<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet href="client.xsl" type="text/xsl"?>
<article article-type="other">
<front>
<journal-meta>
<journal-id/>
<issn/>
<banner>
<href>banner.jpg</href>
<size width="100%"/>
</banner>
</journal-meta>
<doi>0528-cd</doi>
<article-meta>
<title-group>
<article-title>Establishing a Cybersecurity Centre for Industrial Control Systems</article-title>
</title-group>

<author>Vikash Katta<sup>1,a</sup>, Fabien Sechi<sup>1</sup>, Per-Arne J&#248;rgensen<sup>1</sup>, Stine Strand<sup>1</sup>, Per Axel Wiig<sup>1</sup>, John Eidar Simensen<sup>1</sup> and Siv Hilde Houmb<sup>2</sup></author>

<aff><sup>1</sup>Institute for Energy Technology, Halden, Norway</aff>

<email><a href="mailto:vikash.katta@ife.no"><sup>a</sup>vikash.katta@ife.no</a></email>

<aff><sup>2</sup>Secure-NOK AS, Hamar, Norway</aff>

<email><a href="mailto:sivhoumb@securenok.com">sivhoumb@securenok.com</a></email>

</article-meta></front>
<body>
<abstract>
<title>ABSTRACT</title>
<p>Studying cyber-attacks through cybersecurity exercises, testing and training is difficult to perform on operational critical infrastructure as this could disrupt the critical systems and harm the environment, lives and economy. Therefore, cybersecurity testbeds or ranges with capabilities for simulation, emulation and/or using real components are widely used to understand cyber-attacks and their impact on systems. This paper presents the Cybersecurity Centre being developed at the Institute for Energy Technology in Norway. The Centre aims to provide facilities for providing cybersecurity assessment and training services to stakeholders involved in developing and operating critical Industrial Control Systems (ICS) and Operational Technologies (OT). The Centre, among others, has: a highly configurable platform with real, simulated and emulated components of real-world critical infrastructure; tools for vulnerability assessment, RAMS (reliability, availability, maintainability, safety) assessment, attack injection, incident monitoring, detection and response; high-fidelity simulation technologies for cybersecurity and RAMS events prediction; support evaluation of human preparedness and decision-making during cybersecurity incident process and for operational safety. In this paper, we present the status of the development of the Centre and insights into an experiment being conducted.</p>
<p><italic>Keywords: </italic>Cybersecurity, Safety, Incident response, Security exercise, Industrial control systems, Simulation, Human preparedness.</p>
</abstract>
<fpdf>
<href>pdflogo.jpg</href>
<hpdf>0528</hpdf>
</fpdf>
</body>
</article>