Simulating nuclear critical infrastructure for live cyber defence training: The Defence Cyber Marvel Nuclear Power Plant

Abstract

xercise DEFENCE CYBER MARVEL (DCM) is an annual competition, this year with the hub located in Singapore. Thirty-six teams, 29 countries and 2,500 personnel from Defence, Government agencies, industry partners, UK critical infrastructure operators and other nations, competed in a challenging real-world scenario defending a variety of systems. The range includes specialist systems, with technology used to operate critical infrastructure, which face increasing cyber risk. Specialist skills and realistic training opportunities for protecting CNI technology are limited. DCM developed a high-fidelity physical demonstrator to enhance hands-on training and increase awareness. The system uses industrial control systems technology, often referred to as Operational Technology (OT), commonly used for safety-related automation. It embodies components widely used in safety systems architectures. Similar safety-related control systems are used across Critical National Infrastructure, including transport, critical manufacturing, utilities, energy, and hazardous industrial processes. The paper discusses one approach the British Army Cyber Association takes to maximise future training opportunities. This includes specialist security functionality to provide control system protocol awareness, asset discovery, vulnerability prioritisation, anomaly detection, device behavioural analytics and threat hunting capability.