BSidesSLC 2017 -- Bri Rolston -- If System = ICS, Then Pwn4g3 is Greater Than Root
Channel: BSidesSLC
Date: 2017-07-03

Got root? Great. Got physics? No? Defender wins. Total pwn4g3 of an Industrial Control System (ICS) requires more than rooting a system. Successful attacks require 2 payloads, one to control the technology and one to control the process. ICS attacks are therefore more complex attack strategies, different tool kits, and more time to implement. They also lead to more mistakes. (Hacker foo and practical physics rarely play well together the first time they meet!) What happens when mistakes are made during an ICS attack? *Physical changes to closely monitored processes *Repeated errors interrupting normal automation operations *An unusual occurrence of defensive advantage Let's talk about how ICS attacks are planned, common signs attackers are developing the physics payload, and how to defend the process.