Assessing and Protecting Industrial Control Systems
- Description
- Curriculum
- FAQ
- Reviews
Gain practical, hands-on experience in securing OT environments through simulated exercises and real-world scenarios. Learn from an expert with extensive experience, providing valuable insights and guidance throughout the course. Elevate your defensive OT skills to the next level.
Join now and step into the exciting world of OT security! In this comprehensive course, you will embark on a mission to assess and protect the infrastructure of Joy Cookie Factory as it prepares to transition its entire shop floor online. Unlike previous courses, we prioritize understanding the environment in which OT devices operate, recognizing threats, and implementing effective onboard protection techniques to fortify these devices against cyber threats.
In this course, you’ll dive into the essentials of OT security, focusing on practical skills and actionable strategies. Whether you’re a newcomer to the field or a seasoned professional, this course will empower you to safeguard OT environments effectively.
Gain a comprehensive understanding of the ecosystem in which OT devices operate, enabling you to identify potential vulnerabilities and threats. Learn how to create a thorough OT asset inventory and assess devices for common vulnerabilities, laying the groundwork for robust security measures. Acquire essential skills and techniques to fortify your OT environment against attacks, utilizing onboard resources and a firewall without relying on expensive detection and response tools.
While participation in the predecessor course, Practical Industrial Control System Penetration Testing, is optional, it is highly recommended. Both courses together provide a holistic understanding of OT device vulnerabilities and their operating environments, setting you up for success in securing OT systems effectively.
The core exercise of this course revolves around a simulated OT network of a cookie factory, offering hands-on experience in creating an OT asset inventory and assessing devices for vulnerabilities. Through practical exercises and real-world scenarios, you’ll develop the skills needed to defend OT environments effectively.
Enroll today and take the first step towards mastering the art of defending industrial control systems. Equip yourself with the knowledge and skills needed to safeguard critical infrastructure and protect against evolving cyber threats. Don’t miss out on this opportunity to advance your career and make a tangible impact in the world of OT security. Join us now and embark on a journey towards a more secure future!
Curious about penetration testing of ICS/OT devices? Join my course Practical Industrial Control System Penetration Testing.
Please note that the software used is not mine. I can only offer limited assistance in case of problems. Please contact the publisher of the software for help. The installation instructions were created to the best of my knowledge, but the responsibility for the installation lies with the participants.
-
9
Introduction to Setting Up Your ICS/OT Lab -
10
Understanding Virtualization and Virtual Machines
-
11
Installation of VirtualBox
-
12
Installing the Kali Linux VM and downloading additional nmap scripts
-
13
Installing the Ubuntu Desktop VM
-
14
Running the Install Script to get the Course Materials
-
15
Setting up the HostOnly Network
-
16
Summary of Setting Up Your ICS/OT Lab
-
17
Introduction to Practical Refresher
-
18
Setup the VM, Start the S7-300 Emulation and Excercise Tasks
-
19
Recap Netdiscover, Nmap, Nmap NSE (Spoiler Free)
-
20
Step by Step Excercise Solution: S7-300 Recon, Enum and Assessment
-
21
Report Writing with ChatGPT
-
22
Summary of Practical Refresher
-
23
Test your Practical Refresher Knowledge!
-
24
Introduction to Preparing the Assessment
-
25
Setting the Stage: Crumbs of Joy Cookie Factory and getting to know their OT
-
26
The Penetration Testing Agreement
-
27
Your Asset Inventory Template
-
28
Migrating the Client's Data into our Asset Inventory
-
29
Create a Network Topology from Scratch with draw.io
-
30
Summary of Preparing the Assessment
-
31
Test your Preparing the Assessment Knowledge!
-
32
Introduction to OT Network Assessment
-
33
Performing a Layer 2 Asset Discovery - Task
-
34
Performing a Layer 2 Asset Discovery - Solution
-
35
Marking OT Devices as Safe to Scan with a Layer 3 ICMP Scan - Task
-
36
Marking OT Devices as Safe to Scan with a Layer 3 ICMP Scan - Solution
-
37
Scanning the OT Network for Open Ports with Nmap - Task
-
38
Scanning the OT Network for Open Ports with Nmap - Solution
-
39
Summary of OT Network Assessment
-
40
Test your OT Network Assessment Knowledge!
-
47
Introduction to Human-Machine-Interface Assessment
-
48
Setting up the HMI Emulation and Task
-
49
Scanning for Open Ports with Nmap - Solution
-
50
Assessing the HMI's Remote Access Services - Solution
-
51
Summary of Human-Machine-Interface Assessment and Bonus
-
52
Test your Human-Machine-Interface Assessment Knowledge!
-
53
Introduction to Summarizing the Findings and Reporting
-
54
Update the Network Topology - Task
-
55
Update the Network Topology - Solution
-
56
Discovering Undocumented Network Hosts
-
57
Critical Findings: OT Network Architecture, Remote Access, PLC, HMI
-
58
Summarizing Key-Findings in an Dashboard
-
59
Reporting the Findings with ChatGPT
-
60
Summary of Summarizing the Findings and Reporting
-
61
Test your Summarizing the Findings and Reporting Knowledge!
-
62
Introduction to Risk Assessment and Threat Modelling
-
63
Risks of a Flat OT Network Architecture
-
64
Risks of VPN Remote Access Router
-
65
Security Maturity Levels as in IEC/ISA 62443
-
66
Introduction to the ICS ATT&CK Framework
-
67
Understanding common used techniques by creating a heatmap in ATT&CK
-
68
Developing a Threat Scenario on the PLC and HMI using ATT&CK - Task
-
69
Developing a Threat Scenario on the PLC and HMI using ATT&CK - Solution
-
70
Mitigating Threats using the ATT&CK Mitigation Recommendations
-
71
Developing a Threat Scenario using HAZOP and Dynamical Systems Theory
-
72
Developing a Threat Scenario using the Use Case Abuse Model (OT Thought Model)
-
73
Adding Identified Risks to the Report
-
74
Summary of Risk Assessment and Threat Modelling
-
75
Test your Risk Assessment and Threat Modelling Knowledge!
-
76
Introduction to Protection Techniques
-
77
The Purdue Reference Model and the Automation Pyramid
-
78
Defense in Depth Model
-
79
System Hardening of the PLC
-
80
System Hardening of the HMI and Secure HMI Screen Design
-
81
System Hardening vs Threat Scenario in ICS ATT&CK
-
82
Reducing the Risks of a Flat OT Network with Network Segmentation
-
83
Best Practises for Secure Remote Access
-
84
Remote Access via Jump Host
-
85
Attack Surface Reduction with Secure Coding
-
86
Adding Mitigation Recommendations to the Report
-
87
Summary of Protection Techniques
-
88
Test your Protection Techniques Knowledge!
