OT Penetration Testing Framework Reconsidered

No ratings

Presented at ICSCyberSecurityConference 2020 by

Matan Rudis

Penetration testing in OT environments is a developing concept. Yet while organizations understand the importance of validating their security measures and controls, most still push back on PT, fearing that the test might cause disruption or damage. In this session, we will share with the audience a new approach to industrial pen-testing. Using this impact-first framework, pen-testers are able to plan, perform and measure industrial pen-testing. The framework involves logically analyzing the different attack routes towards the goal and balancing pen-tests, lab tests and other security assessments into one package. The presentation will include several use-cases and examples along with actionable recommendations.