Skip to content

Scripts and Tools to Help Your ICS InfoSec Journey

Don C. Weber

Cutaway Security founder Don C. Weber reviews open-source tools and custom scripts to safely assess and gather telemetry from live industrial control networks.

Summary

Navigating the Unique Constraints of ICS Security Assessments

Performing security assessments in industrial control environments requires specialized tools and cautious methodologies to prevent disrupting live physical processes.

Curating Open-Source ICS Discovery and Auditing Scripts

Don C. Weber presents a collection of purpose-built scripts and open-source tools developed by Cutaway Security for passive and active OT network analysis.

Safely Interrogating Industrial Protocols

Weber demonstrates utilizing custom Python scripts to poll Modbus, EtherNet/IP, and DNP3 devices without triggering controller fault states or buffer overruns.

A Practical Roadmap for Aspiring OT Security Analysts

The presentation provides guidance and lab setup recommendations for traditional IT security professionals transitioning into industrial cybersecurity.

Related talks

ICS Village·55 min

  • DEF CON
  • ICS / OT
  • Date: Aug 2021
  • Location: Las Vegas

Jamil Jaffer · Ernie Bio · David Etue · Jennifer DeTrani

Cybersecurity leaders analyze the Colonial Pipeline and JBS ransomware attacks, debating mandatory reporting and defensive resilience for critical infrastructure.

ransomwarecritical-infrastructurepipeline-security+2

ICS Village·46 min

  • DEF CON
  • ICS / OT
  • Date: Aug 2021
  • Location: Las Vegas

Sara Fluchs · Vivek Ponnada

Sara Fluchs and Vivek Ponnada introduce the community-driven Top 20 Secure PLC Coding Practices, bringing secure engineering directly into ladder logic.

plcsecure-codingladder-logic+2