NICS LAB INDUSTRIAL TESTBED
NICS LAB INDUSTRIAL TESTBED
Description
NICS Lab is equipped with an industrial testbed which supports numerous research activities on industrial security. This infrastructure comprises various elements commonly present in industrial environments, encompassing both proprietary and Open Source. These are organized in a modular manner, enabling multiple configurations and use cases within the same infrastructure.
This infrastructure supports the creation and deployment of different industrial scenarios which simulate multiple use cases simultaneously. These range from models with real sensors and actuators to fully virtualized environments, including hybrid configurations that combine both approaches, real and virtualized. This duality present in NICS’s infrastructure enables the implementation and deployment of Digital Twins (DT).
This industrial testing environment consists of multiple rack-type frames with devices distributed across them, including Industrial Internet of Things (IIoT) devices and cyber-physical systems. The assets which conform the testbed are listed below.
Programmable Logic Controllers (PLCs)
A Programable Logic Controller (PLC) is an industrial device designed to automate processes by reading input signals, executing programmed logic, and controlling outputs. They are used in machinery, production lines, and industrial control systems for its robustness and reliability.
NICS Lab’s infrastructure counts with:
– Siemens SIMATIC S7-1516F, with communication module CM PTP RS422/485 HF, CM PTP RS-232 BA and CP 1543-1 Industrial Ethernet
– Siemens SIMATIC S7-400H (412-5H), with communication module CP 443-1 OPC UA and CP 443-1 Advanced
– Omron NX1P2-1140DT, with master module IO-Link NX ILM400
– Omron NX102-1220
– Schneider Modicon M580
– Schneider Modicon M251
– Siemens SIMATIC S7-1200, with communication module CP1243-8 IRC (Telecontrol), CP1242-7 V2 (GSM/GPRS), and master module IO-Link
– Siemens 230RCE, with communication module CMR 2020 (remote communication) y CMR 2040 (LTE/4G)
Remote Terminal Units (RTUs) and distributed peripheral systems
Industrial PCs (IPCs) are computers designed for use in harsh or specialized environments such as manufacturing plants, energy facilities, or transportation systems. They control machinery, perform process automation, data acquisition, and real-time monitoring. They are typically used with programmable logic controllers (PLCs), sensors, and SCADA systems.
General-purpose IPCs, in contrast, are less specialized. They provide computing power for tasks such as data logging, edge computing, or communication gateways. They are used when flexibility is needed across different applications rather than a fixed, highly customized function.
Both types are software tailored to industrial applications. Usage involves integration into automation networks, configuration of I/O interfaces, and deployment of control or monitoring software.
NICS Lab’s infrastructure incorporates:
– Siemens SIMATIC IPC847E (rack type)
– Siemens SIMATIC IPC227E, Siemens MindConnect Nano y SIMATIC IPC127E (nanobox type)
– Lenovo ThinkServer TS140
– Lenovo ThinkCentre M57
Industrial PCs/servers (IPCs) and general-purpose IPCs
Industrial PCs (IPCs) are computers designed for use in harsh or specialized environments such as manufacturing plants, energy facilities, or transportation systems. They control machinery, perform process automation, data acquisition, and real-time monitoring. They are typically used with programmable logic controllers (PLCs), sensors, and SCADA systems.
General-purpose IPCs, in contrast, are less specialized. They provide computing power for tasks such as data logging, edge computing, or communication gateways. They are used when flexibility is needed across different applications rather than a fixed, highly customized function.
Both types are software tailored to industrial applications. Usage involves integration into automation networks, configuration of I/O interfaces, and deployment of control or monitoring software.
NICS Lab’s infrastructure incorporates:
– Siemens SIMATIC IPC847E (rack type)
– Siemens SIMATIC IPC227E, Siemens MindConnect Nano y SIMATIC IPC127E (nanobox type)
– Lenovo ThinkServer TS140
– Lenovo ThinkCentre M57
Human-Machine Interfaces (HMIs)
Human-Machine Interface (HMI) are systems that connect human operators to machines, processes, or devices. They provide input methods (buttons, touchscreens, keyboards) and output displays (screens, indicators, alarms) to allow control and monitoring.
