Building an ICS Firing Range in Our Kitchen
Nico Leidecker and Moritz Thomas share how they engineered a portable, physical ICS cyber firing range with real PLCs, HMIs, and bridge models in their kitchen.
Summary
The Necessity of Realistic Hands-On ICS Training
Developing elite ICS offensive and defensive skills requires hands-on experience with physical hardware, but commercial industrial training testbeds are prohibitively expensive.
Engineering a Portable Physical Cyber Range
Nico Leidecker and Moritz Thomas detail constructing a modular ICS firing range featuring real PLCs, industrial network switches, and custom motorized bridge models.
Integrating Red and Blue Team Simulation Scenarios
The creators walk through simulated attack scenarios, including Modbus command injection, firmware tampering, and defensive monitoring with open-source tools.
Open-Source Hardware and Software Blueprints
The authors provide schematics, bill of materials, and configuration guides for researchers to build their own budget-friendly OT simulation testbeds.
Related talks
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·18 min
Moritz Abrell
Hardware and software reverse engineering of an industrial VPN gateway revealing critical flaws in its remote maintenance pipeline.