{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,28]],"date-time":"2026-07-28T19:12:05Z","timestamp":1785265925734,"version":"3.55.0"},"reference-count":31,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2024,1,25]],"date-time":"2024-01-25T00:00:00Z","timestamp":1706140800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,1,25]],"date-time":"2024-01-25T00:00:00Z","timestamp":1706140800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Department of Education, Language Policy, and Culture, Basque Government","award":["IT1676-22"],"award-info":[{"award-number":["IT1676-22"]}]},{"name":"Department of Economic Development, Sustainability, and Environment, Basque Government","award":["2023RTE00242510"],"award-info":[{"award-number":["2023RTE00242510"]}]},{"name":"Gipuzkoa Science, Technology, and Innovation Network","award":["2022-CIEN-000065-01"],"award-info":[{"award-number":["2022-CIEN-000065-01"]}]},{"name":"Department of Education, Language Policy, and Culture, Basque Government","award":["IT1676-22"],"award-info":[{"award-number":["IT1676-22"]}]},{"name":"Department of Economic Development, Sustainability, and Environment, Basque Governmen","award":["2023RTE00242510"],"award-info":[{"award-number":["2023RTE00242510"]}]},{"name":"Gipuzkoa Science, Technology, and Innovation Network","award":["2022-CIEN-000065-01"],"award-info":[{"award-number":["2022-CIEN-000065-01"]}]},{"name":"Department of Education, Language Policy, and Culture, Basque Government","award":["IT1676-22"],"award-info":[{"award-number":["IT1676-22"]}]},{"name":"Department of Economic Development, Sustainability, and Environment, Basque Governmen","award":["2023RTE00242510"],"award-info":[{"award-number":["2023RTE00242510"]}]},{"name":"Gipuzkoa Science, Technology, and Innovation Network","award":["2022-CIEN-000065-01"],"award-info":[{"award-number":["2022-CIEN-000065-01"]}]},{"name":"Department of Education, Language Policy, and Culture, Basque Government","award":["IT1676-22"],"award-info":[{"award-number":["IT1676-22"]}]},{"name":"Department of Economic Development, Sustainability, and Environment, Basque Government","award":["2023RTE00242510"],"award-info":[{"award-number":["2023RTE00242510"]}]},{"name":"Gipuzkoa Science, Technology, and Innovation Network","award":["2022-CIEN-000065-01"],"award-info":[{"award-number":["2022-CIEN-000065-01"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Wireless Netw"],"published-print":{"date-parts":[[2024,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Software-Defined Networking (SDN) offers a global view over the network and the ability of centrally and dynamically managing network flows, making them ideal for creating security threat detection and mitigation solutions. Industrial networks possess specific characteristics that make them well-suited for such solutions, leading to extensive research efforts in this area. However, due to the high economic cost and potential risks associated with real equipment interaction, most studies rely on testbeds for demonstration purposes. Therefore, it becomes crucial to understand the limitations and safe operating ranges of testbed environments to ensure the development of scientifically rigorous experiments and accurate result measurements. This study focuses on analyzing MiniCPS-based testbeds in terms of network performance, experiment replicability, and the effects of different attacker implementation modes. The findings demonstrate that utilizing MiniCPS on actual hardware enables the development of highly replicable and high-performance testbeds, as long as they operate within the predefined safe operating ranges. Additionally, this work provides an in-depth analysis of various attacker implementation techniques and their impact on the network.<\/jats:p>","DOI":"10.1007\/s11276-023-03647-4","type":"journal-article","created":{"date-parts":[[2024,1,25]],"date-time":"2024-01-25T13:50:43Z","timestamp":1706190643000},"page":"7377-7390","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["On the use of MiniCPS for conducting rigorous security experiments in Software-Defined Industrial Control