NICS Lab’s infrastructure counts with:
– Omron Sysmac NA5-15W101B, 15.4-inch
– Schneider Mangelis GTO, 12-inch
– Schneider Mangelis GTU, 12-inch
– Siemens SIMATIC HMI TP1500 Comfort Panel, 15-inch
– Siemens SIMATIC HMI TP700 Comfort Panel, 7-inch
– Siemens SIMATIC HMI KTP700 Basic, 7-inch
Communication switches, routers, and firewalls
Communication switches, routers, and firewalls are network devices that manage and secure data flow. Switches connect multiple devices within a local network, routers link different networks and direct traffic, and firewalls filter data to block unauthorized access. In industrial environments they ensure reliable communication between machines, systems, and control centers while protecting critical infrastructure from cyber threats.
NICS Lab’s infrastructure includes:
– Managed industrial switch Siemens SCALANCE XR524-8C
– Managed industrial switch Siemens SCALANCE XM408-8C
– Managed industrial switch Siemens SCALANCE XC20
– Unmanaged industrial switches Siemens SCALANCE XC108
– Industrial routers Siemens SCALANCE S615
– Industrial security Siemens SCALANCE SC636-2C
– Switch 3G Siemens SCALANCE M874-3
– Test access port for telegram extraction Siemens SCALANCE TAP104
– Coupler Siemens SIMATIC PN/PN for deterministic data exchange between devices SIMATIC ET200
– General propose managed switch TP-Link TL-SG1024DE
Communication gateways between different protocols
Communication gateways between different protocols are devices or software systems that translate, route, and manage data traffic between networks or devices using incompatible communication protocols. They ensure interoperability by converting messages, addressing schemes, and timing formats, enabling seamless data exchange across heterogeneous systems.
NICS Lab’s infrastructure incorporates:
– Siemens SIMATIC PN/CAN Link, from PROFINET to CAN/CANOPEN network
– Siemens SIMATIC PN/BACnet Link, from PROFINET to BACnet/IP network
– Siemens SIMATIC IE/PB LINK PN IO, from industrial Ethernet to PROFIBUS
– Anybus X-gateway, from EtherNet/IP Adapter to PROFINET-IO Device
– Anybus X-gateway, from EtherCAT Slave to PROFINET-IO Device
– Anybus X-gateway, from Modbus TCP to PROFINET-IO Device Slave
– Anybus X-gateway, from Modbus TCP to PROFINET-IO Device Master
– IBH Link UA (OPC UA)
IoT gateways
IoT gateways are specialized communication gateways that connect IoT devices to larger networks or the cloud. They aggregate, preprocess, and translate data from various IoT protocols (e.g., MQTT, CoAP, Modbus) into standard formats for analytics, storage, or control systems. They also provide security, device management, and sometimes edge computing capabilities.
NICS Lab’s infrastructure counts with:
– Siemens SIMATIC IOT2050
– Siemens SIMATIC Cloud Connect 7 (CC 712 IoT)
– Siemens SIMATIC IOT2040
Wireless access points and communication
Wireless access points enable devices to connect to a network without cables, while wireless communication transmits data over radio signals. In industrial environments, they provide flexible connectivity for mobile equipment, remote sensors, and monitoring systems, reducing wiring complexity and supporting real-time data exchange across the facility.
NICS Lab’s infrastructure counts with:
– Access points Siemens SCALANCE W774-1 and wireless clients Siemens SCALANCE W734-1
– Access points Nivis VersaRouter 910, wirelwaa sensor Nivis VersaSensor 220 and wireless Nivis VersaLoop 10 (WirelessHART)
– Access point Nivis VersaRouter 900 and wireless sensor Nivis VersaSensor 210 (ISA 100.11a)
– Wireless getaway Zolertia Firefly y wireless sensor Telos B (IEEE 802.15.4)
General-purpose development boards
General-purpose development boards are hardware platforms used to prototype and develop
electronic or software projects. In industrial settings, they allow engineers to test automation systems, sensors, or IoT applications quickly, providing flexibility for custom solutions, rapiditeration, and integration with other industrial devices.
