CISS: Critical Infrastructure Security Showdown 2019 is the third run of iTrust’s technology assessment exercise, dubbed the SWaT Security Showdown (S3) in 2016 and S317 and 2017. This year’s exercise is sponsored by the National Research Foundation.

The goal of this exercise is two-fold: (a) allow security researchers to empirically test industrial and academic defence mechanisms against skilled attackers; (b) allow ethical attackers and researchers to enhance their practical knowledge on a realistic Critical Infrastructure platform. Anonymised reports from S3 and S317 can be downloaded here and here

Event details

Venue: iTrust’s Secure Water Treatment (SWaT) testbed @ Singapore University of Technology and Design (SUTD)

Date: 26-30 Aug 2019 (Mon – Fri)

Time: 0900 – 1800 hrs, GMT +8

Details: A full set of guidelines (subject to changes) can be downloaded here (version 6; correct as at 19 Jul 2019; major editions in blue)*.

Participation (by invitation only)

Up to eight Red Teams and 10 Blue Teams will participate in this event. They will comprise teams from academia and industry, with up to 4 members representing each team. 

Programme

Prior to the event, the Blue Teams will set up and test their defence mechanisms at SWaT and where necessary, run for a few days to study the plant’s normal operating behaviour. All the defence mechanisms will operate simultaneously alongside iTrust’s own defence mechanisms before and during the exercise. Each Red Team will be given 4 hours to perform reconnaissance, design and execute their attacks.

The draft programme for the Exercise and the lead-up to it is as follows:

Date Time Activity & Attack Schedule Involvement
31 Jul (Wed) 18:00 Registration for Red & Blue Teams closes All Red & Blue Teams
1 – 2 Aug (Thurs – Fri)  14:00 – 18:00 Briefing for Blue Teams on SWaT and CloneHistorian (select one of two days) All Blue Teams
5 – 25 Aug 09:00 – 18:00 Setting up defence mechanisms in SWaT + learning plant behaviour (if applicable) All Blue Teams (3 working days each)
26 Aug

(Mon)

09:00 – 11:00 Session 1: Introduction to testbed + Q&A Red Teams 1 to 4 (non-mandatory)
11:00 – 13:00 Session 2: Introduction to testbed + Q&A Red Teams 5 to 8 (non-mandatory)
13:30 – 17:30 Attack by Red Team 1 Red Team 1
All Blue Teams
17:30 – 18:30 System recovery iTrust staff
27 Aug

(Tues)

09:00 – 13:00 Attack by Red Team 2 Red Team 2
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by Red Team 3 Red Team 3
All Blue Teams
28 Aug

(Wed)

09:00 – 13:00 Attack by Red Team 4 Red Team 4
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by Red Team 5 Red Team 5
All Blue Teams
29 Aug (Thurs) 09:00 – 13:00 Attack by Red Team 6 Red Team 6
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by Red Team 7 Red Team 7
All Blue Teams
30 Aug (Fri) 09:00 – 13:00 Attack by Red Team 8 Red Team 8
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Judging & scoring iTrust staff
18:00 – 20:00 Reception and results announcement All Red & Blue Teams

a
Setup Schedule for Blue Teams
To be announced.

Attack Schedule for Red Teams
To be announced.

Questions?
Please direct them to: itrust@sutd.edu.sg

*Version History
v2: 3 Jul 2019
v3: 4 Jul 2019
v4: 5 Jul 2019
v5: 9 Jul 2019