Experience and Lessons in Building an ICS Security Testbed

Industrial control systems (ICS) control and monitor critical infrastructure, and if ICS security incidents occur, it will cause serious losses, and its security issues are gradually being taken seriously. Developing security testbed is an important part of ICS security research. However, the construction of ICS security testbed is a costly, labor intensive, and requires the cooperation of different professionals in the IT and automation fields. There is little literature on the experience and lessons learned in this field. We have developed a Multiple Scenarios Industrial Control System Testbed (MSICST). Based on the introduction of the architecture of MSICST, this paper focuses on several experience and lessons learned in building an ICS security testbed.