01
Module 1: Fundamentals
1.01 Introduction – ICS and CPS Cybersecurity 101
- Common terms IT, OT, IOT, IIOT
- Current Trends in Industrial Technologies
- The Cyber-Physical Challenges\
- Cybersecurity in the context of CPS: Basic Terms and Concepts CIA vs SRA; Cyber Threat vs Cyber Risk; Controls - People, Technology, Operations; Prevention, Detection, Response; Zero Trust; Compartmentalization; Least privileged; Authentication and access control; Defense-in-Depth…
- Current Threats/attacks for CPS (MITRE ATT&CK and MITRE ATT&CK for ICS)
- The ICS Cyber kill chain to achieve a full compromise, mapped to MITRE TTPs, to demonstrate defense in depth. Based on real-world attacks
1.02 OT/ICS Environment explained.
- Introduction to ICS architecture
- ICS Edge components: RTU, PLC, IED, IIoT, HMI, Eng. Station
- SCADA Communication Topology and protocols
- DCS Network
- The Purdue Model
- Defensible network architecture, data diodes and data cleansing
- IoT reference architecture
1.03 ICS Cyber Kill chain
- Attacker’s Perspective – “Let there be Light” exercise.
- ICS Cyber kill-chain
- ICS MITRE Att&CK framework
- Preparations - Lab environment explained.
- Hands-on lab: OT Reconnaissance and Discovery
1.04 ICS/CPS Fundamentals: Summary & Review