Implementation of a reference model of a typical IT infrastructure of the office network of a power utility company

Abstract: Power utility companies are really important in our daily routine since theyprovide us with power delivery, which is essential in today's society. Withthe advance of technology, a lot of the procedures that were being manuallydone by these companies to deliver electrical power, have been automated andcentrally controlled by Supervisory Control And Data Acquisition (SCADA)systems. Therefore, this automation must be protected from external attackersthat want to hurt control systems (e.g. SCADA), either by stealing sensitivedata or even by getting control of the control system and changing parametersand functions that are essential for the good and healthy function of thesesystems. Exploiting vulnerabilities in the oce network can bring an adversarya step closer in getting access to the control system. It is not sucient onits own, but the adversary can launch further attacks from there targeting thecontrol system.The aim of this thesis is to construct a reference model of a typical IT infrastructureof the oce network of a power utility company, with a simpliedimplementation in CRATE. CRATE (Cyber Range And Training Environment)is the environment that was used for the implementation of the thesis, providedby the Swedish Defense Research Agency [FOI]. After the implementation isnished, a SCADA system of an enterprise will be installed in CRATE and willbe connected with this oce network. Once this is done, the Swedish DefenseResearch Agency will simulate cyber-attacks in a more complete infrastructure.The point of this thesis is to make the oce infrastructure as close to a real enterprisenetwork, although there with some dierentiation, part of it on purposeand part of it due to some limitations.