Votnet: hybrid simulation of virtual operational technology network for cybersecurity assessment

Cybersecurity assessment in automation requires a modeling and simulation framework to study the complex relationships between the cyber-based control mechanisms and the power systems. A real power system is not ideal for such an assessment due to potential disruption in operation. In this paper, we propose a simulation model of a virtual operational technology (OT) network in power system automation for cybersecurity assessment. The proposed simulation model is modularized with key components including power system and process, communication, automation, and enterprise network. We discuss Virtual OT Network (VOTNet), a specific instance of the model, in terms of simulated and emulated systems such as programmable logic controller, computing systems, control centers, and software. We evaluate VOTNet under two use cases: different attack scenarios and scalability vs. attack surface to study the impacts of cyber attacks. Particularly, unauthorized access, data manipulation in PLC, and denial of service in SCADA communication are demonstrated.