The Third International
26 to 29 August 2019
The International CISS: Critical Infrastructure Security Showdown 2019 is the third run of iTrust’s technology assessment exercise, dubbed the SWaT Security Showdown (S3) in 2016 and S317 and 2017. This year’s exercise is sponsored by the National Research Foundation.
The goal of this exercise is two-fold: (a) allow security researchers to empirically test industrial and academic defence mechanisms against skilled attackers; (b) allow ethical attackers and researchers to enhance their practical knowledge on a realistic Critical Infrastructure platform. Anonymised reports from S3 and S317 can be downloaded here and here.
Post-event report
[2023] Please download the report here.Event details
Venue: iTrust’s Secure Water Treatment (SWaT) testbed @ Singapore University of Technology and Design (SUTD)
Date: 26 – 29 Aug 2019 (Mon – Fri)
Time: 0900 – 1800 hrs, GMT +8
Details: A full set of guidelines (subject to changes) can be downloaded here (version 11; correct as at 23 Aug 2019; major editions yellow highlighted)*.
Support for airfare and accommodation (Red Teams only)
Round-trip and most direct economy fare tickets for up to 2 registered members per team (booked by iTrust); and
Up to 5 nights’ accommodation (one twin room with breakfast) per team at Park Avenue Changi Hotel, which is about 10 mins’ walk to SUTD. The applicable dates are between 25 Aug 2019 and 29 Aug 2019 inclusive (“block out dates”).
Please refer to the guidelines for full details.
Participation (by invitation only)
Seven Red Teams and six Blue Teams will participate in this event. They comprise teams from academia and industry, as well as that from iTrust researchers, with up to 4 members representing each team. Registration has closed.
The Red Teams are:
- ABZB LLC (USA)
- CTF.SG (Singapore)
- Politecnico di Milano (Italy)
- Nara Institute of Science and Technology (Japan)
- NATO CCDCOE (Estonia)
- NSHC (Singapore)
- Researchers from iTrust:
- Yuqi Chen
- Francisco Furtado
- Beebi Siti Salimah Binte Liyakkathali
Programme (updated 23 Aug 2019)
Prior to the event, the Blue Teams will set up and test their defence mechanisms at SWaT and where necessary, run for a few days to study the plant’s normal operating behaviour. All the defence mechanisms will operate simultaneously alongside iTrust’s own defence mechanisms before and during the exercise. Each Red Team will be given 4 hours to perform reconnaissance, design and execute their attacks.
The programme for the Exercise and the lead-up activities to it are as follows:
| Date | Time | Activity & Attack Schedule | Involvement |
| 31 Jul (Wed) | 18:00 | Registration for Red & Blue Teams closes | All Red & Blue Teams |
| 1 – 2 Aug (Thurs – Fri) | 16:00 – 18:00 | Briefing for Blue Teams on SWaT and CloneHistorian (select one of two days) | All Blue Teams |
| 5 – 22 Aug | 09:00 – 18:00 | Setting up defence mechanisms in SWaT + learning plant behaviour (if applicable) | All Blue Teams (3 working days each) |
| 26 Aug
(Mon)
|
09:00 – 11:00 | Session 1: Introduction to testbed + Q&A | Red Teams (select one of two sessions; non-mandatory) |
| 12:00 – 14:00 | Session 2: Introduction to testbed + Q&A | Red Teams (select one of two sessions; non-mandatory) | |
| 27 Aug
(Tues) |
09:00 – 13:00 | Attack by CTF.SG | CTF.SG All Blue Teams |
| 13:00 – 14:00 | System recovery | iTrust staff | |
| 14:00 – 18:00 | Attack by NATO CCDCOE | NATO CCDCOE All Blue Teams |
|
| 28 Aug
(Wed) |
09:00 – 13:00 | Attack by Politecnico di Milano | Politecnico di Milano All Blue Teams |
| 13:00 – 14:00 | System recovery | iTrust staff | |
| 14:00 – 18:00 | Attack by NSHC | NSHC All Blue Teams |
|
| 29 Aug (Thurs) | 09:00 – 13:00 | Attack by iTrust Red Team | iTrust Red Team All Blue Teams |
| 13:00 – 14:00 | System recovery | iTrust staff | |
| 14:00 – 18:00 | Attack by NAIST | NAIST All Blue Teams |
|
| 30 Aug (Fri) | 09:00 – 13:00 | Attack by ABZB LLC | AZBZ LLC All Blue Teams |
| 13:00 – 13:30 | Judging & scoring | iTrust staff | |
| 13:30 – 15:00 | Reception and results announcement | All Red & Blue Teams |
a
Attack Schedule for Red Teams (updated 23 Aug 2019)
27 Aug (9am to 1pm): CTF.SG
27 Aug (2pm to 6pm): NATO CCDCOE
28 Aug (9am to 1pm): Politecnico di Milano
28 Aug (2pm to 6pm): NSHC
29 Aug (9am to 1pm): iTrust Red Team
29 Aug (2pm to 6pm): NAIST
30 Aug (9am to 1pm): ABZB LLC
Questions?
Please direct them to: itrust@sutd.edu.sg
*Version History
v2: 3 Jul 2019
v3: 4 Jul 2019
v4: 5 Jul 2019
v5: 9 Jul 2019
v6: 19 Jul 2019
v7: 23 Jul 2019
v8: 25 Jul 2019
v9: 5 Aug 2019
v10: 21 Aug 2019
Check out the Events Gallery for pictures of the event.