Contact Us   |   Your Cart   |   Sign In   |   Join
Advanced Cybersecuring Building Control Systems Workshop (January)
Tell a Friend About This EventTell a Friend
 

This new Advanced Workshop, sponsored by the National Institute of Building Sciences, is geared towards building and information assurance professionals who have experience in IT or control systems cybersecurity but need to learn how to apply those skills to building control systems. This Workshop will provide a more technical, in-depth training solution geared towards developing security professionals with the ability to approach security with an attacker mentality.

1/22/2015
When: Thursday, January 22, 2015
8:00 AM until 5:00 PM
Where: National Institute of Building Sciences
1090 Vermont Ave., NW
Suite 700
Washington, District of Columbia  20005
United States
Presenter: Michael Chipley


Online registration is closed.
« Go to Upcoming Event List  

DATE CHANGE: (Formerly 12/4/14)

The nation’s buildings are increasingly relying on building control systems (otherwise known as operational technology) that are Internet-enabled. These systems provide critical services that allow a building to meet the functional and operational needs of building occupants, but they can also be easy targets for hackers and people with malicious intent. Attackers can exploit these systems to gain unauthorized access to facilities; cause physical destruction of building equipment; be used as an entry point to the traditional informational technology (IT) systems and data; and expose an organization to significant financial obligations to contain and eradicate malware or recover from a cyber event.

This Advanced Workshop, sponsored by the National Institute of Building Sciences, is geared towards building and information assurance professionals who have experience in IT or control systems cybersecurity but need to learn how to apply those skills to building control systems. This Workshop will provide a more technical, in-depth training solution geared towards developing security professionals with the ability to approach security with an attacker mentality. This includes understanding and practicing techniques for footprinting, scanning and enumeration, exploitation, post exploitation, containment and eradication and reporting. Students will use Kali Linux and other exploit tools to gain entrance into the control system, pivot through the network, establish beacon command and control channels, modify logs to mask presence and exfiltrate data. Students will then contain and eradicate the exploit and prepare artifacts, event logs and develop an incident report.

The Workshop is built around Executive Order 13636—Improving Critical Infrastructure Cybersecurity, issued on February 19, 2013; the National Institute of Standards and Technology (NIST) Cybersecurity Risk Management Framework, issued  on February 12, 2014; the draft NIST Special Publication (SP) 800-82 Rev. 2 Industrial Control Systems Security Guide, to be issued in April 2014; and the draft U.S. Department of Homeland Security (DHS) Interagency Security Committee "Securing Government Assets through Combined Traditional Security and Information Technology” White Paper. These new requirements will have a transformational impact on the traditional building design, construction, operation and protection of building control systems and will require facility and information assurance professionals to learn building control system cyber skills.  For more information, see the Whole Building Design Guide Cybersecurity Reference page.

Students will need a laptop with administrative privileges to load software. Course content, tools and lab exercises will be provided on a CD at the beginning of the Workshop.

The Workshop will be held at the National Institute of Building Sciences, 1090 Vermont Ave NW, Suite 700, Washington, DC 20005-4950.

The Institute is offering this Workshop to participants at a discounted rate of $600 (50% off the full Workshop price of $1,200). Enter the discount code CYBER50 at check out to receive the discount. The Workshop is limited to 20 students.

Workshop Overview

 

Classroom: Hacker Methodology

Lab: Footprinting using Google Hacking, Shodan, Kali Linux and SamuraiSTFU

Classroom/Lab: Scanning and Enumeration using NMAP, WireShark, Sophia, SCAP and STIGS

Classroom: Advanced Meter Infrastructure Attack Methodology, AMI Penetration Testing

Lab: Using SamuraiSTFU ModbusPal Emulator, Packet Capture for Control System Analysis

Lab: Exploitation using Metasploit, SamuraiSTFU

Lab: Privilege Escalation

Classroom: Post Exploitation and Wrap Up

 

Instructor: Michael Chipley, PhD, GICSP, PMP, LEED AP

Community Search
Latest News
Calendar

9/28/2016
BSSC Webinar: Response Spectrum Analysis/Linear Response History Analysis

10/4/2016
Workshop: Your Building Control Systems Have Been Hacked, Now What?

10/12/2016
Workshop: Zeroing in on Schools: Transforming New and Existing K-12 Buildings to Zero Energy

10/18/2016
Introduction to Cybersecuring Building Control Systems Workshop (October 2016)

10/19/2016
Advanced Cybersecuring Building Control Systems Workshop (October 2016)