The Third International

26 to 29 August 2019

The International CISS: Critical Infrastructure Security Showdown 2019 is the third run of iTrust’s technology assessment exercise, dubbed the SWaT Security Showdown (S3) in 2016 and S317 and 2017. This year’s exercise is sponsored by the National Research Foundation.

The goal of this exercise is two-fold: (a) allow security researchers to empirically test industrial and academic defence mechanisms against skilled attackers; (b) allow ethical attackers and researchers to enhance their practical knowledge on a realistic Critical Infrastructure platform. Anonymised reports from S3 and S317 can be downloaded here and here

Post-event report

[2023] Please download the report here.

Event details

Venue: iTrust’s Secure Water Treatment (SWaT) testbed @ Singapore University of Technology and Design (SUTD)

Date: 26 – 29 Aug 2019 (Mon – Fri)

Time: 0900 – 1800 hrs, GMT +8

Details: A full set of guidelines (subject to changes) can be downloaded here (version 11; correct as at 23 Aug 2019; major editions yellow highlighted)*.

Support for airfare and accommodation (Red Teams only)

Round-trip and most direct economy fare tickets for up to 2 registered members per team (booked by iTrust); and

Up to 5 nights’ accommodation (one twin room with breakfast) per team at Park Avenue Changi Hotel, which is about 10 mins’ walk to SUTD. The applicable dates are between 25 Aug 2019 and 29 Aug 2019 inclusive (“block out dates”)

Please refer to the guidelines for full details.

Participation (by invitation only)

Seven Red Teams and six Blue Teams will participate in this event. They comprise teams from academia and industry, as well as that from iTrust researchers, with up to 4 members representing each team. Registration has closed. 

The Red Teams are:

  2. CTF.SG (Singapore)
  3. Politecnico di Milano (Italy)
  4. Nara Institute of Science and Technology (Japan)
  5. NATO CCDCOE (Estonia)
  6. NSHC (Singapore)
  7. Researchers from iTrust:
    1. Yuqi Chen
    2. Francisco Furtado
    3. Beebi Siti Salimah Binte Liyakkathali 

Programme (updated 23 Aug 2019)

Prior to the event, the Blue Teams will set up and test their defence mechanisms at SWaT and where necessary, run for a few days to study the plant’s normal operating behaviour. All the defence mechanisms will operate simultaneously alongside iTrust’s own defence mechanisms before and during the exercise. Each Red Team will be given 4 hours to perform reconnaissance, design and execute their attacks.

The programme for the Exercise and the lead-up activities to it are as follows:

Date Time Activity & Attack Schedule Involvement
31 Jul (Wed) 18:00 Registration for Red & Blue Teams closes All Red & Blue Teams
1 – 2 Aug (Thurs – Fri)  16:00 – 18:00 Briefing for Blue Teams on SWaT and CloneHistorian (select one of two days) All Blue Teams
5 – 22 Aug 09:00 – 18:00 Setting up defence mechanisms in SWaT + learning plant behaviour (if applicable) All Blue Teams (3 working days each)
26 Aug



09:00 – 11:00 Session 1: Introduction to testbed + Q&A Red Teams (select one of two sessions; non-mandatory)
12:00 – 14:00 Session 2: Introduction to testbed + Q&A Red Teams (select one of two sessions; non-mandatory)
27 Aug


09:00 – 13:00 Attack by CTF.SG CTF.SG
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by NATO CCDCOE NATO CCDCOE
All Blue Teams
28 Aug


09:00 – 13:00 Attack by Politecnico di Milano Politecnico di Milano
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by NSHC NSHC
All Blue Teams
29 Aug (Thurs) 09:00 – 13:00 Attack by iTrust Red Team iTrust Red Team
All Blue Teams
13:00 – 14:00 System recovery iTrust staff
14:00 – 18:00 Attack by NAIST NAIST
All Blue Teams
30 Aug (Fri) 09:00 – 13:00 Attack by ABZB LLC AZBZ LLC
All Blue Teams
13:00 – 13:30 Judging & scoring iTrust staff
13:30 – 15:00 Reception and results announcement All Red & Blue Teams

Attack Schedule for Red Teams (updated 23 Aug 2019)
27 Aug (9am to 1pm): CTF.SG 
27 Aug (2pm to 6pm): NATO CCDCOE
28 Aug (9am to 1pm): Politecnico di Milano
28 Aug (2pm to 6pm): NSHC
29 Aug (9am to 1pm): iTrust Red Team
29 Aug (2pm to 6pm): NAIST
30 Aug (9am to 1pm): ABZB LLC

Please direct them to:

*Version History
v2: 3 Jul 2019
v3: 4 Jul 2019
v4: 5 Jul 2019
v5: 9 Jul 2019
v6: 19 Jul 2019
v7: 23 Jul 2019
v8: 25 Jul 2019
v9: 5 Aug 2019
v10: 21 Aug 2019

Check out the Events Gallery for pictures of the event.