Design Your Defense: Using D3FEND for OT to Uncover Gaps in Your Architecture

Much like MITRE ATT&CK has done for collating attacker methods, D3FEND was built to fundamentally describe the assets and subsequent countermeasures vital for defense. D3FEND is the natural continuation of describing what's next in reacting to threats or proactively protecting your key systems and data. D3FEND for OT builds upon the understanding that operational environments have their own unique cybersecurity properties and methods. This session will introduce attendees to the D3FEND ontological approach and tools associated with modeling computers, devices, networks, and any associated flows. It will highlight how defenders can model their security scenarios and how it may differ between the environments they are tasked with protecting.