Slide 1: Adapting to the Latest Cyber Threats to ICS/OT
Adapting to the Latest Cyber Threats to ICS/OT Integrating Continuous Security Testing into the Purdue Model Advanced services and solutions for the world’s most difficult environments and business problems.
Slide 2: About Today's Speaker
About Today’s Speaker - Adapting to the Latest Cyber Threats to ICS/OT Christian Scott PLCS Practice Leader • 20+ Year of Technology & Cybersecurity Expertise • Original background in software development, systems engineering, cybersecurity program management and offensive cybersecurity testing • “W
Slide 3: The Current OT Threat Landscape
The Current OT Threat Landscape • In Fortinet’s recent OT security report, they found that nearly one-third of respondents had suffered six or more security intrusions, up from 11% in 2023. They also found that all types of intrusions increased in 2024 with the exception of malware which remained re
Slide 4: What Are The Key Drivers Behind OT Cyber Intrusions?
What Are The Key Drivers Behind OT Cyber Intrusions? The State of ICS/OT Cybersecurity 2024 report from SANS is based on responses from cybersecurity professionals in various critical infrastructure sectors. The survey results provide insights into the key attack vectors and root causes behind those
Slide 5: The Purdue Model & OT Security
The Purdue Model & OT Security • The Purdue model, part of the Purdue Enterprise Reference Architecture (PERA), defines a standardized ICS network structure that supports OT security. • By dividing the ICS architecture into six hierarchical zones, it maintains a controlled flow of data between IT an
Slide 6: The Most Common Exploited OT Vulnerabilities & Weaknesses
The Most Common Exploited OT Vulnerabilities & Weaknesses In their 2024 Digital Defense Report, Microsoft identified and disclosed over 300 vulnerabilities to suppliers through their OT application review initiative. The most common security vulnerabilities they identified, prioritized by risk and i
Slide 7: Practical Defensive Tip #1
Practical Defensive Tip #1: Map Your Organization’s External Attack Surface For Vulnerable OT Systems On a Regular Basis • To help prevent two of the top three most common OT initial intrusion vectors (compromised IT networks and Internet accessible devices) it’s important to go beyond conventional
Slide 8: Practical Defensive Tip #2
Practical Defensive Tip #2: Configure Your Security Solutions To Block Unauthorized RMM IT Tools With The Company • Malicious actors continue to increase their evasion capabilities by leveraging the same remote monitoring and management (RMM) tools that IT departments use to support IT and OT system
Slide 9: Practical Defensive Tip #3
Practical Defensive Tip #3: Implement OT Specific Continuous Security Testing Tools Like MITRE Caldera • MITRE Caldera is an open-source tool for simulating adversarial tactics, techniques, and procedures (TTPs) in a controlled environment. • It leverages the MITRE ATT&CK framework to provide automa
Slide 10: MITRE Caldera Use Case
MITRE Caldera Use Case: Simulating system intrusions from IT networks into OT systems in a way that tracks across the Purdue Model and MITRE ATT&CK Framework. Reference(s): https://github.com/mitre/caldera © 2024 Plurilock Security Inc. — Page 10 https://github.com/mitre/caldera-ot
Slide 11: MITRE Caldera Use Case
MITRE Caldera Use Case: Simulating system intrusions from IT networks into OT systems in a way that tracks across the Purdue Model and MITRE ATT&CK Framework. Reference(s): https://github.com/mitre/caldera © 2024 Plurilock Security Inc. — Page 11 https://github.com/mitre/caldera-ot
Slide 12: MITRE Caldera Use Case
MITRE Caldera Use Case: Simulating system intrusions from IT networks into OT systems in a way that tracks across the Purdue Model and MITRE ATT&CK Framework. Reference(s): https://github.com/mitre/caldera © 2024 Plurilock Security Inc. — Page 12 https://github.com/mitre/caldera-ot
Slide 13: Thank You For Your Time!
Thank You For Your Time! Contact us today. +1 (888) 282-0696 (USA West) +1 (908) 231-7777 (USA East) +1 (866) 657-7620 (Canada) info@plurilock.com Advanced cybersecurity and Zero Trust Security assessments and consulting IT products and solutions Professional services Managed services
Slide 14: Service Catalog for a Changing World
Advanced Solutions for Service Catalog for a Changing World Critical Business Problems IP Protection (IP3) Zero Trust (ZTA) Plurilock delivers the expertise and capabilities you need in a world of ▪ Insider Threat Management ▪ Zero Trust Architecture Design & increasing risk—quickly. ▪ Data Loss Pre