Merge pull request #52 from Critical-Infrastructure-Systems-Lab/dev

afmurillo · web-flow · commit bca88969eb83 · 2024-11-07T17:13:05.000Z
Latest version for dataset presented in CCS - RICSS'24 Workshop
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/concealed_values.txt b/examples/ctown_topology/dataset/dataset_anomaly_config_files/concealed_values.txt
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_44.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_44.yaml
@@ -0,0 +1,11 @@
+inp_file: ctown_map.inp
+iterations: 2880
+network_topology_type: complex
+plcs: !include ctown_plcs.yaml
+simulator: epynet
+demand: pdd
+output_path: attack_output_44
+demand_patterns: events/demands_ctown_01.csv
+initial_tank_data: events/tanks_ctown_01.csv
+attacks: !include dataset_attacks/attack_44.yaml
+log_level: debug
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_45.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_45.yaml
@@ -0,0 +1,11 @@
+inp_file: ctown_map.inp
+iterations: 2880
+network_topology_type: complex
+plcs: !include ctown_plcs.yaml
+simulator: epynet
+demand: pdd
+output_path: attack_output_45
+demand_patterns: events/demands_ctown_01.csv
+initial_tank_data: events/tanks_ctown_01.csv
+attacks: !include dataset_attacks/attack_45.yaml
+log_level: debug
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_46.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/ctown_config_46.yaml
@@ -0,0 +1,11 @@
+inp_file: ctown_map.inp
+iterations: 2880
+network_topology_type: complex
+plcs: !include ctown_plcs.yaml
+simulator: epynet
+demand: pdd
+output_path: attack_output_46
+demand_patterns: events/demands_ctown_01.csv
+initial_tank_data: events/tanks_ctown_01.csv
+attacks: !include dataset_attacks/attack_46.yaml
+log_level: debug
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_15.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_15.yaml
@@ -17,11 +17,11 @@ network_attacks:
   target: PLC1
   concealment_data:
     type: network_replay
-    capture_start: 300
+    capture_start: 290
     capture_end: 1428
     replay_start: 1600
   trigger:
-    start: 295
+    start: 290
     end: 2728
     type: time
 
@@ -33,11 +33,11 @@ network_attacks:
   target: PLC2
   concealment_data:
     type: network_replay
-    capture_start: 300
+    capture_start: 290
     capture_end: 1428
     replay_start: 1600
   trigger:
-    start: 295
+    start: 290
     end: 2728
     type: time
 
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_27.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_27.yaml
@@ -15,7 +15,7 @@ network_attacks:
     type: payload_replay
     capture_start: 200
     capture_end: 1400
-    replay_start: 1500
+    replay_start: 1600
   trigger:
     start: 200
     end: 2600
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_28.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_28.yaml
@@ -15,7 +15,7 @@ network_attacks:
     type: network_replay
     capture_start: 200
     capture_end: 1400
-    replay_start: 1500
+    replay_start: 1600
   trigger:
     start: 200
     end: 2600
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_29.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_29.yaml
@@ -2,7 +2,7 @@ network_attacks:
 - name: plc3conceal
   type: unconstrained_blackbox_concealment_mitm
   trigger:
-    start: 200
+    start: 1600
     end: 2728
     type: time
 
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_35.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_35.yaml
@@ -6,7 +6,7 @@ network_attacks:
       offset: -5.0
   target: PLC6
   concealment_data:
-    type: payload_replay
+    type: network_replay
     capture_start: 228
     capture_end: 588
     replay_start: 1368
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_35_short.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_35_short.yaml
@@ -0,0 +1,16 @@
+network_attacks:
+- name: plc6attack1
+  type: concealment_mitm
+  tags:
+    - tag: T4
+      offset: -5.0
+  target: PLC6
+  concealment_data:
+    type: network_replay
+    capture_start: 10
+    capture_end: 20
+    replay_start: 30
+  trigger:
+    start: 10
+    end: 40
+    type: time
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_39.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_39.yaml
@@ -4,7 +4,7 @@ network_attacks:
   target: PLC2
   trigger:
     end: 1820
-    start: 295
+    start: 1440
     type: time
   type: mitm
   value: 0.0
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_40.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_40.yaml
@@ -4,7 +4,7 @@ network_attacks:
   target: PLC2
   trigger:
     end: 2728
-    start: 295
+    start: 1600
     type: time
   type: mitm
   value: 0.0
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_43.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_43.yaml
@@ -5,6 +5,6 @@ network_attacks:
   target: PLC6
   trigger:
     end: 1750
-    start: 220
+    start: 1368
     type: time
   type: mitm
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_44.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_44.yaml
@@ -0,0 +1,23 @@
+device_attacks:
+- actuator: PU10
+  command: closed
+  name: plc5attack1
+  trigger:
+    start: 1440
+    end: 1812
+    type: time
+- actuator: PU11
+  command: closed
+  name: plc5attack2
+  trigger:
+    start: 1440
+    end: 1812
+    type: time
+
+network_attacks:
+- name: plc9conceal
+  type: unconstrained_blackbox_concealment_mitm
+  trigger:
+    start: 1440
+    end: 1812
+    type: time
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_45.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_45.yaml
@@ -0,0 +1,10 @@
+network_attacks:
+- name: plc9attack
+  type: mitm
+  target: PLC9
+  tag: T7
+  offset: 4.5
+  trigger:
+    start: 1440
+    end: 1812
+    type: time
diff --git a/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_46.yaml b/examples/ctown_topology/dataset/dataset_anomaly_config_files/dataset_attacks/attack_46.yaml
@@ -0,0 +1,15 @@
+device_attacks:
+- actuator: PU6
+  command: open
+  name: plc6attack2
+  trigger:
+    start: 1368
+    end: 1728
+    type: time
+- actuator: PU7
+  command: open
+  name: plc6attack3
+  trigger:
+    start: 1368
+    end: 1728
+    type: time
diff --git a/examples/ky3_topology/ky3_config.yaml b/examples/ky3_topology/ky3_config.yaml
diff --git a/examples/ky3_topology/ky3_map.inp b/examples/ky3_topology/ky3_map.inp
diff --git a/examples/ky3_topology/ky3_plcs.yaml b/examples/ky3_topology/ky3_plcs.yaml
diff --git a/examples/wadi_topology/readme.md b/examples/wadi_topology/readme.md
diff --git a/setup.py b/setup.py