NICS Lab’s infrastructure includes:
– Intel Galileo Gen1
– Raspberry Pi 3 B+, with communication module netHAT and touch scream 7-inch
– Arduino UNO and Arduino MEGA 2560
Field Devices
Field devices are instruments or equipment installed in industrial or operational environments to monitor, measure, or control physical processes.
NICS Lab’s infrastructure counts with:
– Industrial control kits composed of low-voltage SIRIUS components with IO-Link
– Modular Siemens SINAMIC G120 frequency converter systems
– Siemens SIMATIC RF600 (RF615R) RFID readers in the UHF band
– Siemens SIMATIC RF200 (RF210R) RFID readers for IO-Link
– Siemens SIMATIC RFID RF200 (RF240R) RFID readers
– Siemens SIMATIC MV540HR optical reader
– Temperature sensor with IO-Link connectivity
– Generic electronic control panel
Training Mock-ups
Training mock-ups are physical or digital models used for instructional purposes. They replicate real systems, devices, or interfaces, allowing users to practice operations, troubleshooting, or procedures safely without affecting actual equipment.
NICS Lab’s infrastructure incorporates:
– Fischertechnik Robot 3D – 24V
– Fischertechnik Indexed Line – 24V
– Fischertechnik Training FactoryIndustry 4.0 – 24V
Supervisory Control And Data Acquisition (SCADA) system
SCADA systems are software and / or hardware platforms used to monitor, control, and analyze industrial processes. They collect real-time data from sensors and devices, provide visualization and alerts, and enable centralized control, improving efficiency, safety, and decision-making in industrial environments.
NICS Lab’s infrastructure includes:
– Siemens WinCC Runtime Professional
Software to support Digital Twins
A Digital Twin (DT) is a virtual replica of a physical system, process, or asset. It simulates real-time behavior using data from sensors and IoT devices, allowing monitoring, analysis, and optimization. In industrial environments, DTs help to predict failures, improve efficiency, and support decision-making without interfering with the actual operations.
NICS Lab’s infrastructure incorporates:
– Siemens S7-PLCSIM Advanced
– Siemens SIMATIC ODK
– Siemens NX MCD
– Siemens SIMIT Simulation
– Factory I/O Ultimate Edition
– PLC-Lab Pro
– Realvirtual.io Proffesional, with Realvirtual.io Simulation
Software for management, configuration and programming industrials mechanics
This type of software enables centralized control, monitoring, and optimization of mechanical systems. It allows engineers to configure devices, program automated tasks, and analyze performance data efficiently. Such software acts as the interface between hardware components and operational workflows, ensuring seamless integration and precise control, and provides a foundation to present the specific components offered by a given provider.
NICS Lab’s infrastructure counts with assets from several manufactures:
Omron:
– SYSMAC-SE201L
Schneider:
– SOMACHINE
– Control Expert 14.0 XL
Siemens:
– TIA Portal Multiuser Engineering
– STEP 7 Professional
– SINAMICS Startdrive
– WinCC Professional/Advanced
– SINAUT S7 Telecontrol Server
– SINEC NMS
– SIMATIC RFID
– SIMATIC Ident
– SIMATIC Energy Manager PRO
HARDWARE
Programmable Logic Controllers (PLCs)
A Programable Logic Controller (PLC) is an industrial device designed to automate processes by reading input signals, executing programmed logic, and controlling outputs. They are used in machinery, production lines, and industrial control systems for its robustness and reliability.
