Fortifying ICS: Hardening and Testing
Dieter Sarrazyn outlines practical methodologies for embedding cybersecurity requirements, system hardening, and acceptance testing into industrial upgrade projects.
Summary
Integrating Security into Industrial Engineering Projects
Industrial control environments frequently undergo expansions, software upgrades, and hardware retrofits where cybersecurity is treated as an afterthought.
Defining Measurable Security Requirements
Dieter Sarrazyn presents structured frameworks for establishing cybersecurity baselines during the initial project procurement and specification phases.
Executing Practical Hardening on OT Assets
Sarrazyn details hardening steps for HMIs, engineering workstations, and network switches—including disabling unneeded services, closing default ports, and enforcing role-based access.
Factory and Site Acceptance Security Testing
The author provides test plans for conducting security verification during Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) before production commissioning.
Related talks
ICS Village·22 min
Otis Alexander
Otis Alexander analyzes the MITRE ATT&CK Evaluations for ICS, demonstrating why detection context and operational telemetry are vital for industrial defense.
BSides Canberra 2025·55 min
JS investigates Protecting the Forest, Starting at the Roots: AD Hardening & Defence using Modern Techniques.
Videos·35 min
Robert Wagner
Engineers explore architecture and security mechanisms for Robert Wagner - Free Blue-Team TTPs: Stop Shiny Object Syndrome.