DEF CON 32 - Simulating attacks against hydroelectric power plants - Julia Dewitz-Würzelberger
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 22:42
The video presents a run-of-river hydro power plant cyber attack prototype designed to build awareness and provide forensic training for OT security professionals. 0:54
Key Takeaways:
• The prototype simulates a realistic cyber attack, starting with phishing and progressing to lateral movement and compromise of PLC control systems, including modification of PLC project files to trigger uncontrolled water release 13:50.
• A simulation layer emulates water levels using MQTT, which are projected via a Unity-based visualization system to create a real-time, tangible display of the plant’s state 11:45.
• The system uses a two-layer architecture: a scenario/visualization layer and an underlying ICS layer with PLCs (e.g., Siemens S7-1200) and Raspberry Pi controllers managing logic and actuation 8:00.
• The attack chain includes credential theft, AD enumeration, and manipulation of PLC project files to override control logic, demonstrating real-world OT threat impact 15:00.
• The range includes 15 labs focused on forensic analysis, using tools like Wireshark tailored to OT operators' familiarity 16:52.
This prototype enhances awareness and hands-on training for OT security teams by simulating realistic attack scenarios and operational consequences. 20:06
Sources:
- 0:54 Overview of the project’s goals: awareness and forensic training.
- 13:50 Description of the attack chain from phishing to PLC file manipulation.
- [11:45](https://www.youtube.com/watch?v=O48DBFT02eU&
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
thanks for your patient thanks for your interest in this talk today my colleagues and I Sarah banard and I my name is Julia we will talk about a project that we made together a joint project and we actually created um a run-of river prototype together since fabun is a hydr power energy supplier in [Music] Austria um actually um especially in the field of renewable energy like Hydro power solar power and wind power and maybe you would just want to say a few words about Eno yes hi everybody um Anda is an security uh consulting company from Europe we are mainly focus on financial and Technology um sector and also the governmental and critical infrastructures so um I want to use the moment since this was a team effort to give a shout out to a few people so great thanks to Alex mov Olaf Nichola…