Description
BPB Publications Ethically Hacking an Industrial Control System by Sharon Ferrone
Explore to tackle industrial cyber risksKey Features● Learn how to defend industrial control systems from an attacking standpoint.● Learn about industrial network protocols and threat hunting.● Handling of tackle industrial cyber risks● Develop offensive and defensive skills.DescriptionIn recent years, the industrial cybersecurity arena has risen dramatically. Red teams must be used to continually test and exploit the security integrity of a company's people, processes, and products in order to completely safeguard critical infrastructure. This pen testing book takes a different approach than most by assisting you in gaining hands-on experience with equipment you'll encounter in the field. This will allow you to comprehend how industrial equipment interacts and functions in a real-world setting.This book begins by covering the fundamentals of industrial processes, then goes on to learn how to design and break them. It also includes obtaining open-source intelligence to develop a dangerous environment for your potential customer. You'll learn how to install and employ offensive tactics used by skilled hackers as you go. Before eventually launching assaults against systems in an industrial network, you'll learn about industrial equipment, port, and service discovery, pivoting, and much more.You'll not only know how to evaluate and navigate the nuances of an industrial control system (ICS) by the conclusion of this penetration testing book, but you'll also have gained crucial offensive and defensive skills to proactively safeguard industrial networks from current assaults.What you will learn● Set up an ICS lab with both physical and virtual equipment using a beginning kit.● Perform pre-engagement open-source intel collection to aid in the mapping of your attack landscape.● Learn how to do penetration testing on industrial equipment using Standard Operating Procedures (SOPs).● Recognize the necessity of listening to customer networks and the concepts of traffic stretching.● Learn the fundamentals of ICS communication.● Connect engineering workstations and supervisory control● Connect data acquisition (SCADA) software to physical operational technologies.● Learn how to map web-based SCADA solutions using directory scanning tools.Who this book is forThis book is intended for an ethical hacker, penetration tester, automation engineer, or IT security expert who wants to keep industrial networks safe from intruders. You'll get the most out of this book if you have a basic grasp of cybersecurity and recent cyber incidents.Table of Contents1. Using Virtualization2. Route the Hardware3. I Love My Bits: Lab Setup4. Open-Source Ninja5. Span Me If You Can6. Packet Deep Dive7. Scanning 1018. Protocols 2029. Ninja 30810. I Can Do It 42011. Whoot… I Have To Go Deep