Hands-On ICS Security – Using GRFICS for Practical Experience

Reposting a post from Manjunath Hiregange from GE Vernova (thanks Manjunath!).

Are you interested in learning more about industrial control system (ICS) security, but struggling to find practical training opportunities?

Look no further than GRFICS (Graphical Realism Framework for Industrial Control Simulations) – free and open-source framework.

๐–๐ข๐ญ๐ก ๐†๐‘๐…๐ˆ๐‚๐’, ๐ฒ๐จ๐ฎ ๐œ๐š๐ง ๐ฏ๐ข๐ซ๐ญ๐ฎ๐š๐ฅ๐ข๐ณ๐ž ๐ž๐ง๐ญ๐ข๐ซ๐ž ๐ˆ๐‚๐’ ๐ง๐ž๐ญ๐ฐ๐จ๐ซ๐ค๐ฌ ๐š๐ง๐ ๐ฉ๐ซ๐š๐œ๐ญ๐ข๐œ๐ž ๐ž๐ฑ๐ฉ๐ฅ๐จ๐ข๐ญ๐ข๐ง๐  ๐ฏ๐ฎ๐ฅ๐ง๐ž๐ซ๐š๐›๐ข๐ฅ๐ข๐ญ๐ข๐ž๐ฌ ๐ฐ๐ก๐ข๐ฅ๐ž ๐ฌ๐ž๐ž๐ข๐ง๐  ๐ญ๐ก๐ž ๐ฉ๐ก๐ฒ๐ฌ๐ข๐œ๐š๐ฅ ๐ข๐ฆ๐ฉ๐š๐œ๐ญ ๐ข๐ง ๐š 3๐ƒ ๐ ๐š๐ฆ๐ž ๐ž๐ง๐ ๐ข๐ง๐ž.

The GRFICS framework is designed to virtualize entire ICS networks, including realistic ๐ฉ๐ก๐ฒ๐ฌ๐ข๐œ๐š๐ฅ ๐ฉ๐ซ๐จ๐œ๐ž๐ฌ๐ฌ ๐ฌ๐ข๐ฆ๐ฎ๐ฅ๐š๐ญ๐ข๐จ๐ง๐ฌ. While the initial version of GRFICS virtualizes a chemical process control network with a flat, un-segmented network architecture, the framework is modular and can be customized and expanded to include other types of ICS networks.

Here is a link to the 5 VMs: https://github.com/Fortiphyd/GRFICSv2
5 VirtualBox VMs (๐š 3๐ƒ ๐ฌ๐ข๐ฆ๐ฎ๐ฅ๐š๐ญ๐ข๐จ๐ง, ๐š ๐ฌ๐จ๐Ÿ๐ญ ๐๐‹๐‚, ๐š๐ง ๐‡๐Œ๐ˆ, ๐š ๐ฉ๐Ÿ๐ฌ๐ž๐ง๐ฌ๐ž ๐Ÿ๐ข๐ซ๐ž๐ฐ๐š๐ฅ๐ฅ, ๐š๐ง๐ ๐š ๐ฐ๐จ๐ซ๐ค๐ฌ๐ญ๐š๐ญ๐ข๐จ๐ง) communicating with each other on host-only virtual networks.

A video series walking through VM setup and example attacks is available on the Fortiphyd YouTube channel at https://www.youtube.com/playlist?list=PL2RSrzaDx0R670yPlYPqM51guk3bQjFG5

Comments are closed.