Mobile SCADA access in SCADA systems - Mini Project: Build & Apply

Mobile SCADA Access Setup

📖 Scenario: You work for a company that manages industrial machines using a SCADA system. The company wants to allow engineers to check machine status from their mobile phones securely and easily.

🎯 Goal: Build a simple configuration to enable mobile access to the SCADA system with basic security settings.

📋 What You'll Learn

Create a dictionary with SCADA device IPs and their names

Add a configuration variable for allowed mobile IP range

Filter devices accessible from the allowed mobile IP range

Print the list of accessible devices for mobile users

💡 Why This Matters

🌍 Real World

Industrial companies use SCADA systems to monitor and control machines remotely. Allowing mobile access helps engineers check system status on the go.

💼 Career

DevOps and system administrators often configure secure remote access to critical systems like SCADA for mobile users.

1

Create SCADA devices dictionary

Create a dictionary called scada_devices with these exact entries: '192.168.1.10': 'Pump Controller', '192.168.1.11': 'Valve Controller', '192.168.2.20': 'Temperature Sensor', '192.168.2.21': 'Pressure Sensor'.

SCADA systems

# Create the scada_devices dictionary with IPs and device names
# Your code here

Hint

Use a Python dictionary with IP addresses as keys and device names as values.

2

Add allowed mobile IP range

Add a variable called allowed_mobile_ip_prefix and set it to the string '192.168.1.' to represent the allowed mobile IP range prefix.

SCADA systems

scada_devices = {
    '192.168.1.10': 'Pump Controller',
    '192.168.1.11': 'Valve Controller',
    '192.168.2.20': 'Temperature Sensor',
    '192.168.2.21': 'Pressure Sensor'
}
# Add allowed_mobile_ip_prefix variable below
# Your code here

Hint

Use a string variable to hold the IP prefix for allowed mobile devices.

3

Filter accessible devices for mobile

Create a dictionary called mobile_access_devices that includes only devices from scada_devices whose IP starts with allowed_mobile_ip_prefix. Use a dictionary comprehension with ip and name as variables.

SCADA systems

scada_devices = {
    '192.168.1.10': 'Pump Controller',
    '192.168.1.11': 'Valve Controller',
    '192.168.2.20': 'Temperature Sensor',
    '192.168.2.21': 'Pressure Sensor'
}

allowed_mobile_ip_prefix = '192.168.1.'

# Create mobile_access_devices dictionary using dictionary comprehension
# Your code here

Hint

Use ip.startswith(allowed_mobile_ip_prefix) inside the dictionary comprehension.

4

Display accessible devices for mobile users

Write a print statement to display the mobile_access_devices dictionary.

SCADA systems

scada_devices = {
    '192.168.1.10': 'Pump Controller',
    '192.168.1.11': 'Valve Controller',
    '192.168.2.20': 'Temperature Sensor',
    '192.168.2.21': 'Pressure Sensor'
}

allowed_mobile_ip_prefix = '192.168.1.'

mobile_access_devices = {ip: name for ip, name in scada_devices.items() if ip.startswith(allowed_mobile_ip_prefix)}

# Print the mobile_access_devices dictionary
# Your code here

Hint

Use print(mobile_access_devices) to show the filtered devices.

Practice

1. What is the main benefit of mobile SCADA access for operators?

easy

A. Allows monitoring and control from anywhere

B. Requires physical presence at the control room

C. Eliminates the need for any security measures

D. Only works on desktop computers

Solution

1. Step 1: Understand mobile SCADA access purpose

   Mobile SCADA access is designed to let operators monitor and control systems remotely.

2. Step 2: Identify the benefit for operators

   This remote access improves flexibility and response time by allowing control from anywhere.

