Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper provides a comprehensive roadmap of existing datasets and testbeds for cybersecurity research in Industrial Control Systems (ICS), highlighting the critical challenges posed by the integration of Operational Technology (OT) and Information Technology (IT). It systematically analyzes various tools, revealing persistent issues such as the absence of standardized benchmarking datasets and modern attack scenarios, which hinder the development of effective cybersecurity solutions. The findings underscore the need for new tools and datasets to address these gaps and enhance the resilience of ICS against advanced cyber threats.
The lack of standardized datasets in ICS cybersecurity research is stifling innovation and effectiveness in defending against advanced cyber threats.
Industrial Control Systems (ICS) are the backbone of many critical infrastructure sectors; however, their growing level of connectivity, long lifespan and integration with the Information Technology (IT) environment introduces numerous cybersecurity challenges. The merging of Operational Technology (OT) and IT along with the deployment of Industry 4.0 technologies increases the attack surface of ICS environments, which in turn makes them more vulnerable to advanced cyber threats. Therefore, many researchers have shown interest in the field of cybersecurity of ICS. The topics of intrusion detection, anomaly detection, threat intelligence, attack simulation and resilience assessment of ICS have received much attention. Nevertheless, the development and testing of cybersecurity solutions for ICS remains to be challenging due to the lack of appropriate datasets and experimental environment. The main objective of this paper is to provide the roadmap of existing ICS cybersecurity datasets, testbeds and digital twins. This paper presents various taxonomies along with systematic analysis of architecture, characteristics, capabilities, pros and cons of these tools. The results of the analysis demonstrate the presence of persistent problems such as lack of standardized benchmarking datasets, lack of modern attack scenarios, insufficient number of datasets based on real operational traffic and difficulty in validating artificial intelligence-driven cybersecurity solutions. In addition to summarizing current research on ICS cybersecurity datasets and testbeds, this roadmap provides the identification of research gaps and recommendations on creation of new tools.