In my last post, I mentioned some cool things to come in 2023... so let's gooo! 🙌

In my research analyst role at SANS, I'm running a survey through March 28 on OT/ICS visibility-- and I want to hear from the community! We're looking for experts to share their perspective on IT and OT visibility, #industrial organizations and their SOCs, as well as detection capabilities across IT and OT networks. We'll share the findings in a public report released later this year so everyone can leverage the insights to help improve their OT visibility program.

Link to survey ➡ https://sans.org/u/1pqp

If driving our industry's detection capabilities is not enough incentive for you, don't worry, there's more! All respondents will be entered for a chance to win a $250 Amazon gift card for participating!

#otcybersecurity #otsecurity #ICSCybersecurity #soc #detection

I'm pleased to announce our new paper has been published! This work discusses a technique, and subsequently presents a proof of concept, for scanning for vulnerabilities within PLC control logic. As I've mentioned through numerous talks and work recently, traditional enterprise focused reconnaissance, enumeration, and vulnerability scanning techniques are inadequate against OT and provide very little information on OT-specific vulnerabilities. This tool goes further than typical network scanning to understand where the control logic itself may have vulnerabilities. Read the paper here:

https://www.sciencedirect.com/science/article/pii/S0167404823000263

We hope this work is just the first step in tooling to improve the state of in-PLC vulnerabilities and PLC programming practices, greatly reducing the exploitability of OT moving forward.

#otcybersecurity #icscybersecurity #icssecurity #plcprogramming #cybersecurity

The march to secure critical infrastructure continues. Read the https://twitter.com/IndustCybersec article on the https://twitter.com/USGAO report about #IOT and #OT #security https://industrialcyber.co/reports/gao-report-identifies-need-to-better-secure-iot-and-ot-devices-across-critical-infrastructure/ https://twitter.com/annaribeiro

#infrastructure #iotsecurity #otcybersecurity

Critical infrastructure/OT doesn’t get enough attention - these are the systems that keep society running on a daily basis and where an attack could be catastrophic.
Thanks Dragos Inc. for keeping us all better informed!

https://www.dragos.com/blog/ot-cybersecurity-best-practices-for-smbs-new-dragos-otcert-blog-series/

#threathunting #threatintel #otcybersecurity