ICS515 update: whats new in the course and why detection and response in ICS is more important than ever

  • Webcast Aired Friday, 28 Feb 2020 10:30AM EST (28 Feb 2020 15:30 UTC)
  • Speaker: Kai Thomsen

Over the last year we have seen a proliferation of targeting ICS environments as well as an increase of Ransomware and commodity malware disrupting ICS operations. With growing geopolitical tensions, the risk for ICS environments getting targeted in offensive cyber operations is increasing. As many tactics and techniques employed by adversaries leverage inherent capabilities in ICS environments that are necessary for operations, monitoring for threats in these environments and knowing how to respond is becoming more important. On the other hand, methodologies and techniques that can be applied for more effective defense have recently been developed, e.g. the Mitre ICS Attack Matrix.

In the webcast Kai will point out some key findings on ICS threats in 2019 and give an overview of the recent additions to the ICS515 course covering newly developed methods enabling defenders to become more effective in focusing their efforts on detecting and responding to adversaries in their ICS environments.