Process Control Security Requirements Forum (PCSRF)

NIST Industrial Control Security Testbed

Testbed Overview

NIST has developed a laboratory scale testbed comprised of several implementations of typical industrial control and networking equipment as well as relevant sensors and actuators. This testbed is being used to develop performance metrics and tests that can be applied to industrial control security products to determine if particular time-sensitive requirements can be met. These performance metrics pertain to real-time requirements for data transfer, such as minimal latency and timing jitter, and are not considered in traditional IT networks. Work being performed on this testbed includes the development of metrics and tests to evaluate the performance of industrial networking equipment as well as the development of tests for evaluating the effects of security implementations on the operation of industrial control systems.

IT Security for Industrial Control Systems: Requirements Specification and Performance Testing

NIST Process Control Security Testbed - Equipment List*

NIST Cybersecurity of Industrial Control Systems Testbed Presentation

Anti-virus software Performance Impact Testing

Development of guidelines and test procedures to help to minimize as well as measure the performance impacts caused by the addition of anti-virus software on ICS servers and workstations. This work is the result of a collaborative effort between NIST, the Department of Energy's National SCADA Test Bed at Sandia National Laboratories, and several industry organizations.

NIST Special Publication 1058, Using Host-Based Antivirus Software on Industrial Control Systems: Integration Guidance and a Test Methodology for Assessing Performance Impacts

Guidance and Performance Impact Testing to Support the use of Antivirus Software on SCADA and Industrial Control Systems, ISA(Joe Falco), October 2005 (Paper / Presentation)

NIST Funded GTI Performance Impact Testing

Cryptographic modules are being produced in accordance with cyber security standards and protocols being developed by the American Gas Association, AGA-12 committee. These modules are designed for placement in series between the RTU and MTU components of a SCADA system. The utility industries must understand how integration of these security components into SCADA systems affect data communication performance. To assist industry, NIST has contracted the Gas Technology Institute (GTI) to develop detailed test methods for evaluating the impact of cryptography on SCADA system communication performance. GTI is contracted to specify a test protocol, validate it in a laboratory setting, carry out field measurements, and analyze and publish the data.

Impact of Information Security Systems On Real-Time Process Control - Final Report

Testbed Contact

Joe Falco
National Institute of Standards and Technology
100 Bureau Drive, Stop 8230
Gaithersburg, MD 20899-8230

E-mail: falco@nist.gov
Voice: 301-975-3455
FAX: 301-990-9688

---

* No approval or endorsement of any commercial product by the National Institute of Standards and Technology is intended or implied. Certain commercial equipment, instruments, or materials are identified in this report in order to facilitate understanding. Such identification does not imply recommendation or endorsement by the National Institute of Standards and Technology, nor does it imply that the materials or equipment identified are necessarily the best available for the purpose.