Demystifying Cybersecurity Experiential Learning for Operational Technologies (OT) and Industrial Control Systems (ICS)

Cybersecurity of Operational Technologies (OT) and Industrial Control Systems (ICS) continue to be of great concern due to the inherent vulnerabilities of such technologies and the fact that OT/ICS are essential technologies that enable most critical infrastructures.Hence, this underscores the importance of proper training and education for OT/ICS cybersecurity.However, most technologies are costly and/or proprietary, further complicating educational efforts.This paper presents recent efforts at Texas A&M University, where a practical, accessible, and representative OT/ICS testbed was developed using a combination of low-cost and open-source technologies.The paper expands on the approach, tools, and examples of cybersecurity experiments that can be designed to enable OT/ICS cybersecurity training and education.