Abstract
Industrial Control Systems (ICS) are increasingly being targeted by cyber-attacks.
The demand for highly qualifed cybersecurity professionals, needed to secure these systems, is at an all-time high. Current ICS cybersecurity education and training on ICS is costly and not currently available at scale. This thesis attempts to solve this problem
by providing accessible training testbeds for ICS cybersecurity education. This proposed solution is covered in the span of 3 major contributions.
(1) A thorough and structured literature review on the state of ICS testbeds was performed. (2) Based on those findings, a virtualized testbed, vWaterLab, meeting the common criteria of modern educational systems related to ICS, was created. (3) A detailed risk-informed design of a physically-enabled iteration of vWaterLab, called CacTiE, is provided. CacTiE, having built upon the lessons learned with vWaterLab, is more accessible and economic for smaller organizations. The construction of CacTiE is outlined and discussed.