Intro to OT/ICS Penetration Testing (Part 7): Attacking Wireless, PLCs and the Process in OT

Value of the Information & Strength of the Argument

The video provides valuable insights into OT/ICS penetration testing, particularly focusing on wireless attacks and PLC manipulation. The instructor’s extensive experience is evident, and he offers practical advice and real-world examples that enhance the learning value. The argumentation is solid, as he logically explains the attack surface and the importance of understanding the process. He effectively communicates the risks associated with wireless in OT environments and the need for specialized security measures. The content is well-structured and builds on previous parts, making it a coherent part of the course.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates a high level of scientific rigor in the sense that the information is based on practical experience and industry knowledge. However, it lacks formal citations or references to external sources, which limits its academic rigor. The title accurately reflects the content, which is focused on attacking wireless, PLCs, and the process in OT. The content is well-organized and the instructor clearly explains complex concepts. The absence of formal sources is a minor weakness, but the practical nature of the content compensates for it.

The title accurately reflects the content, which focuses on attacking wireless, PLCs, and the process in OT environments.

8/10

The content is based on the author's extensive experience in OT/ICS penetration testing, providing practical insights and real-world examples. The information is technically accurate and aligns with industry knowledge, though it lacks formal citations and peer review.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 00:00Introduction and review of previous parts, emphasizing the importance of understanding OT environments.
• 02:30Discussion on the lack of preparedness for OT attacks and the value of learning from attackers.
• 05:00Explanation of phase one and phase two attacks, and the prevalence of Windows systems in OT.
• 07:30Review of the OT pen testing methodology and the importance of pre-engagement and post-engagement activities.
• 10:00Introduction to the lab scenario with a water tank, explaining coils and registers.
• 12:30Discussion on wireless attacks in OT, including Wi-Fi, Bluetooth, and WirelessHART.
• 15:00Real-world example: Maroochy Shire sewage incident, highlighting the impact of wireless attacks.
• 17:30Risks associated with wireless: interception, replay attacks, jamming, and rogue access points.
• 20:00Use of Wigle.net for reconnaissance of wireless networks in industrial environments.
• 22:30Bluetooth vulnerabilities and the increasing use of tablets and phones in OT environments.

• Wigle.net — Mentioned as a tool for mapping wireless networks, useful for reconnaissance.

• IEC 62443 — Standards for OT security that align with the video's emphasis on securing industrial environments.