traffic while the ICS is functioning. Additionally, students will use Metaspoilt to check the security of the Modbus protocol and use Wireshark to view S7 traffic generated by Seimens equipment. The lab is split into six parts. PDF and Word copies are included.

The lab form includes five questions requiring either written responses or screenshots of Wireshark. A 4-page answer sheet is also provided. Both documents include PDF and Word copies.

The learning standards and best practices document includes best practices for data security education. PDF and Word copies are included.

For orientation purposes the IndustrialNetworkingBasics-Overview.pdf is included as a separate attachment and offers a sample of the type of material included in this learning module.

Below is a list of the files contained within the .zip attachment. The size of each file is included in parenthesis.

ics-basics-ate (14 files, 24.1 MB)

• ICS Basics NIST Standards and other best practices (IndustrialNetworkingBasics-BestPractices.docx 13 KB)
• ICS Basics NIST Standards and other best practices (IndustrialNetworkingBasics-BestPractices.pdf 71 KB)
• ICS Basics Lab Form (IndustrialNetworkingBasics-Lab-Answers.doc 1.63 MB)
• ICS Basics Lab Form (IndustrialNetworkingBasics-Lab-Answers.pdf 862 KB)
• ICS Basics Lab Form (IndustrialNetworkingBasics-Lab-Form.doc 45 KB)
• ICS Basics Lab Form (IndustrialNetworkingBasics-Lab-Form.pdf 88 KB)
• Industrial Networking Basics (IndustrialNetworkingBasics-Overview.doc 1 MB)
• Industrial Networking Basics (IndustrialNetworkingBasics-Overview.pdf 222 MB)
• Video Links (IndustrialNetworkingBasics-Videos.docx 14 KB)
• Video Links (IndustrialNetworkingBasics-Videos.pdf 21 KB)
• ICS Security - Basics (IndustrialNetworkingBasics-Background.pdf 1.86 MB)
• ICS Security - Basics (IndustrialNetworkingBasics-Background.ppt 10.5 MB)
• Lab 1 (IndustrialNetworkingBasics-Basics-Lab.doc 5.10 MB)
• Lab 1 (IndustrialNetworkingBasics-Basics-Lab.pdf 2.68)