I recently had the privilege of joining an amazing group of cybersecurity professionals on a panel discussion organized by Mike Holcomb, Dylan Williams, Kate Johnson, Cooper Wilson, Tom Morgan, Tahmeed Khan, George A., Ahmed Al Saleh and of course Ezz who was the moderator.
Hands-On ICS Security – Using GRFICS for Practical Experience
Reposting a post from Manjunath Hiregange from GE Vernova (thanks Manjunath!).
Are you interested in learning more about industrial control system (ICS) security, but struggling to find practical training opportunities?
Look no further than GRFICS (Graphical Realism Framework for Industrial Control Simulations) – free and open-source framework.
๐๐ข๐ญ๐ก ๐๐๐ ๐๐๐, ๐ฒ๐จ๐ฎ ๐๐๐ง ๐ฏ๐ข๐ซ๐ญ๐ฎ๐๐ฅ๐ข๐ณ๐ ๐๐ง๐ญ๐ข๐ซ๐ ๐๐๐ ๐ง๐๐ญ๐ฐ๐จ๐ซ๐ค๐ฌ ๐๐ง๐ ๐ฉ๐ซ๐๐๐ญ๐ข๐๐ ๐๐ฑ๐ฉ๐ฅ๐จ๐ข๐ญ๐ข๐ง๐ ๐ฏ๐ฎ๐ฅ๐ง๐๐ซ๐๐๐ข๐ฅ๐ข๐ญ๐ข๐๐ฌ ๐ฐ๐ก๐ข๐ฅ๐ ๐ฌ๐๐๐ข๐ง๐ ๐ญ๐ก๐ ๐ฉ๐ก๐ฒ๐ฌ๐ข๐๐๐ฅ ๐ข๐ฆ๐ฉ๐๐๐ญ ๐ข๐ง ๐ 3๐ ๐ ๐๐ฆ๐ ๐๐ง๐ ๐ข๐ง๐.
The GRFICS framework is designed to virtualize entire ICS networks, including realistic ๐ฉ๐ก๐ฒ๐ฌ๐ข๐๐๐ฅ ๐ฉ๐ซ๐จ๐๐๐ฌ๐ฌ ๐ฌ๐ข๐ฆ๐ฎ๐ฅ๐๐ญ๐ข๐จ๐ง๐ฌ. While the initial version of GRFICS virtualizes a chemical process control network with a flat, un-segmented network architecture, the framework is modular and can be customized and expanded to include other types of ICS networks.
Here is a link to the 5 VMs: https://github.com/Fortiphyd/GRFICSv2
5 VirtualBox VMs (๐ 3๐ ๐ฌ๐ข๐ฆ๐ฎ๐ฅ๐๐ญ๐ข๐จ๐ง, ๐ ๐ฌ๐จ๐๐ญ ๐๐๐, ๐๐ง ๐๐๐, ๐ ๐ฉ๐๐ฌ๐๐ง๐ฌ๐ ๐๐ข๐ซ๐๐ฐ๐๐ฅ๐ฅ, ๐๐ง๐ ๐ ๐ฐ๐จ๐ซ๐ค๐ฌ๐ญ๐๐ญ๐ข๐จ๐ง) communicating with each other on host-only virtual networks.
A video series walking through VM setup and example attacks is available on the Fortiphyd YouTube channel at https://www.youtube.com/playlist?list=PL2RSrzaDx0R670yPlYPqM51guk3bQjFG5

Getting Started With An Allen Bradley Micro820 PLC
Hello All. During the last ICS Cybersecurity course I taught some of my students asked me to post some details about configuring an Allen Bradley Micro820 PLC. We use the Micro820 for our labs as it is great name-brand, low-cost PLC with onboard ethernet.ย Sells for around $400 (not including the power supply)

The Micro820 programmable logic controllers (PLC) includes a nano-sized footprint and is designed for small standalone machine control and remote automation applications that require flexible communications and I/O capabilities. These controllers support up to 36 I/O points with many embedded features such as Ethernet, microSD slot for recipe and data log, and analog I/O. Furthermore, all the software and documentation needed to configure the PLC as well as create some initial programs (e.g., ladder logic, structured text, and/or function blocks) is available for download off Rockwell’s website.
Rockwell Software (CCW)
If youโre just getting started, youโll need to install both RSLinx and Connected Components Workbench (CCW). RSLinx is installed automatically with CCW.ย Do a search for Connected Components Workbench (CCW) Standard Edition.
Visit Rockwell’s site: https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&refSoft=1&toggleState=&versions=57681
You will have to create an account and login to get access to the software.ย The simply download the software:

- IMPORTANT – if you are running Windows 10 or later (which you probably are), you will need to install .NET 3.5 or the install will not work. If you have issues installing .NET 3.5, then you may need a Windows 7 VM.
- Run the .exe file (part 1) as an administrator to extract the .rar files (part 2)
- Open the subdirectory that was created in part 9. It should contain a file named โsetup.exe.โ
- Run โsetup.exeโ as an administrator to install both RSLinx and CCW.
- Unless you need one of the language packs (Chinese, Portuguese, French, Italian, German, or Spanish), I recommend installing the components/features which are selected by default.
Wiring the PLC
There are lots of ways to wire a PLC, and I have no idea which way is best for you. The method presented here is what I call โPLC on a stick,โ which is exactly the way it sounds, except itโs a rail and not a stick (but you can still use it to point at people).
Think of PLC on a stick as being analogous to a microcontroller experimenter board. It works really well for the cubicle experimenter or electronics enthusiast, not so well for those in need of a legit control panel.
Before routing wires, itโs usually a good idea to put a little thought into the mechanical layout. I start with a piece of 35 mm DIN rail (say 12-18 inches) and then I find an arrangement that makes sense. For example:

Putting the power supply on the left makes sense to me because I like to visualize the input to the power supply on the left and the output on the right, but whatever works for you.
When I decide on a layout I start wiring stuff:

The terminal blocks provide a way to connect switches and indicators, but they arenโt necessary:

Connecting to the Micro820 for the first time (via Ethernet)
Ethernet is probably the simplest of the two methods, since you need only an Ethernet cable. These instructions assume youโre connecting to the Micro820 for the first time.
A new Micro820 will be configured for DHCP. This means all you have to do is ensure youโre network adapter is also configured for DHCP and then open RSLinx. RSLinx should to the rest.
- Power up the Micro820
- Use an Ethernet cable to connect the Micro820 to you Windows machine
- Open the โNetwork Connectionsโ screen (Control Panel > Network and Sharing Center > Change adapter settings).
- Right-click on the Ethernet adapter you used in step 2 and select โProperties.โ (If youโre not sure which adapter youโre using, just unplug the Ethernet cable and plug it back in. The adapterโs icon will change as you do so.)
- In the โLocal Area Connection Propertiesโ window, select โInternet Protocol Version 4 (TCP/IPv4)โ and click โProperties.โ

- Ensure โObtain an IP address automaticallyโ is selected.

- Click โOKโ to close the โInternet Protocol Version 4 (TCP/IPv4) Propertiesโ window.
- Click โCloseโ to close the โLocal Area Connection Propertiesโ window.
- To open RSLinx Classic Lite, hit the Windows key, type โrslinx,โ and press the Enter key.
- In the list on the left, expand the list item named โAB_ETHIP-1, Ethernet.โ
