NERD -- No Effort Rapid Development: A Framework for Provisioning Mobile Cloud Industrial Control Applications

PdGAT-ID: An intrusion detection method for industrial control systems based on periodic extraction and spatiotemporal graph attention

The rapid development of technology during the last decades has led to the integration of the network capabilities in the devices that are essential in the operation of Industrial Control Systems (ICS). Consequently, the attack surface of these assets has increased, putting at risk the nations that depend heavily on them for their continuity and functions. ICS physical and virtual testbeds are ideal platforms that can be used for cybersecurity research. Compared to physical testbeds, virtual testbeds are less expensive, safer to maintain, and more accessible, especially when access to research labs is restricted due to unforeseen circumstances such as COVID 19. Therefore, in this article, we propose VNWTS, a virtual water chlorination process for ICS cybersecurity analysis. VNWTS is composed of virtual components commonly found in physical ICS implementations. In addition, we implemented a set of attacks targeting the memory of the S7-1500 PLC and other VNWTS components such as level sensors, temperature sensors, and pumps. The results obtained from the experimentation phase show that the structure, configuration, and implementation of the VNWTS testbed can be used in ICS cybersecurity research.

In recent years, more and more researchers were contributed to the research for the security of ICS (Industrial Control System) with the emphasis on the safety of ICS. As a lure for attackers, honeypots provide the researchers with great assistance of industrial security research, and also plays a certain role in the protection of industrial system security. Honeypot is designed to a vulnerable system with the purpose of luring attackers to compromise it. Simultaneously, it also collects valuable data from attackers under the ground, then researchers will extract useful information from the data and then convert it to threat intelligence, which can be used to found attackers' behaviors or strategies and protect realistic systems. The honeypot for ICS need not only meet the needs of traditional information control technology, such as cost and maintainability, but also meet the needs of ICSs, such as timing and decision strategies. The research focuses on the design and implementation of high interactive honeypot for ICSs. It puts forward a method, which improves the interaction of the ICSs' honeypot from two aspects-HMI (Human Machine Interface) and industrial protocols' simulation. At the same time, we designed and implemented a virtual and high interactive honeypot and deployed it which is based on the improved conpot project to simulate SIEMENS S7-400 series' PLCs (Programmable Logic Controllers).

The development and integration of information technology and industrial control networks have expanded the magnitude of new data; detecting anomalies or discovering other valid information from them is of vital importance to the stable operation of industrial control systems. This paper proposes an incremental unsupervised anomaly detection method that can quickly analyze and process large-scale real-time data. Our evaluation on the Secure Water Treatment dataset shows that the method is converging to its offline counterpart for infinitely growing data streams.

The calibration of large-diameter flow meters is performed in the calibration station where real flow passes through. The typical calibration process is manipulated by human operators, which is time-consuming and easily affected. Since most of the process parameters are detectable, the smart calibration system was aided by the on-line modeling process and consisted of three parts: the digital twin model, the process controller, and the human-machine interface (HMI). The digital twin model was based on the basic partial differential equations of the gas flow in pipelines and was meant for the flow behavior prediction over short periods and provided decision-making assistance for human operators. The verification of the digital model was based on both the historical process data and the real-time process data. The process controller represented the manipulator meant to replace the human operator. The function of the controller included process control and calibration flow point adjustment. The HMI was designed based on the industrial supervisory control and data acquisition (SCADA) system. Since the process control was essential, the scheduling scheme and command sequence feedback to the SCADA system was rechecked by human operators via the HMI. The result of the active control was displayed in the HMI based on the digital twin model. Since smart control was the tendency in the piping system, the automated process verification and control formed the basis of the smart system. By entering the size and range of the flow meters into the HMI, the entire industrial system inside the calibration station was executed automatically.

Securing industrial control systems (ICS) or, for that matter, information technology (IT) systems is a never-ending battle. Cybersecurity subject matter experts secure their systems with the latest technology and threat actors develop new techniques to bypass these controls in a constant arms race of attack and defend, attack and defend. This single-minded focus on responding to the latest threat often causes ICS cybersecurity subject matter experts to forget what they are defending, which is controlling and protecting the process. To be more specific, the cyber protections should prevent a threat actor from issuing malicious control commands and/or ensuring that a threat actor does not stop legitimate commands from reaching their objectives. Unauthorised commands and the inability to issue commands have caused several high-profile impacts that resulted in significant damage in physical systems. This paper explores the relationship between cyber and physical systems by introducing a reference model that explains the cascading nature of impacts. While a cyberattack on an ICS originates in the cyber domain the most serious impacts occur in the physical domain. By understanding this concept, cybersecurity subject matter experts can make more targeted defensive measures in the cyber domain and add protections in the physical domain to significantly reduce ICS cyber risk.

