DEF CON 32 - War Games Red Team for OT Based on Real World Case Studies- Shishir Gupta

In this talk, Shishir will share some critical insights from performing a decade worth of Red Team (attack simulation) exercises for large-scale industrial operations across the globe. The presentation will also cover real-world examples of attack vectors leveraged by Google's Mandiant Red Team while performing offensive security exercises for operational technology and control system environments. This talk will cover: Insights into common TTPs and attack vectors for large-scale industrial networks Network propagation and mission execution across ICS-OT attack life-cycle Examples from real-world case studies of penetrating cyber-physical systems