Skip to content

Commit

Permalink
First version of the payload replay concealment
Browse files Browse the repository at this point in the history
  • Loading branch information
afmurillo committed Jan 19, 2023
1 parent e2b6c96 commit c888b2c
Show file tree
Hide file tree
Showing 11 changed files with 274 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
inp_file: ctown_map.inp
iterations: 2880
network_topology_type: complex
plcs: !include ctown_plcs.yaml
log_level: debug
simulator: epynet
demand: pdd
output_path: attack_output_06
demand_patterns: events/demands_ctown_01.csv
initial_tank_data: events/tanks_ctown_01.csv
attacks: !include dataset_attacks/attack_06.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
inp_file: ctown_map.inp
iterations: 2880
network_topology_type: complex
plcs: !include ctown_plcs.yaml
log_level: debug
simulator: epynet
demand: pdd
output_path: attack_output_07
demand_patterns: events/demands_ctown_01.csv
initial_tank_data: events/tanks_ctown_01.csv
attacks: !include dataset_attacks/attack_07.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
inp_file: ctown_map.inp
iterations: 2880
network_topology_type: complex
plcs: !include ctown_plcs.yaml
log_level: debug
simulator: epynet
demand: pdd
output_path: attack_output_08
demand_patterns: events/demands_ctown_01.csv
initial_tank_data: events/tanks_ctown_01.csv
attacks: !include dataset_attacks/attack_08.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
inp_file: ctown_map.inp
iterations: 2880
network_topology_type: complex
plcs: !include ctown_plcs.yaml
log_level: debug
simulator: epynet
demand: pdd
output_path: attack_output_09
demand_patterns: events/demands_ctown_01.csv
initial_tank_data: events/tanks_ctown_01.csv
attacks: !include dataset_attacks/attack_09.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
inp_file: ctown_map.inp
iterations: 2880
network_topology_type: complex
plcs: !include ctown_plcs.yaml
log_level: debug
simulator: epynet
demand: pdd
output_path: attack_output_10
demand_patterns: events/demands_ctown_01.csv
initial_tank_data: events/tanks_ctown_01.csv
attacks: !include dataset_attacks/attack_10.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
network_attacks:
- name: plc5attack1
type: concealment_mitm
tags:
- tag: PU10
offset: 0.0
- tag: PU11
offset: 0.0
- tag: PU10F
offset: 0.0
- tag: PU11F
offset: 0.0
target: PLC5
concealment_data:
type: payload_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

- name: plc9attack
type: concealment_mitm
tags:
- tag: T7
offset: 0.0
target: PLC9
concealment_data:
type: payload_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

device_attacks:
- actuator: PU10
command: closed
name: plc5attack2
trigger:
start: 1440
end: 1812
type: time
- actuator: PU11
command: closed
name: plc5attack3
trigger:
start: 1440
end: 1812
type: time
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
network_attacks:
- name: plc5attack1
type: concealment_mitm
tags:
- tag: PU10
offset: 0.0
- tag: PU11
offset: 0.0
- tag: PU10F
offset: 0.0
- tag: PU11F
offset: 0.0
target: PLC5
concealment_data:
type: network_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

- name: plc9attack
type: concealment_mitm
tags:
- tag: T7
offset: 0.0
target: PLC9
concealment_data:
type: network_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

device_attacks:
- actuator: PU10
command: closed
name: plc5attack2
trigger:
start: 1440
end: 1812
type: time
- actuator: PU11
command: closed
name: plc5attack3
trigger:
start: 1440
end: 1812
type: time
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
network_attacks:
- name: plc9attack
type: concealment_mitm
tags:
- tag: T7
offset: 5.0
target: PLC9
concealment_data:
type: payload_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

- name: plc5attack
type: concealment_mitm
tags:
- tag: PU10
offset: 0.0
- tag: PU11
offset: 0.0
- tag: PU10F
offset: 0.0
- tag: PU11F
offset: 0.0
target: PLC5
concealment_data:
type: payload_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
network_attacks:
- name: plc9attack
type: concealment_mitm
tags:
- tag: T7
offset: 5.0
target: PLC9
concealment_data:
type: network_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time

- name: plc5attack
type: concealment_mitm
tags:
- tag: PU10
offset: 0.0
- tag: PU11
offset: 0.0
- tag: PU10F
offset: 0.0
- tag: PU11F
offset: 0.0
target: PLC5
concealment_data:
type: network_replay
capture_start: 300
capture_end: 672
replay_start: 1440
trigger:
start: 295
end: 1820
type: time
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
network_attacks:
- name: plc9attack
type: mitm
target: PLC9
tag: T7
offset: 4.5
trigger:
start: 1440
end: 1812
type: time

- name: plc9conceal
type: unconstrained_blackbox_concealment_mitm
trigger:
start: 1440
end: 1812
type: time
18 changes: 18 additions & 0 deletions examples/example/example_attack.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
network_attacks:
- name: plc4attack
type: concealment_mitm
tags:
- tag: T3
offset: 10.0
- tag: T4
offset: 10.0
target: PLC4
concealment_data:
type: payload_replay
capture_start: 10
capture_end: 20
replay_start: 30
trigger:
start: 10
end: 50
type: time

0 comments on commit c888b2c

Please sign in to comment.