An integrated container-based approach was deployed using Docker within the Common Open Research Emulator (CORE) to emulate ICS networks. A DNP3 Master container interacts with lightweight Docker containers, each assigned unique IP addresses for realistic substation simulations. This setup allows more efficient laboratory demonstrations of intrusion response methods, firewall assessments, and multi-container orchestration in a single virtual machine.
