Abstract: Disclosed herein are systems, methods, and storage media for thwarting cyber-attacks and data theft. A computing system receives packets and compares with a configuration resource. The computing system determines that the packet does not match the configuration resource and transmits a packet to a decoy environment via an SDN switch. The decoy environment is configured to generate time-out, service unavailable, or restricted access messages. In some embodiments, the computing system determines the packet does match the configuration and transmits the packet to a production network via an SDN switch. The SDN switch is communicatively connected to the decoy environment through a first channel and communicatively connected to a production environment through a separate second channel. The computing system is further configured to create and transmit to the SDN switch, rules to manage transmitting the packet to either the decoy environment or the production environment.

Abstract: At least one embodiments relates to a system for testing industrial processes and industrial control systems including a physical environment, including at least one industrial control system hardware and at least one physical model, and a computer system comprising a processor and a memory, wherein the processor is set up to perform operations, embodied in instructions on computer-readable medium. The operations include virtually linking the physical environment and a virtual environment, inputting at least one document comprising supporting software and a scenario instruction set, generating a scenario according to the scenario instruction set, simulating the scenario, and displaying simulation results of the simulated scenario.

Abstract: Disclosed herein are systems, methods, and storage media for thwarting cyber-attacks and data theft. A computing system receives packets and compares with a configuration resource. The computing system determines that the packet does not match the configuration resource and transmits a packet to a decoy environment via an SDN switch. The decoy environment is configured to generate time-out, service unavailable, or restricted access messages. In some embodiments, the computing system determines the packet does match the configuration and transmits the packet to a production network via an SDN switch. The SDN switch is communicatively connected to the decoy environment through a first channel and communicatively connected to a production environment through a separate second channel. The computing system is further configured to create and transmit to the SDN switch, rules to manage transmitting the packet to either the decoy environment or the production environment.

Abstract: Systems, methods, and storage media for utilizing software defined networking for a multiple operating system rotational environment, executing on a computing device are disclosed. Some implementations may: receive a request from a user device; modify a packet of the request with a destination address and a port of a first server; forward the modified packet of the request to a controller server; receive a flow modification from the controller server based on the modified packet; and modify further received packets from the user device based on the received flow modification.

Abstract: Systems, methods, and storage media for utilizing software defined networking for a multiple operating system rotational environment, executing on a computing device are disclosed. Some implementations may: receive a request from a user device; modify a packet of the request with a destination address and a port of a first server; forward the modified packet of the request to a controller server; receive a flow modification from the controller server based on the modified packet; and modify further received packets from the user device based on the received flow modification.