During my cyber security minor, I was involved in the refinement of a workshop about cyber security in the smart industry. These Workshops were given about once every month and introduced some security concepts to an industrial network. The target audience were small and medium-sized enterprises. The workshops can now be found online as tech talks.

During the workshop, the audience receives a Raspberry Pi to work on some exercises about the OPC-UA protocol. the Raspberry Pi works similar to a RevPi, which is a device actually used in industrial machines. While they are working on the these exercises, a panel of hackers use a tool to hack into the Raspberry Pi and disrupt the progress and demonstrate that their ‘industrial device’ can be hacked. The participants then have to focus on defending their device.

At the end of the workshop, the hacker tool is completely locked out of the Raspberry Pi’s and the audience has raised their cyber security awareness.

During the minor, my project group was tasked with the improvement of the workshop. The main issues with the current workshop were

• The Raspberry Pi’s do not provide a visual impact of a hacked industrial network
• The hacker tool lacks functionality and is poorly written

Our group decided to build a bridge as a demonstration of an industrial network. The participants of the workshop will still receive a Raspberry Pi with a red LED, green LED, a LED bar and two buttons to mimic the bridge setup. Using the bridge as reference, the audience will actually see the impact of being hacked.

The red LED mimics the red traffic light
The green led mimics the green traffic light
the LED bar mimics the road barrier
The buttons open and close the bridge

This is the expected result of opening a bridge. The light turned red, and the barrier closed.

This is not the expected result. The bridge opened without closing down road traffic first. The bridge was hacked!

The hacker tool is hosted on github (As of now it is a private repository):

We tested the tool in the workshops ourselves.