OT CT (Ep. 19): The Current OT/ICS Threat Landscape w/ the Drago Year in Review Report

Value of the Information & Strength of the Argument

The video provides valuable insights into the OT/ICS threat landscape, drawing from the Dragos Year in Review report and the speaker’s extensive experience. The argumentation is solid, as it is based on a reputable industry report and practical examples. The speaker effectively communicates the importance of understanding attacker behaviors and the need for proactive defense. However, the analysis is somewhat subjective, and the speaker’s personal anecdotes, while engaging, may not be universally applicable. The discussion of specific attack groups and their tactics is informative, but the lack of detailed technical depth may limit its value for advanced practitioners.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates scientific rigor by referencing the Dragos Year in Review report, a well-regarded source in the OT/ICS cybersecurity community. The speaker also mentions the Verizon DBIR for comparison, adding credibility. However, the video does not provide direct citations or links to the report within the description, which may hinder verification. The title accurately reflects the content, focusing on the threat landscape and the report. The speaker’s personal experiences and opinions are clearly distinguished from factual information, maintaining a reasonable level of objectivity. Overall, the sources are credible, and the content aligns with the title.

The title accurately reflects the content, which focuses on the current OT/ICS threat landscape and the Dragos Year in Review report.

7/10

The video is an expert commentary on the Dragos Year in Review report, providing practical insights and personal experiences. The information is based on a reputable industry report, but the analysis is subjective and lacks independent verification.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction and recap of S4 and BSides ICS conferences.
• 05:00Discussion on the importance of the Dragos Year in Review report and how to access it.
• 10:00Overview of the report's structure, including attack groups and vulnerabilities.
• 15:00Analysis of new attack groups and updates to existing ones, such as Sandworm.
• 20:00Discussion on the trend of attackers moving faster to reverse engineer OT processes.
• 25:00Exploration of the role of AI in accelerating attacks and its implications.
• 30:00Practical advice for defenders, including monitoring threat intelligence and implementing critical controls.
• 35:00Q&A session addressing viewer questions and comments.

• Dragos Year in Review Report — The main report discussed in the video, providing insights into OT/ICS threats.
• Mike Holcomb's Newsletter — Newsletter for OT/ICS cybersecurity content.
• Free OT/ICS Cyber Learning Videos — Free resources for learning OT/ICS cybersecurity.

• Verizon Data Breach Investigations Report — Mentioned as the IT equivalent to the Dragos report, providing similar threat landscape insights.