This project explored a practical problem in cybersecurity education: how to create hands-on industrial control system exercises that are realistic enough to matter, but resilient and maintainable enough to use repeatedly.

The work focused on containerized environments as a way to package, reset, and distribute exercises with less friction than traditional lab setups. That matters in security education because fragile environments often become the limiting factor long before the curriculum does.

The resulting paper ties together three themes that still shape how I approach projects:

• security work should be teachable, not just technically impressive
• infrastructure choices directly affect whether a system stays usable over time
• research is more valuable when it produces a reusable implementation pattern