New portable hands-on industrial control system cyber security training kit and course

New course material from Cybati has been used in FBI and university training programs, and is now available commercially.

09/26/2011


Distributed control and SCADA systems provide automation for such critical infrastructure as the bulk electric grid system, natural gas and oil distribution, transportation, fresh water/waste water, manufacturing, food, and defense. Many control systems are electronically connected to networks of less trust, potentially even a slight distance away from the Internet. It is paramount to the safety of our society to understand the architecture of these systems and how to protect them.

The Cybati three-day hands-on course, Critical Infrastructure Control System Cyber Security, is a real-world training session for intermediate to advanced programmers, cyber professionals, and engineers covering control system vulnerabilities, threats, and mitigating controls. This course provides hands-on analysis of DCS and SCADA environments, allowing participants to understand the impacts of attacks like Stuxnet, and supporting mitigating controls as defined in the NERC reliability standards, Department of Homeland Security CFATs, and other industry and government based recommended controls, such as ISA, NIST, NNSA, IEC, NRC, EPA, INGAA, FDA, and CPNI.

Participants learn control system cyber architecture, ladder logic programming, cyber vulnerability assessments, and attack surface analysis, along with mitigating physical, cyber, and operational controls. Hands-on laboratories include attacking and protecting PLCs and other control system hardware. Participants perform actual man-in-the-middle injections leading to false operator displays, rogue PLC administration, and automation and safety-system ladder logic analysis to identify potential failure models and mitigating controls.

Matthew E. Luallen, Cybati co-founder and president says, “Recent events such as Stuxnet, and exploits and vulnerabilities discussed at conferences such as Blackhat and Defcon are a concern to any modern society. This hands-on training environment and course material allows participants to focus on the vulnerabilities associated with control systems, tactically understand the risks and identify security controls. The control system training kit and courseware provides real world examples of cyber security risks and controls that can help asset owners protect their investment.”

Watch a video of DePaul University students who have completed a similar course.

https://cybati.org/

Edited by Peter Welander, pwelander@cfemedia.com



No comments
The Top Plant program honors outstanding manufacturing facilities in North America. View the 2015 Top Plant.
The Product of the Year program recognizes products newly released in the manufacturing industries.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
2015 Top Plant: Phoenix Contact, Middletown, Pa.; 2015 Best Practices: Automation, Electrical Safety, Electrical Systems, Pneumatics, Material Handling, Mechanical Systems
A cool solution: Collaboration, chemistry leads to foundry coat product development; See the 2015 Product of the Year Finalists
Raising the standard: What's new with NFPA 70E; A global view of manufacturing; Maintenance data; Fit bearings properly
Special report: U.S. natural gas; LNG transport technologies evolve to meet market demand; Understanding new methane regulations; Predictive maintenance for gas pipeline compressors
Cyber security cost-efficient for industrial control systems; Extracting full value from operational data; Managing cyber security risks
Drilling for Big Data: Managing the flow of information; Big data drilldown series: Challenge and opportunity; OT to IT: Creating a circle of improvement; Industry loses best workers, again
Migrating industrial networks; Tracking HMI advances; Making the right automation changes
Understanding transfer switch operation; Coordinating protective devices; Analyzing NEC 2014 changes; Cooling data centers
Upgrading secondary control systems; Keeping enclosures conditioned; Diagnostics increase equipment uptime; Mechatronics simplifies machine design

Annual Salary Survey

After almost a decade of uncertainty, the confidence of plant floor managers is soaring. Even with a number of challenges and while implementing new technologies, there is a renewed sense of optimism among plant managers about their business and their future.

The respondents to the 2014 Plant Engineering Salary Survey come from throughout the U.S. and serve a variety of industries, but they are uniform in their optimism about manufacturing. This year’s survey found 79% consider manufacturing a secure career. That’s up from 75% in 2013 and significantly higher than the 63% figure when Plant Engineering first started asking that question a decade ago.

Read more: 2014 Salary Survey: Confidence rises amid the challenges

Maintenance and reliability tips and best practices from the maintenance and reliability coaches at Allied Reliability Group.
The One Voice for Manufacturing blog reports on federal public policy issues impacting the manufacturing sector. One Voice is a joint effort by the National Tooling and Machining...
The Society for Maintenance and Reliability Professionals an organization devoted...
Join this ongoing discussion of machine guarding topics, including solutions assessments, regulatory compliance, gap analysis...
IMS Research, recently acquired by IHS Inc., is a leading independent supplier of market research and consultancy to the global electronics industry.
Maintenance is not optional in manufacturing. It’s a profit center, driving productivity and uptime while reducing overall repair costs.
The Lachance on CMMS blog is about current maintenance topics. Blogger Paul Lachance is president and chief technology officer for Smartware Group.
This article collection contains several articles on the vital role that compressed air plays in manufacturing plants.