Nakatomi Space: Lateral Movement as L1 Post-exploitation in OT скачать в хорошем качестве

Nakatomi Space: Lateral Movement as L1 Post-exploitation in OT

In OT networks, it is common knowledge that Purdue Reference Model Level 1 (L1) devices such as PLCs and RTUs are notoriously insecure. Regardless, L1 devices that sit at the intersection of multiple, mixed networks (Ethernet, Industrial wireless, Fieldbus, etc.) are often still treated as security perimeters without the corresponding hardening and risk profiles that would be accorded to multi-homed workstations in a similar position. In this talk we will examine deep lateral movement in OT networks, looking at various TTPs attackers can deploy to move through the networks of embedded devices that exist at the lowest levels..... By: Jos Wetzels Full Abstract and Presentation Materials: https://www.blackhat.com/asia-23/brie...