In this paper, an integrated system to control and manage a state-of-the-art industrial computer numerical control (CNC) machine (Studer S33) using a commercially available tablet (Samsung Galaxy Tablet S2) is presented as a proof of concept (PoC) for the ubiquitous control of industrial machines. As a PoC, the proposed system provides useful insights to support the further development of full-fledged systems for Industrial Internet of Things (IIoT) applications. The proposed system allows for the quasi-decentralisation of the control architecture of conventional programmable logic controller (PLC)-based industrial control systems (ICSs) through data and information exchange over the transmission control protocol and the internet protocol (TCP/IP) suite using multiple agents. Based on the TCP/IP suite, a network device (Samsung Galaxy Tablet S2) and a process field net (PROFINET) device (Siemens Simatic S7-1200) are interfaced using a single-board computer (Raspberry Pi 4). An override system mainly comprising emergency stop and acknowledge buttons is also configured using the single-board computer. The input signals from the override system are transmitted to the PROFINET device (i.e., the industrial control unit (ICU)) over TCP/IP. A fully functional working prototype is realised as a PoC for an integrated system designated for the wireless and ubiquitous control of the CNC machine. The working prototype as an entity mainly comprises a mobile (handheld) touch-sensitive human-machine interface (HMI), a shielded single-board computer, and an override system, all fitted into a compact case with physical dimensions of 300 mm by 180 mm by 175 mm. To avert potential cyber attacks or threats to a reasonable extent and to guarantee the security of the PoC, a multi-factor authentication (MFA) including an administrative password and an IP address is implemented to control the access to the web-based ubiquitous HMI proffered by the PoC.

Nowadays, large number of cloud-based techniques have been used in industrial control systems (ICS), which also brings many security threats. The emergence of security-aware industrial control has paved the way of security-aware scheduling in cloud-based industrial applications. Actually, most cloud-based industrial applications are time sensitive, which need real-time processing. Edge cloud computing paradigm extends the computing ability of traditional cloud model with low-latency local resources. Thus, heterogeneous clouds that consist of both centralized resources and edge resources may be a promising resource model to provide both scalable and low-latency resources for cloud-based industrial applications. In view of these challenges, in this article, we propose a security-aware dynamic scheduling method for real-time resource allocation in ICS. First, a three-level security model is designed for both tasks and cloud resources in ICS, and a two-tier heterogeneous cloud architecture is introduced. Accordingly, a security-aware scheduling method based on distributed particle swarm optimization is presented for resource allocation with security concerns. To deal with the dynamics of edge resources and the mobility of mobile industrial applications, a dynamic scheduling mechanism based on dynamic workflow model is proposed for real-time optimization. Experimental results validate that the scheduling control policy proposed in this article can achieve a good balance between scheduling performance and security performance.

Automation control systems are pivotal in the advancement of Industry 4.0, especially within vocational school settings. Nevertheless, significant challenges arise due to the lack of adequate instructional tools, resulting in disparities among vocational schools across different regions. To address this issue, this study proposes the provision of trainer kits and the conduction of comprehensive training on Programmable Logic Controllers (PLC) and Human-Machine Interfaces (HMI) to bolster practical learning experiences. Moreover, the integration of the Problem-Based Learning (PBL) approach within vocational school curricula is deemed essential. The successful implementation of PBL at the Polman Negeri Babel campus serves as a model to be replicated among vocational school teachers, with the aim of enhancing student engagement and contributing to the development of basic technological solutions within the community.This community service initiative seeks to strengthen collaboration between vocational schools and higher vocational education institutions. The anticipated outcomes include the provision of instructional tools, such as trainer modules, and targeted training on PLC and HMI to facilitate practical learning. These efforts are intended to improve the competencies of both teachers and students in industrial automation control systems, thereby underscoring the critical role of higher vocational education institutions in the development of vocational schools. Evaluation of the initiative revealed high levels of perceived usefulness, with a rating of 92.5%, followed by the effectiveness of the delivery method at 86.88%, and the quality of training materials at 80.83%. These results highlight the significant impact and value of the provided training and resources.

