War Games: Red Team for OT Based on Real-World Case Studies
Shares tactical insights and attack vectors from a decade of offensive red team simulations inside large-scale industrial control environments.
Summary
Industrial Red Teaming Experience
Executing offensive attack simulations against operational technology (OT) and industrial control systems (ICS) requires specialized methodologies to evaluate cyber-physical resilience without disrupting physical operations.
TTPs and Attack Vectors in Industrial Networks
Analysis of red team engagements across global industrial facilities reveals common tactics, techniques, and procedures used to bridge corporate IT networks into isolated OT enclaves.
Network Propagation and Lifecycle Execution
Attackers leverage protocol weaknesses, legacy trust relationships, and unsegmented engineering workstations to establish command and control across the complete ICS-OT attack lifecycle.
Case Studies in Penetrating Cyber Physical Systems
Real-world case studies illustrate successful penetration of industrial operations, demonstrating how cyber intrusions can directly impact physical process controllers and safety systems.
Related talks
Creator Stage·23 min
Julia Dewitz-Würzelberger
Demonstrates full-chain adversary emulation against a hydroelectric power plant firing range and details the resulting incident response analysis.
Creator Stage·27 min
Mike Holcomb
Traces the convergence between state adversaries, ransomware cartels, and hacktivists targeting industrial control systems and operational technology.
Creator Stage·26 min
Amp · Data
Explores how manipulating maritime rudder angle controllers to violate International Regulations for Preventing Collisions at Sea (COLREGs) causes severe disruption.