MITRE ICS ATT&CK
Introduces the MITRE ATT&CK for Industrial Control Systems knowledge base and its application to threat modeling.
Summary
MITRE cyber security engineer Marie Otis introduces the MITRE ATT&CK for Industrial Control Systems (ICS) framework in the ICS Village, explaining how it models adversary behaviors targeting operational technology and physical engineering processes [00:00, 00:03].
Otis contrasts enterprise IT threat modeling with the physics-driven operational reality of industrial control networks, demonstrating how adversary objectives center on manipulating physical variables, disrupting safety systems, and altering device logic [04:52, 05:01]. She provides practical use cases for the framework, illustrating how asset owners use ATT&CK for ICS to conduct risk assessments, design realistic adversary emulation scenarios, map telemetry from proprietary PLC protocols, and structure tabletop incident response exercises [09:21, 14:00, 18:32].
(AI summary — Gemini Flash)
Related talks
ICS Village·31 min
Joe Slowik
Analyzes how sophisticated adversaries design malware to target industrial physical processes and induce mission kills.