3. Final Answer:

   Allows monitoring and control from anywhere -> Option A

4. Quick Check:

   Mobile SCADA access = Remote control [OK]

Hint: Mobile SCADA means control from any location [OK]

Common Mistakes:

• Thinking mobile SCADA requires being onsite
• Assuming no security is needed
• Believing it only works on desktops

2. Which of the following is the correct way to secure mobile SCADA access?

easy

A. Disable all encryption protocols

B. Use open Wi-Fi without passwords

C. Implement VPN and strong authentication

D. Share passwords via email

Solution

1. Step 1: Identify security best practices for mobile access

   Secure mobile SCADA access requires encrypted connections and strong user verification.

2. Step 2: Match options with best practices

   Using VPN and strong authentication protects data and access effectively.

3. Final Answer:

   Implement VPN and strong authentication -> Option C

4. Quick Check:

   Secure access = VPN + strong login [OK]

Hint: Secure mobile access needs VPN and strong login [OK]

Common Mistakes:

• Using open Wi-Fi without protection
• Disabling encryption
• Sharing passwords insecurely

3. Given this simplified SCADA mobile access log snippet:

2024-06-01 10:00:00 UserA login success
2024-06-01 10:05:00 UserB login fail
2024-06-01 10:10:00 UserA command start pump
2024-06-01 10:15:00 UserB login success
2024-06-01 10:20:00 UserB command stop pump

What is the correct sequence of events?

medium

A. UserA started the pump before UserB logged in successfully

B. UserB stopped the pump before logging in

C. UserB logged in before UserA started the pump

D. UserA failed login after starting the pump

Solution

1. Step 1: Read the log events in order

   UserA logs in at 10:00, UserB fails login at 10:05, UserA starts pump at 10:10, UserB logs in at 10:15, UserB stops pump at 10:20.

2. Step 2: Analyze event timing

   UserA started the pump at 10:10, which is before UserB's successful login at 10:15.

3. Final Answer:

   UserA started the pump before UserB logged in successfully -> Option A

4. Quick Check:

   Event order = UserA start pump before UserB login [OK]

Hint: Check timestamps to order events correctly [OK]

Common Mistakes:

• Ignoring failed login attempts
• Mixing event times
• Assuming commands before login

4. A mobile SCADA user reports they cannot connect remotely. Which is the most likely cause?

medium

A. SCADA system is offline but mobile app shows connected

B. User entered correct credentials

C. Mobile device battery is full

D. VPN service is down or misconfigured

Solution

1. Step 1: Identify common connection issues

   VPN problems often block remote SCADA access because it secures the connection.

2. Step 2: Evaluate options for connection failure

   Correct credentials and full battery do not cause connection failure; system offline with app connected is unlikely.

3. Final Answer:

   VPN service is down or misconfigured -> Option D

4. Quick Check:

   Connection failure = VPN issue [OK]

Hint: Check VPN status first for remote access issues [OK]

Common Mistakes:

• Blaming correct credentials
• Ignoring VPN or network problems
• Assuming device battery causes connection

5. You want to set up mobile SCADA access with multi-factor authentication (MFA). Which sequence correctly describes the setup steps?

hard

A. Disable VPN, allow open access, skip MFA, test login

B. Enable VPN, configure MFA on SCADA server, distribute MFA apps to users, test login

C. Configure MFA only on mobile devices, no VPN needed, test login

D. Allow direct internet access to SCADA without authentication

Solution

1. Step 1: Secure connection setup

   Enable VPN to protect data transmission between mobile devices and SCADA server.

2. Step 2: Configure MFA and user setup

   Set up MFA on the SCADA server and provide users with MFA apps to enhance login security.

3. Step 3: Test the complete login process

   Verify that users can log in using VPN and MFA to ensure security and functionality.

4. Final Answer:

   Enable VPN, configure MFA on SCADA server, distribute MFA apps to users, test login -> Option B

5. Quick Check:

   Secure mobile access = VPN + MFA setup [OK]

Hint: Setup VPN first, then MFA, then test login [OK]

Common Mistakes:

• Skipping VPN or MFA
• Allowing open internet access
• Configuring MFA only on devices without server support