NICS Lab’s infrastructure counts with:
- Siemens SIMATIC S7-1516F, with communication module CM PTP RS422/485 HF, CM PTP RS-232 BA and CP 1543-1 Industrial Ethernet
- Siemens SIMATIC S7-400H (412-5H), with communication module CP 443-1 OPC UA and CP 443-1 Advanced
- Omron NX1P2-1140DT, with master module IO-Link NX ILM400
- Omron NX102-1220
- Schneider Modicon M580
- Schneider Modicon M251
- Siemens SIMATIC S7-1200, with communication module CP1243-8 IRC (Telecontrol), CP1242-7 V2 (GSM/GPRS), and master module IO-Link
- Siemens 230RCE, with communication module CMR 2020 (remote communication) y CMR 2040 (LTE/4G)
Remote Terminal Units (RTUs) and distributed peripheral systems
Industrial PCs (IPCs) are computers designed for use in harsh or specialized environments such as manufacturing plants, energy facilities, or transportation systems. They control machinery, perform process automation, data acquisition, and real-time monitoring. They are typically used with programmable logic controllers (PLCs), sensors, and SCADA systems.
General-purpose IPCs, in contrast, are less specialized. They provide computing power for tasks such as data logging, edge computing, or communication gateways. They are used when flexibility is needed across different applications rather than a fixed, highly customized function.
Both types are software tailored to industrial applications. Usage involves integration into automation networks, configuration of I/O interfaces, and deployment of control or monitoring software.
NICS Lab’s infrastructure incorporates:
- Siemens SIMATIC IPC847E (rack type)
- Siemens SIMATIC IPC227E, Siemens MindConnect Nano y SIMATIC IPC127E (nanobox type)
- Lenovo ThinkServer TS140
- Lenovo ThinkCentre M57
Industrial PCs/servers (IPCs) and general-purpose IPCs
Industrial PCs (IPCs) are computers designed for use in harsh or specialized environments such as manufacturing plants, energy facilities, or transportation systems. They control machinery, perform process automation, data acquisition, and real-time monitoring. They are typically used with programmable logic controllers (PLCs), sensors, and SCADA systems.
General-purpose IPCs, in contrast, are less specialized. They provide computing power for tasks such as data logging, edge computing, or communication gateways. They are used when flexibility is needed across different applications rather than a fixed, highly customized function.
Both types are software tailored to industrial applications. Usage involves integration into automation networks, configuration of I/O interfaces, and deployment of control or monitoring software.
NICS Lab’s infrastructure incorporates:
- Siemens SIMATIC IPC847E (rack type)
- Siemens SIMATIC IPC227E, Siemens MindConnect Nano y SIMATIC IPC127E (nanobox type)
- Lenovo ThinkServer TS140
- Lenovo ThinkCentre M57
Human-Machine Interfaces (HMIs)
Human-Machine Interface (HMI) are systems that connect human operators to machines, processes, or devices. They provide input methods (buttons, touchscreens, keyboards) and output displays (screens, indicators, alarms) to allow control and monitoring.
NICS Lab’s infrastructure counts with:
- Omron Sysmac NA5-15W101B, 15.4-inch
- Schneider Mangelis GTO, 12-inch
- Schneider Mangelis GTU, 12-inch
- Siemens SIMATIC HMI TP1500 Comfort Panel, 15-inch
- Siemens SIMATIC HMI TP700 Comfort Panel, 7-inch
- Siemens SIMATIC HMI KTP700 Basic, 7-inch
Communication switches, routers, and firewalls
Communication switches, routers, and firewalls are network devices that manage and secure data flow. Switches connect multiple devices within a local network, routers link different networks and direct traffic, and firewalls filter data to block unauthorized access. In industrial environments they ensure reliable communication between machines, systems, and control centers while protecting critical infrastructure from cyber threats.
NICS Lab’s infrastructure includes:
- Managed industrial switch Siemens SCALANCE XR524-8C
- Managed industrial switch Siemens SCALANCE XM408-8C
- Managed industrial switch Siemens SCALANCE XC20
- Unmanaged industrial switches Siemens SCALANCE XC108
- Industrial routers Siemens SCALANCE S615
- Industrial security Siemens SCALANCE SC636-2C
- Switch 3G Siemens SCALANCE M874-3
- Test access port for telegram extraction Siemens SCALANCE TAP104
- Coupler Siemens SIMATIC PN/PN for deterministic data exchange between devices SIMATIC ET200
- General propose managed switch TP-Link TL-SG1024DE
Communication gateways between different protocols
Communication gateways between different protocols are devices or software systems that translate, route, and manage data traffic between networks or devices using incompatible communication protocols. They ensure interoperability by converting messages, addressing schemes, and timing formats, enabling seamless data exchange across heterogeneous systems.
