SESSION

The worlds of enterprise cyber security and ICS/SCADA systems have converged, and continue to produce new complications as a result. In particular, industrial and critical infrastructure (CI) systems have an increased need to communicate with an ever-expanding array of enterprise IT systems. They do this to conduct updated reporting and monitoring, as well as to maintain continuous operations. The endless stream of critical infrastructure security incidents is only picking up speed, and these attacks often cause considerable physicaldamage to those systems. We often find ourselves in a state of ignorance about the true state of critical infrastructure -- we won’t know what the attack vectors are, let alone how to defend them.

To research this, we surveyed firsthand many real ICS and SCADA systems, performing penetration testing on several of them. We counted the attack vectors present in this real ICS environment. In our presentation, we will share 4 real-world ICS and SCADA examples on Critical Manufacturing. We will also give a behind-the-scenes view (starting with real-world ICS security assessment) based on different ICS/SCADA systems in several CI sectors. Finally, we will provide several attack demos. We recreated these in our lab to demonstrate the attacks against real-world ICS equipment in-depth. We will also review serveral common defense strategies to help secure an ICS environment. We believe that such an analysis will help the enhancement of subsequent defense strategies.