Systems"],"prefix":"10.1007","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8241-7453","authenticated-orcid":false,"given":"Xabier","family":"Etxezarreta","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0387-9167","authenticated-orcid":false,"given":"I\u00f1aki","family":"Garitano","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9641-5646","authenticated-orcid":false,"given":"Mikel","family":"Iturbe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3720-6048","authenticated-orcid":false,"given":"Urko","family":"Zurutuza","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,1,25]]},"reference":[{"key":"3647_CR1","doi-asserted-by":"crossref","unstructured":"Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., & Lightman, S. (2023). Guide to operational technology (ot) security. National Institute of Standards and Technology: Gaithersburg, MD, USA.","DOI":"10.6028\/NIST.SP.800-82r3"},{"issue":"4","key":"3647_CR2","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1109\/MDAT.2017.2709310","volume":"34","author":"J Giraldo","year":"2017","unstructured":"Giraldo, J., Sarkar, E., Cardenas, A. A., Maniatakos, M., & Kantarcioglu, M. (2017). Security and privacy in cyber-physical systems: A survey of surveys. IEEE Design & Test, 34(4), 7\u201317. https:\/\/doi.org\/10.1109\/MDAT.2017.2709310","journal-title":"IEEE Design & Test"},{"key":"3647_CR3","unstructured":"Dragos: 2022 ics\/ot cybersecurity year in review. Technical report (2022)"},{"key":"3647_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.comcom.2020.03.007","volume":"155","author":"T Alladi","year":"2020","unstructured":"Alladi, T., Chamola, V., & Zeadally, S. (2020). Industrial control systems: Cyberattack trends and countermeasures. Computer Communications, 155, 1\u20138. https:\/\/doi.org\/10.1016\/j.comcom.2020.03.007","journal-title":"Computer Communications"},{"issue":"1","key":"3647_CR5","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1109\/TDSC.2015.2509994","volume":"15","author":"A Nourian","year":"2018","unstructured":"Nourian, A., & Madnick, S. (2018). A systems theoretic approach to the security threats in cyber physical systems applied to stuxnet. IEEE Transactions on Dependable and Secure Computing, 15(1), 2\u201313. https:\/\/doi.org\/10.1109\/TDSC.2015.2509994","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"3647_CR6","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1016\/j.epsr.2017.04.023","volume":"149","author":"Y Xiang","year":"2017","unstructured":"Xiang, Y., Wang, L., & Liu, N. (2017). Coordinated attacks on electric power systems in a cyber-physical environment. Electric Power Systems Research, 149, 156\u2013168. https:\/\/doi.org\/10.1016\/j.epsr.2017.04.023","journal-title":"Electric Power Systems Research"},{"key":"3647_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.compind.2018.04.015","volume":"101","author":"H Boyes","year":"2018","unstructured":"Boyes, H., Hallaq, B., Cunningham, J., & Watson, T. (2018). The industrial internet of things (iiot): An analysis framework. Computers in Industry, 101, 1\u201312. https:\/\/doi.org\/10.1016\/j.compind.2018.04.015","journal-title":"Computers in Industry"},{"key":"3647_CR8","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101677","volume":"89","author":"D Bhamare","year":"2020","unstructured":"Bhamare, D., Zolanvari, M., Erbad, A., Jain, R., Khan, K., & Meskin, N. (2020). Cybersecurity for industrial control systems: A survey. Computers & Security, 89, 101677. https:\/\/doi.org\/10.1016\/j.cose.2019.101677","journal-title":"Computers & Security"},{"key":"3647_CR9","doi-asserted-by":"crossref","unstructured":"Iturbe, M., Garitano, I., Zurutuza, U., Uribeetxeberria, R.: Visualizing network flows and related anomalies in industrial networks using chord diagrams and whitelisting. In: VISIGRAPP (2: IVAPP), pp. 101\u2013108 (2016)","DOI":"10.5220\/0005670000990106"},{"key":"3647_CR10","doi-asserted-by":"publisher","first-page":"78238","DOI":"10.1109\/ACCESS.2018.2884906","volume":"6","author":"H Xu","year":"2018","unstructured":"Xu, H., Yu, W., Griffith, D., & Golmie, N. (2018). A survey on industrial internet of things: A cyber-physical systems perspective. IEEE Access, 6, 78238\u201378259. https:\/\/doi.org\/10.1109\/ACCESS.2018.2884906","journal-title":"IEEE Access"},{"key":"3647_CR11","doi-asserted-by":"publisher","unstructured":"Haleplidis, E., Pentikousis, K., Denazis, S., Salim, J. H., Meyer, D., & Koufopavlou, O. (2015). Software-Defined Networking (SDN): Layers and Architecture Terminology. RFC Editor. https:\/\/doi.org\/10.17487\/RFC7426","DOI":"10.17487\/RFC7426"},{"key":"3647_CR12","doi-asserted-by":"publisher","unstructured":"Etxezarreta, X., Garitano, I., Iturbe, M., Zurutuza, U.: Software-defined networking