This document discusses ICS/SCADA cybersecurity. It introduces the speaker as a security enthusiast with 2 years of ICS experience. It then provides commands to list and view ICS files. The document defines ICS components like sensors, actuators, PLCs, HMIs, and data historians. It lists resources for ICS security training and trends.

1. ICS / SCADA Cyber security
Adithya Naresh
SAP Labs

2. root@kali :-# whoami
• Security Enthusiast
• Been in ICS for 2 years in my
previous employment
• Like to play around with windows
executable

3. root@kali :-# ls -al ICS

4. root@kali :-# cat ICS

5. root@kali :-# sed -n ‘/vendors/p’ ICS

7.  Sensors and actuators
 allow interaction with the physical world (pressure sensor, valves, motors….)
 Local HMI
 Human-Machine Interface, permits the supervision and control of a sub
process
 PLC
 Programmable Logic Controller : manages the sensors and actuators
 Supervision screen
 remote supervision of the industrial process
 Data historian
 Records all the data from the production and Scada networks
 RTU
 Remote Terminal Unit (standalone PLC)

9. run exploit
root@kali :-# echo “Demo Time”

10. root@kali :-# exit ICS
• https://ics-cert-training.inl.gov/ - ICS CERT VLP
• http://www.controlglobal.com/ - Top 50
• https://ics-radar.shodan.io - Shodan
• https://www.defcon.org - Defcon