The order has been given; it's time to take down a critical infrastructure ICS. To do this reliably the weapon needs to be in place, and communications need to be there to send the signal to start the attack. In this session, Mr. Peterson will discuss the steps and techniques to deploy an ICS cyber weapon in a way that is available but not detected. Organizations will be deploying large numbers of these weapons in ICS of interest, and they may dormant for years. In fact like kinetic weapons, most ICS cyber weapons will never be used. Communication, preferably through a channel controlled by the attacker, is necessary to monitor, update and potentially activate the weapon. The session will include the characteristics of a command and control channel and techniques that could be used to establish and maintain the channel.