approaches for intrusion response in industrial control systems: A survey. International Journal of Critical Infrastructure Protection, 100615 (2023). doi: https:\/\/doi.org\/10.1016\/j.ijcip.2023.100615","DOI":"10.1016\/j.ijcip.2023.100615"},{"key":"3647_CR13","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-022-03212-5","author":"X Etxezarreta","year":"2023","unstructured":"Etxezarreta, X., Garitano, I., Iturbe, M., & Zurutuza, U. (2023). Low delay network attributes randomization to proactively mitigate reconnaissance attacks in industrial control systems. Wireless Networks. https:\/\/doi.org\/10.1007\/s11276-022-03212-5","journal-title":"Wireless Networks"},{"key":"3647_CR14","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1016\/j.ijcip.2019.04.002","volume":"25","author":"H S\u00e1ndor","year":"2019","unstructured":"S\u00e1ndor, H., Genge, B., Sz\u00e1nt\u00f3, Z., M\u00e1rton, L., & Haller, P. (2019). Cyber attack detection and mitigation: Software defined survivable industrial control systems. International Journal of Critical Infrastructure Protection, 25, 152\u2013168. https:\/\/doi.org\/10.1016\/j.ijcip.2019.04.002","journal-title":"International Journal of Critical Infrastructure Protection"},{"issue":"11","key":"3647_CR15","doi-asserted-by":"publisher","first-page":"7412","DOI":"10.1109\/TII.2021.3052182","volume":"17","author":"S Kim","year":"2021","unstructured":"Kim, S., Eun, Y., & Park, K.-J. (2021). Stealthy sensor attack detection and real-time performance recovery for resilient cps. IEEE Transactions on Industrial Informatics, 17(11), 7412\u20137422. https:\/\/doi.org\/10.1109\/TII.2021.3052182","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"3647_CR16","doi-asserted-by":"publisher","unstructured":"Cai, T., Jia, T., Adepu, S., Li, Y., Yang, Z.: Adam: An adaptive ddos attack mitigation scheme in software-defined cyber-physical system. IEEE Transactions on Industrial Informatics, 1\u201312 (2023). doi: https:\/\/doi.org\/10.1109\/TII.2023.3240586","DOI":"10.1109\/TII.2023.3240586"},{"key":"3647_CR17","doi-asserted-by":"publisher","unstructured":"Antonioli, D., Tippenhauer, N.O.: Minicps: A toolkit for security research on cps networks. In: Proceedings of the First ACM Workshop on Cyber-Physical Systems-Security And\/or PrivaCy. CPS-SPC \u201915, pp. 91\u2013100. Association for Computing Machinery, New York, NY, USA (2015). doi: https:\/\/doi.org\/10.1145\/2808705.2808715.","DOI":"10.1145\/2808705.2808715."},{"issue":"4","key":"3647_CR18","doi-asserted-by":"publisher","first-page":"2248","DOI":"10.1109\/COMST.2021.3094360","volume":"23","author":"M Conti","year":"2021","unstructured":"Conti, M., Donadel, D., & Turrin, F. (2021). A survey on industrial control system testbeds and datasets for security research. IEEE Communications Surveys & Tutorials, 23(4), 2248\u20132294. https:\/\/doi.org\/10.1109\/COMST.2021.3094360","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"3647_CR19","unstructured":"Kaur, K., Singh, J., Ghumman, N.S.: Mininet as software defined networking testing platform. In: International Conference on Communication, Computing & Systems (ICCCS), pp. 139\u201342 (2014)"},{"key":"3647_CR20","doi-asserted-by":"publisher","unstructured":"Oliveira, R.L.S., Schweitzer, C.M., Shinoda, A.A., Prete, L.R.: Using Mininet for Emulation and Prototyping Software-Defined Networks. doi: https:\/\/doi.org\/10.1109\/ColComCon.2014.6860404","DOI":"10.1109\/ColComCon.2014.6860404"},{"key":"3647_CR21","unstructured":"Foundation, O.N.: OpenFlow Switch Specification, Version 1.5.1. https:\/\/opennetworking.org\/wp-content\/uploads\/2014\/10\/openflow-switch-v1.5.1.pdf Accessed 2023-03-14"},{"key":"3647_CR22","doi-asserted-by":"publisher","DOI":"10.1016\/j.softx.2022.101053","volume":"18","author":"C Reinartz","year":"2022","unstructured":"Reinartz, C., & Enevoldsen, T. T. (2022). pytep: A python package for interactive simulations of the tennessee eastman process. SoftwareX, 18, 101053. https:\/\/doi.org\/10.1016\/j.softx.2022.101053","journal-title":"SoftwareX"},{"key":"3647_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.compind.2023.103906","volume":"148","author":"A Dehlaghi-Ghadim","year":"2023","unstructured":"Dehlaghi-Ghadim, A., Balador, A., Moghadam, M. H., Hansson, H., & Conti, M. (2023). Icssim - a framework for building industrial control systems security testbeds. Computers in Industry, 148, 103906. https:\/\/doi.org\/10.1016\/j.compind.2023.103906","journal-title":"Computers in Industry"},{"key":"3647_CR24","doi-asserted-by":"publisher","unstructured":"Murillo, A., Taormina, R., Tippenhauer, N., Galelli, S.: Co-simulating physical processes and network data for high-fidelity cyber-security experiments. In: Sixth Annual Industrial Control System Security (ICSS) Workshop. ICSS 2020, pp. 13\u201320. Association for Computing Machinery, New York, NY, USA (2021). doi: https:\/\/doi.org\/10.1145\/3442144.3442147.","DOI":"10.1145\/3442144.3442147."