Hussain, M. M., & Basumallik, S., & Srivastava, A. K., & Hefeida, M. (2023, March), Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed  Paper presented at 2023 ASEE North Central Section Conference, Morgantown, West Virginia. 10.18260/1-2--44898

\bibitem{asee_peer_44898}
  Hussain, M. M., \& Basumallik, S., \& Srivastava, A. K., \& Hefeida, M. (2023, March), \emph{Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed}
  Paper presented at 2023 ASEE North Central Section Conference, Morgantown, West Virginia.
  10.18260/1-2--44898

Mohammed Mustafa Hussain, Sagnik Basumallik, Anurag K. Srivastava, and Mohamed Hefeida.  "Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed".  2023 ASEE North Central Section Conference, Morgantown, West Virginia, 2023, March.  ASEE Conferences, 2023.  https://peer.asee.org/44898 Internet.  20 May, 2024

\bibitem{asee_peer_44898}
  Mohammed Mustafa Hussain, Sagnik Basumallik, Anurag K. Srivastava, and Mohamed Hefeida.
  "Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed".
  \emph{2023 ASEE North Central Section Conference, Morgantown, West Virginia, 2023, March}.
  ASEE Conferences, 2023.
  https://peer.asee.org/44898 Internet.  20 May, 2024

@INPROCEEDINGS{asee_peer_44898
author = "Mohammed Mustafa Hussain, Sagnik Basumallik, Anurag K. Srivastava, and Mohamed Hefeida"
title = "Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed"
booktitle = "2023 ASEE North Central Section Conference"
year = "2023"
month = "March"
address = "Morgantown, West Virginia"
publisher = "ASEE Conferences"
note = {https://peer.asee.org/44898}
number = {10.18260/1-2--44898}
}

TY  - CPAPER
AB  - This paper discusses efforts to develop a real time cyber-physical security testbed for hands-on
training and education of undergraduate students. Developed cybersecurity testbed has been used
for a course and senior capstone project. The testbed helps the students to specifically focus on cyber
threats against critical electricity infrastructures and develop appropriate defense mechanisms
by utilizing MITRE ATT&CK adversary emulation techniques, NERC CIP compliance and NIST
Cybersecurity Framework. To mimic a realistic power substation network, we have developed a
three-tier architecture through a mix of simulation, emulation, and actual hardware implementation,
consisting of the power system substation, communication network, and control center layer.
The substation layer enables the student to integrate components including generation, electric bus
bars, switches, transformers and distributed energy resources such as solar, wind, and large scale
battery. Here, multiple industry-graded sensors and actuators have been integrated to capture realtime
voltage and current measurements and enable remote control and protection schemes. This
helps students to get acquainted with different industrial automation standards and protocols such
as IEC 61850, DNP3, and Modbus. The communication network layer, consisting of a combination
of Software Defined Networking (SDN) and traditional networking, allows the student to
focus on state-of-the-art network technology paradigms, features, and how they are involved in
exchanging end-to-end power system data. At the control center layer, the students are able to capture
and visualize the cyber and power data from multiple sources and develop machine learningbased
anomaly detection, classification, and localization tools to improve cyber power resiliency.
Industry-standard Security Information and Event Management (SIEM) tools such as Splunk and
Intrusion Detection Systems (IDS) are used to train students to detect, defend and analyze coordinated
cyber attacks. The hardware-in-the-loop learning ecosystem lets the students perform
red-team, blue-team, and purple-team exercises for power systems following cybersecurity standards,
guidelines, and related frameworks. As an outcome, the students develop an understanding
of cyber security concepts such as digital forensics, incident response, and reverse engineering
related to the smart grid, and design steps to keep it secured. Overall, our approach advances the
cybersecurity profession and helps develop a robust talent pipeline to meet the increasing demand
for cybersecurity jobs that affect national security.
AU  - Mohammed Mustafa Hussain
AU  - Sagnik Basumallik
AU  - Anurag K. Srivastava
AU  - Mohamed Hefeida
CY  - Morgantown, West Virginia
DA  - 2023/03/24
PB  - ASEE Conferences
TI  - Teaching Critical Infrastructure Cyber Security to Undergraduate Students using Real-Time Hardware-in-the-Loop Cyber-Power Testbed
UR  - https://peer.asee.org/44898
DO  - 10.18260/1-2--44898
ER  -