Getting Started in OT/ICS Cybersecurity 2026 (Module 4): What They Don't Say About OT Protocols

Value of the Information & Strength of the Argument

The video provides substantial value by demystifying OT protocols and their security implications. It offers practical insights from the author’s experience, such as finding serial-to-Ethernet gateways with default passwords during penetration tests. The argumentation is solid, explaining why legacy protocols are insecure and how they are adapted to TCP/IP without adding security. The author effectively argues that the most critical vulnerabilities in OT environments stem from protocol design flaws rather than specific CVEs. The use of real-world examples, like the water treatment tank overflow scenario, strengthens the argument. However, some claims are anecdotal and not backed by external sources, but the overall reasoning is coherent and well-structured.

Scientific Rigor, Source Quality, Title Accuracy

The content demonstrates strong technical rigor, with accurate explanations of protocols and network concepts. The author cites his own experience and references industry-standard resources, but does not provide formal citations. The title accurately reflects the content, focusing on OT protocols and their security aspects. The video is well-organized with clear chapters, enhancing its educational value. The author’s credibility is established through his professional background, though the lack of external references limits the verifiability of some claims. Overall, the scientific rigor is high for a tutorial format, but it is not a peer-reviewed source.

The title accurately reflects the content, which focuses on OT protocols and their security implications, including aspects not commonly discussed.

8/10

The content is technically accurate and based on the author's extensive experience in OT/ICS security. It covers fundamental protocols and security risks with practical examples. However, it is a tutorial and not peer-reviewed, and some claims (e.g., about specific attacks) are anecdotal.

• 00:00Introduction to industrial protocols and the backbone of OT networks
• 06:28How older serial protocols work and communicate
• 11:10Overview of Modbus RTU, DNP3, and legacy industrial protocols
• 14:50Client-server architecture in serial communications
• 20:44The cybersecurity risks of serial-to-Ethernet gateways
• 29:00Understanding the OSI Model for industrial networking
• 40:03Packet encapsulation and moving data through OSI layers
• 43:40Introduction to packet sniffing and using Wireshark
• 59:47Where to find ICS and OT packet capture (PCAP) resources
• 1:08:00The dangers of active testing and scanning in production environments
• 1:10:30Deep dive into Modbus TCP, coils, and registers
• 1:21:00Modbus attack simulation using a conveyor belt example
• 1:29:58Analyzing captured Modbus network traffic in Wireshark
• 1:38:00Overview of the Siemens S7 proprietary protocol
• 1:50:14Identifying security risks of Wi-Fi and Bluetooth in OT
• 2:03:34Exploring WirelessHART mesh networks and signal reliability
• 2:08:00Introduction to IIoT middleware: OPC UA and MQTT
• 2:18:30Securing OPC UA data with certificates and encryption
• 2:30:00How the MQTT publisher-subscriber model works

• Course materials — Referenced as access to course materials.
• Mike Holcomb's website — Mentioned for subscribing and further OT/ICS training.

• Modbus Protocol — Confirms the lack of security in Modbus and its widespread use.
• OPC UA — Supports the discussion on securing OPC UA with certificates and encryption.