NICS Lab’s infrastructure incorporates:
- Siemens SIMATIC PN/CAN Link, from PROFINET to CAN/CANOPEN network
- Siemens SIMATIC PN/BACnet Link, from PROFINET to BACnet/IP network
- Siemens SIMATIC IE/PB LINK PN IO, from industrial Ethernet to PROFIBUS
- Anybus X-gateway, from EtherNet/IP Adapter to PROFINET-IO Device
- Anybus X-gateway, from EtherCAT Slave to PROFINET-IO Device
- Anybus X-gateway, from Modbus TCP to PROFINET-IO Device Slave
- Anybus X-gateway, from Modbus TCP to PROFINET-IO Device Master
- IBH Link UA (OPC UA)
IoT gateways
IoT gateways are specialized communication gateways that connect IoT devices to larger networks or the cloud. They aggregate, preprocess, and translate data from various IoT protocols (e.g., MQTT, CoAP, Modbus) into standard formats for analytics, storage, or control systems. They also provide security, device management, and sometimes edge computing capabilities.
NICS Lab’s infrastructure counts with:
- Siemens SIMATIC IOT2050
- Siemens SIMATIC Cloud Connect 7 (CC 712 IoT)
- Siemens SIMATIC IOT2040
Wireless access points and communication
Wireless access points enable devices to connect to a network without cables, while wireless communication transmits data over radio signals. In industrial environments, they provide flexible connectivity for mobile equipment, remote sensors, and monitoring systems, reducing wiring complexity and supporting real-time data exchange across the facility.
NICS Lab’s infrastructure counts with:
- Access points Siemens SCALANCE W774-1 and wireless clients Siemens SCALANCE W734-1
- Access points Nivis VersaRouter 910, wirelwaa sensor Nivis VersaSensor 220 and wireless Nivis VersaLoop 10 (WirelessHART)
- Access point Nivis VersaRouter 900 and wireless sensor Nivis VersaSensor 210 (ISA 100.11a)
- Wireless getaway Zolertia Firefly y wireless sensor Telos B (IEEE 802.15.4)
General-purpose development boards
General-purpose development boards are hardware platforms used to prototype and develop
electronic or software projects. In industrial settings, they allow engineers to test automation systems, sensors, or IoT applications quickly, providing flexibility for custom solutions, rapiditeration, and integration with other industrial devices.
NICS Lab’s infrastructure includes:
- Intel Galileo Gen1
- Raspberry Pi 3 B+, with communication module netHAT and touch scream 7-inch
- Arduino UNO and Arduino MEGA 2560
Field Devices
Field devices are instruments or equipment installed in industrial or operational environments to monitor, measure, or control physical processes.
NICS Lab’s infrastructure counts with:
- Industrial control kits composed of low-voltage SIRIUS components with IO-Link
- Modular Siemens SINAMIC G120 frequency converter systems
- Siemens SIMATIC RF600 (RF615R) RFID readers in the UHF band
- Siemens SIMATIC RF200 (RF210R) RFID readers for IO-Link
- Siemens SIMATIC RFID RF200 (RF240R) RFID readers
- Siemens SIMATIC MV540HR optical reader
- Temperature sensor with IO-Link connectivity
- Generic electronic control panel
Training Mock-ups
Training mock-ups are physical or digital models used for instructional purposes. They replicate real systems, devices, or interfaces, allowing users to practice operations, troubleshooting, or procedures safely without affecting actual equipment.
NICS Lab’s infrastructure incorporates:
- Fischertechnik Robot 3D - 24V
- Fischertechnik Indexed Line – 24V
- Fischertechnik Training FactoryIndustry 4.0 – 24V