},{"key":"3647_CR25","unstructured":"Pfaff, B., Pettit, J., Koponen, T., Jackson, E., Zhou, A., Rajahalme, J., Gross, J., Wang, A., Stringer, J., Shelar, P., et al.: The design and implementation of open vswitch. In: 12th $$\\{$$USENIX$$\\}$$ Symposium on Networked Systems Design and Implementation ($$\\{$$NSDI$$\\}$$ 15), pp. 117\u2013130 (2015)"},{"key":"3647_CR26","doi-asserted-by":"publisher","unstructured":"Mathur, A.P., Tippenhauer, N.O.: Swat: a water treatment testbed for research and training on ics security. In: 2016 International Workshop on Cyber-physical Systems for Smart Water Networks (CySWater), pp. 31\u201336 (2016). doi: https:\/\/doi.org\/10.1109\/CySWater.2016.7469060","DOI":"10.1109\/CySWater.2016.7469060"},{"key":"3647_CR27","doi-asserted-by":"publisher","first-page":"177460","DOI":"10.1109\/ACCESS.2019.2958284","volume":"7","author":"\u00c1LP G\u00f3mez","year":"2019","unstructured":"G\u00f3mez, \u00c1. L. P., Maim\u00f3, L. F., Celdr\u00e1n, A. H., Clemente, F. J. G., Sarmiento, C. C., Masa, C. J. D. C., & Nistal, R. M. (2019). On the generation of anomaly detection datasets in industrial control systems. IEEE Access, 7, 177460\u2013177473.","journal-title":"IEEE Access"},{"key":"3647_CR28","doi-asserted-by":"publisher","unstructured":"Barbieri, G., Conti, M., Tippenhauer, N.O., Turrin, F.: Assessing the use of insecure ics protocols via ixp network traffic analysis. In: 2021 International Conference on Computer Communications and Networks (ICCCN), pp. 1\u20139 (2021). doi: https:\/\/doi.org\/10.1109\/ICCCN52240.2021.9522219","DOI":"10.1109\/ICCCN52240.2021.9522219"},{"issue":"1","key":"3647_CR29","doi-asserted-by":"publisher","first-page":"585","DOI":"10.1109\/JIOT.2020.3007155","volume":"8","author":"D Huang","year":"2020","unstructured":"Huang, D., Shi, X., & Zhang, W.-A. (2020). False data injection attack detection for industrial control systems based on both time-and frequency-domain analysis of sensor data. IEEE Internet of Things Journal, 8(1), 585\u2013595.","journal-title":"IEEE Internet of Things Journal"},{"key":"3647_CR30","doi-asserted-by":"publisher","unstructured":"Aoudi, W., Iturbe, M., Almgren, M.: Truth will out: Departure-based process-level detection of stealthy attacks on control systems. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. CCS \u201918, pp. 817\u2013831. Association for Computing Machinery, New York, NY, USA (2018). doi: https:\/\/doi.org\/10.1145\/3243734.3243781.","DOI":"10.1145\/3243734.3243781."},{"issue":"15","key":"3647_CR31","doi-asserted-by":"publisher","first-page":"13223","DOI":"10.1109\/JIOT.2022.3144937","volume":"9","author":"JA Giraldo","year":"2022","unstructured":"Giraldo, J. A., El Hariri, M., & Parvania, M. (2022). Moving target defense for cyber-physical systems using iot-enabled data replication. IEEE Internet of Things Journal, 9(15), 13223\u201313232. https:\/\/doi.org\/10.1109\/JIOT.2022.3144937","journal-title":"IEEE Internet of Things Journal"}],"container-title":["Wireless Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11276-023-03647-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11276-023-03647-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11276-023-03647-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,23]],"date-time":"2024-11-23T08:16:19Z","timestamp":1732349779000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11276-023-03647-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1,25]]},"references-count":31,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["3647"],"URL":"https:\/\/doi.org\/10.1007\/s11276-023-03647-4","relation":{},"ISSN":["1022-0038","1572-8196"],"issn-type":[{"value":"1022-0038","type":"print"},{"value":"1572-8196","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,1,25]]},"assertion":[{"value":"22 December 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 January 2024","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}