Presentación realizada en el evento EuroHeat Power Congress (Glasgow) sobre riesgos y amenazas en el sector industrial.

1. Cyber Threats on the
Industrial Environment
Eduardo Arriols Nuñez

2. 1. Cyber Threats
2. Security Research
3. Conclusions

3. Cyber Threats

4. ¿What is a Cyber Threat?
Everyone knows about traditional threats but…
¿How many of you know all the real threats and risks on your company?

5. Risks associated with IoT
IT Network
Industrial Network

6. IoT = Simple to vulnerate

7. Security Research

8. 1. Introduction
2. Control of the building
3. Organizations affected
4. Advanced actions

9. 1. Introduction
2. Control of the building
3. Organizations affected
4. Avanced actions

12. Building Management System (BMS)
IntegratorsManufacturers

13. 1. Introduction
2. Control of the building
3. Organizations affected
4. Avanced actions

14. Find a backdoor: Existence of valid users in the system that were
not in the documentation.
• guest / *****
• test / ****
• demo / ****
1
Attack vector
Read access to BMS: Access to the BMS only with read
permissions.
2

15. Access to BMS configuration: Access with read permissions to
system users and their encrypted passwords.
3
Attack vector

16. Identification of libraries: Access and download of BMS core
libraries with encryption and decryption functions.
4
Attack vector

17. Password decryption: Simple script for recovering the credentials
obtained before.
5
Attack vector

18. Access as administrator: Use of users and credentials obtained.6
Attack vector

19. 1. Introduction
2. Control of the building
3. Organizations affected
4. Advanced actions

20. Identification of vulnerable buildings

21. Private companies

22. Banks

23. Hospitals

24. Airports

25. Industrial companies

26. Government buildings

27. Demo time

28. 1. Introduction
2. Control of the building
3. Organizations affected
4. Advanced actions

29. Advanced actions
Signal alteration
Automation of all actions
Access to industrial network of the building
Access to internal network of company
Launch advanced and targeted attacks on a city

30. Conclusions

31. New technology
New threats
Evolution of threats
New security
checks

32. The Red Team exercise is the most specialized intrusion service that simulate a targeted
attack from an adversary mindset. The exercises allows the company to identify their global
security level, as well as the level of prevention and protection against targeted threats.
The only way to identify the global security and the Blue Team capabilities
is simulate a real but controlled attack
Red Team Operations
DIGITALSECURITY
SOCIAL ENGINEERING
PHYSICALSECURITY
OFFENSIVE INTELLIGENCE

33. ¿Questions?
Eduardo Arriols Nuñez
eduardo_arriols@innotecsystem.com
@_Hykeos