Abstract:This paper explores the objectives, tactics, and strategies for identifying, planning, conducting, and evaluating an international cyber-physical exercise (CPX). The goal of a CPX is to improve defense capabilities for defending national critical infrastructure via global coordination. Lessons about CPX have been derived from a series of annual cyber-physical defense exercises conducted since 2015, referred to as Critical Infrastructure Security Showdowns (CISS). The cyber range of a CISS consists of a realistic and operational enterprise network coupled to water treatment and distribution plants in the form of physical testbeds and digital twins. These systems simulate and integrate information technology (IT) and operational technology (OT) scenarios that are ubiquitous in modern-day critical infrastructure controlled by industrial control systems (ICS). Participants from the red, blue, green, and white teams are assigned specific roles to attack, defend, visualize, and manage the plant, respectively. Each of these roles is evaluated via a specific set of metrics by a panel of judges and automated systems. The scoring criteria incentivize the red teams to design and launch novel attacks to contribute to and improve the cybersecurity community’s knowledge base regarding offense and defense. The lessons distilled from these positive-sum games are analyzed and shared in the form of post-event reports.From 2015 to 2021, CISS has constantly evolved to mimic contemporary cyber-physical security scenarios in the real world. These evolutions have forced the CISS organizing team to adapt and design novel infrastructure to support the changing needs of the event and its stakeholders, from tooling, logistics, and network infrastructure to scoring criteria and cross-disciplinary collaboration.The cited reports on techniques, tactics, and procedures will be valuable to stakeholders from the military, industry, government, and academia.

Cyber-Physical War Gaming

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Game-Theoretic Model and Experimental Investigation of Cyber Wargaming

A Hybrid Game Theory and Reinforcement Learning Approach for Cyber-Physical Systems Security

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Cross‐layer Security Design for Encrypted CPS Based on Modified Security Signalling Game

A Game-Theoretic Method for Resilient Control Design in Industrial Multi-Agent CPSs with Markovian and Coupled Dynamics

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Cyber Physical Games

A Survey of Cyber-Physical Systems From a Game-Theoretic Perspective

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

The Design of Cyber-Physical Exercises (CPXS)

Cyber Game-Based Learning for DoD CEs

A Game-Theoretic Approach to Secure Estimation and Control for Cyber-Physical Systems with a Digital Twin

Dynamic Games in Cyber-Physical Security: An Overview

Cyberwar Strategy and Tactics: An Analysis of Cyber Goals, Strategies, Tactics, and Techniques

Cross-Layer Coordinated Attacks on Cyber-Physical Systems: A LQG Game Framework with Controlled Observations

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

Bayesian and Stochastic Game Joint Approach for Cross-Layer Optimal Defensive Decision-Making in Industrial Cyber-Physical Systems

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems