Analyzing and Defending Against TRISIS - Safety Instrumentation Systems Cybersecurity
Dragos: ICS Cybersecurity via YouTube
Overview
Syllabus
Intro
Background: By the numbers
Dragos Timeline
What are Safety Instrumentation Systems?
Safety Systems
Explanation: How it happened
Logic Organization - TriStation 1131
Appending to a Program
First payload is a check payload
Egg Hunt and Overwrite Memory
Appending TRISIS
Program Epilogue
Second Logic Upload - Speculation
Program Compilation
TRISIS Effects
TRISIS - Potential Effects
Explanation: What comes next
Mitigation: How to protect
Mitigation: How to defend
ICS Cyber Kill Chain
Known TRISIS ICS Kill chain
The Four Types of Detection
Types of Detection - TRISIS
Smart Questions to ask
Taught by
Dragos: ICS Cybersecurity