ICS Security Assessments 101 or How da Fox I Test Dis?

No ratings

Presented at BSides Las Vegas 2022 by

Yael Basurto

We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?