OSIsoft User Conference Cybersecuring Control Systems Workshop
The Cybersecuring Control Systems Workshop is geared to help architects, engineers, contractors, owners, facility managers, maintenance engineers, physical security specialists, information assurance professionals—essentially anyone involved with implementing cybersecurity in the Control System(CS) life cycle—to learn the best practice techniques to better protect theirCS.
The workshop provides a combination of classroom learning modules to teach control system basics, protocols, how to use the NIST Risk Management Framework and the Cybersecurity of Facility-Related Control Systems Design Guidance, and hands-on laboratory exercises using tools and methods to inventory, diagram, identify, attack, defend, contain, eradicate and report a cyber event/incident. This includes understanding and practicing hacker and defender techniques for footprinting, scanning and enumeration, exploitation, and post exploitation clean up and maintain persistence. Attendees will see how hackers use exploit tools to gain entrance into the control system, pivot through the network, establish beacon command and control channels, modify logs to mask presence, and exfiltrate data.Attendees will alsolearn how to use the Advanced Control System Tactics, Techniques, and Procedures (TTPs) developed by the U.S. Cyber Command (USCYBERCOM) to create a Recovery Jump-Kit to find and eradicate malware and exploits using tools such as MalwareBytes, Microsoft Internals Suite, and OSForensics to perform data collection for forensics.
0800-0900 Unit 1 Overview of Control Systems, Networking and Communication Protocols, NIST/SANS/ISA/ISSO Standards & Drivers
0900-1015 Unit 2 Hacker Methodology
1030-1115 Unit 3 UFC 4-010-06 Cybersecurity of Facility-Related Control Systems
1115-1200 Unit 4 Overview of ICS-CERT CSET tool
1300-1330 Unit 5 Advanced Control System Tactics, Techniques, and Procedures
1330-1400 Unit 6 Control System Forensics
1400-1430 Unit 7 Acquisition and Procurement Language for Control Systems, Wrap Up Q&A
Locations: OSIsoft Users Conference, March 20, 2017, San Francisco, CA