Industrial Control System Cybersecurity Education
Channel: Matthew Luallen
Date: 2016-04-02

Critical Infrastructure and Control System Cybersecurity with the CybatiWorks Mini Kit.  An introduction to the online control system cybersecurity course provided by CYBATI.

• Roadmap and Overview
• Course Ethics and General Security Awareness
• Critical Infrastructure Control System Cybersecurity Background
– Brief History of Critical Infrastructure and Control Systems
– Risk Management (Threats, Vulnerabilities and Exploits)
– Laboratory: Training Kit Orientation and Setup

• Control System Cyber Architecture and Device Programming
– Control System Cyber Architecture Components
– Programmable Logic Controllers, Ladder Logic, Points and OPC/HMI
– Laboratory: Introduction to Programmable Logic Controllers, Logic, Communications and OLE for Process Control (OPC) / Human Machine Interface (HMI) Programming

• Cyber Asset Vulnerability Assessments
– Case Study Review and Analysis (e.g. Bellingham Gas Pipeline; BP Texas Refinery; Washington DC Metro)
– ICS-CERT Vulnerability Notification Review and Analysis 
– Open Source Intelligence (OSINT)
– Cyber, Physical and Operational Security Assessments
– Cyber Toolsets
– Laboratory: PLC Vulnerability Assessments
– Laboratory: Analyze and develop control system oriented Metasploit modules 
– Laboratory: Mock Environment Analysis (i.e. Traffic Light) 

• Automation Technologies Attack Surface and Mitigations
– Programmable Logic Controller Analysis
– Mitigating Controls
– Laboratory: Blackbox Network Discovery
– Analyzing Control System IEDs
– Laboratory: Applied Vulnerability Security Analysis 

• OLE for Process Control / Human Machine Interface Attack 
Surface and Mitigations
– OPC / HMI Analysis
– Mitigating Controls
– Laboratory: OPC/HMI Exploit Analysis and Control

• Communications Attack Surface and Mitigations
– General Communications Protocol Analysis
– DNP3, IEC Variants, ICCP, Modbus Specific Protocol Analysis
– Vulnerabilities and Exploits
– Analyzing Wireless in Control Systems
– Mitigating Controls
– Laboratory: Communications Exploit Analysis and Control 
– Laboratory: Protocol Spoofing and Fuzzing 
– Laboratory: Communications Visualization 


• Integrated Defense in Depth Security Controls
– Layered Operational, Cyber and Physical Controls
– Forensics and attribution in control systems
– Performing Physical-Cyber-Operational Assessments and Penetration Tests
– Laboratory: Integrated Security Preparedness 
– Situation Awareness and Incident Response
– Laboratory: Blackbox Active Defense