Security in Industrial Control Systems/ SCADA Environments

No ratings

Presented at Bsidesottawa 2015 by

Joe Cummins

SCADA Control System Operators and their Asset Owners face ever-growing challenges of discovering and managing vulnerabilities found within their current embedded controller networks. Existing risk assessment tools fall short of the needs to these environments, while the attacks against these systems is rapidly becoming commonplace. Leveraging recent advances in the use of discreet electronic platforms and specifically crafted scripts, control systems can be effectively mapped, audited, and analyzed to determined efficacy of existing security controls and identification of weakness or vulnerabilities in existing architectures. This presentation will guide the audience through past histories of toolkits and tradecraft used in the performance of Critical Infrastructure Protection assessments, trends and taboo’s related to the current methodologies used to evaluate security measures, and the latest generation of technologies that are being leveraged to provide protection to the ICS ecosystem.