Improper component management remains as a significant issue in modular construction, causing material loss, supply delays, defects from poor storage, lack of real-time monitoring and data inconsistencies. These challenges undermine the full potential of modular construction. With emerging technologies, the integration of Building Information Modelling (BIM) and Radio Frequency Identification (RFID) offers promising solutions. However, the extent to which RFID–BIM workflows have been studied and applied in modular construction remains unclear. To address this gap, this study conducts a systematic review using the PRISMA methodology, focusing on peer-reviewed publications up to 2025 indexed in Scopus and Web of Science, complemented by IEEE Xplore and full-text retrieval from ScienceDirect. All database searches were done and completed on 18 June 2025, to maintain consistency across data sources. Studies were selected based on predefined criteria, targeting those addressing RFID, BIM and modular construction workflows. In this study, workflow refers to the integrated process connecting both digital and physical domains. It includes the digital flow of information between RFID systems, BIM models and databases, alongside on-site tasks such as tagging, scanning, visualization, transport and assembly of prefabricated components. In accordance with these criteria, 27 articles were finalised for detailed review. A bibliometric analysis was undertaken using VOSviewer 1.6.20, encompassing keyword co-occurrence, co-authorship network, co-citation and bibliographic coupling analyses. Thematic analysis identified key themes on RFID–BIM practices, further organised across lifecycle phases to show how they unfold throughout the modular construction process. Quantitative analysis of thematic occurrences identified workflow integration (81.5%) as the most frequently addressed topic, followed by implementation requirements (40.7%), component management (37.0%), proven outcomes of BIM-RFID implementation (33.3%) and challenges of BIM-RFID implementation (14.8%).

The Industrial Control System (ICS) is a public facility that provides services to lots of users; thus, its security has always been a critical factor in measuring its availability. Recently, a new type of attack on ICS has occurred frequently, which realizes the extortion of users by invading the information domain and destroying the physical domain. However, due to the diversity and unavailability of an ICS control logic, the targets of such attacks are usually limited to PCs and servers, leaving more disruptive attack methods unexplored. To contribute more possible attack methods to strengthen the immunity of ICS, in this paper, we propose a novel ransomware attack method named Industrial Control System Automatic Ransomware Constructor (ICS-ARC). Compared to existing ICS ransomware, ICS-ARC can automatically generate an International Electrotechnical Commission (IEC) compliant payload to compromise the Programmable Logic Controller (PLC) without a pre-known control logic, dramatically reducing adversary requirements and leaving room for error. To evaluate the attack capability of ICS-ARC, we built a tap water treatment system as the simulation experiment target for verification. The experimental results determine that ICS-ARC can automatically generate malicious code without the control logic and complete the attack against target PLCs. In addition, to assist the related research on future attacks and defenses, we present the statistical results and corresponding analysis of PLC based on Shodan.

This paper deals with the problem of mission allocation for robot agents cooperating with human agents, in industrial application. RFID (Radio frequency identification) sensor platform is exploited to describe the environment state. Relevant information is available in RFID tags which are placed on objects and machines, and agents (robots or humans) types. The mission allocator receives the information from the RFID platform, and calculates the adequate sub-mission (set of sequential tasks) assigned to each agent. The robot agents execute the assigned tasks, organized through task planning strategy. The human agents perform the assigned sub-mission plans introduced via Human Machine Interfaces (HMIs). After the execution of each task by the agents, the environment state is updated. A general framework allowing mission distribution for robot and human agents is proposed in this article. The effectiveness of the proposed solution is tested in simulation with mobile manipulator agents in cooperation with a group of human agents.

Water level control and pressure control are implemented in many at several industrial processing such as water dam, petrochemical processing plant, pharmacy and food processing plant, overhead tank, waste processing plant, electricity plant, etc. This study analyses a simulation and a needed components for automatically water level control system implementation using programmable logic controller (PLC). The water level control using PLC is designed to control the water level and prevent waste the water from a water tank. PLC is one of devices of automated controller which mostly used. Use of PLCs in industries are indispensable to control parameters which required high precision. In this research studies water level control system using PLC as primary controller and human machine interface (HMI) as remote controller that could visualize state of a system work (plant) in real time on computer screen and could gather field data as well. Main device for this research is Omron PLC CP2E type and touchscreen HMI Omron. At the prototype is used a water tank and a water container (to be one with the water resource), and in the HMI is showed the pages of home, control panel, and plant. From the result of the diagram ladder and the HMI design are got the system run well. The application from this research could be learning media in the system control laboratory for the subject of industrial control system and the others, related to it.

GRU-Based Interpretable Multivariate Time Series Anomaly Detection in Industrial Control System

Evaluating the Impact of Cyberattacks on PLC Performance: A Systematic Implementation and Empirical Investigation