The most of the time security assessments, penetration tests or red teaming activities at Oil &Gas plants focus on core processes and their vulnerabilities. What if attacker leverage supportive processes such as power or steam load shedding, decontamination, pipeline operations etc. During this talk we will walkthrough how to exploit and defend process vulnerabilities with real world scenarios. And also, we will discuss how to create use cases and basic simple defense mechanisms to enable OT-SOC.

Speakers:
Can Demirel, @secandit, ICS Cyber Resilience Services Manager, Cyberwise
Yusuf Yılmaz Akdemir, Independent Researcher