The Power of Hands-On Exercises in SCADA Cyber Security Education

Elena Sitnikova, Ernest Foo, Rayford B. Vaughn

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

17 Citations (Scopus)

Abstract

For decades Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS) have used computers to monitor and control physical processes in many critical industries, including electricity generation, gas pipelines, water distribution, waste treatment, communications and transportation. Increasingly these systems are interconnected with corporate networks via the Internet, making them vulnerable and exposed to the same risks as those experiencing cyber-attacks on a conventional network. Very often SCADA networks services are viewed as a specialty subject, more relevant to engineers than standard IT personnel. Educators from two Australian universities have recognised these cultural issues and highlighted the gap between specialists with SCADA systems engineering skills and the specialists in network security with IT background. This paper describes a learning approach designed to help students to bridge this gap, gain theoretical knowledge of SCADA systems' vulnerabilities to cyber-attacks via experiential learning and acquire practical skills through actively participating in hands-on exercises.

Original languageEnglish
Title of host publicationInformation Assurance and Security Education and Training
Subtitle of host publication8th IFIP WG 11.8 World Conference on Information Security Education WISE 8, Proceedings - WISE 7 and WISE 6, Revised Selected Papers
EditorsRonald C. Dodge Jr., Lynn Futcher
Pages83-94
Number of pages12
ISBN (Electronic)9783642393778
DOIs
Publication statusPublished - 2013
Externally publishedYes
Event8th IFIP WG 11.8 World Conference on Information Security Education, WISE 8 - Auckland, New Zealand
Duration: 8 Jul 201310 Jul 2013

Publication series

NameIFIP Advances in Information and Communication Technology
Volume406
ISSN (Print)1868-4238

Conference

Conference8th IFIP WG 11.8 World Conference on Information Security Education, WISE 8
Country/TerritoryNew Zealand
CityAuckland
Period8/07/1310/07/13

Keywords

  • Critical infrastructure
  • Curriculum
  • Cybersecurity
  • Experiential learning
  • Industrial control systems
  • Scada
  • Security laboratory

Fingerprint

Dive into the research topics of 'The Power of Hands-On Exercises in SCADA Cyber Security Education'. Together they form a unique fingerprint.

Cite this