DEF CON 33 - The Worst ICS/OT Love Story Every Told - 2025 Mike Holcomb
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 26:07
This presentation demonstrates how non-developers can leverage ChatGPT to quickly create effective cybersecurity tools for OT/ICS environments.
Key Takeaways:
• The speaker's OT security interest began after studying Stuxnet, which physically damaged equipment while deceiving operators
• His master's thesis involved creating a system to monitor PLC run modes, leading to discovery of ChatGPT's potential for non-developers
• Using ChatGPT, he rapidly created practical tools including an OT protocol port scanner, asset inventory scripts, and functional honeypots
• When working with ChatGPT, use an iterative approach - build one feature at a time rather than attempting complex multi-feature tools
AI tools like ChatGPT democratize security tool development, allowing non-programmers to create customized solutions for critical infrastructure protection.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hi everybody. I appreciate everybody for coming. I uh appreciate I feel bad for Tony getting sick. I was actually just going to talk on Sunday. Tony Turner was going to be here and talk about uh OT. I think he was doing network segmentation and using it to protect OT or IC environments and got sick. So I filling in. So I appreciate everybody for coming. This is actually a talk that I did at Bsize IC this year. So most of you are probably familiar with Bsize IC, right? Show of hands, right? Um and so we actually started this year uh the IC or OT specific version of BCIT uh and uh had a great turnout and then we're actually going to see a couple of uh other spin-ups uh across the uh world next year which is really exciting like in Singapore and Belgium we'll be back in Miami next year with B…