Overview
| PCIP Class 1 | PCIP Class 2 | PCIP Class 3 | Prerequisites
PCIP Class 2 - CIP Technical Course
Being able to properly design, implement, and manage your
system security architecture is a key component of every successful
security program. However, critical infrastructure systems,
which include SCADA (Supervisory Control and Data Acquisition),
DCS (Distributed Control Systems), EMS (Energy Management
Systems), Emergency Response 911 systems, Telecommunications
networks, or other high availability, mission critical environments
require different management and security considerations than
a traditional IT environment. Sometimes, these systems, applications,
or code may be so out-dated, proprietary, or vendor-dependant
that administrators are not able to maintain the necessary
security safeguards. It is also possible that implementing
a security safeguard could turn out to be more disastrous
than the risk itself due to unforeseen system impacts. As
these, previously isolated, environments begin merging with
IP-based networks, they are becoming susceptible to new vulnerabilities.
Some of these vulnerabilities have been discounted as outdated
in the IT world, when, in reality, they can still wreak havoc
in older critical systems environments. These environments
also present a different category of vulnerabilities that
traditional safeguards designed for IT environments are not
equipped to handle.
This class will address these complexities. Students will
study the complete lifecycle of a security threat including
both basic and highly advanced techniques used by hackers.
This advanced level of knowledge is a key component in a complete
security program and these techniques are a distinguished
skill set, which only a small percentage of IT, and even security,
professionals carry. Students will gain a detailed understanding
of vulnerabilities as they exist within each of the critical
infrastructure sectors and how to safeguard against them safely
and properly. This class goes beyond industry “best practices”
and is tailored specifically with the critical infrastructure
environment in mind as it aims to bridge the age-old gap between
these environments and traditional IT environments. This is
a challenging, fast-paced class taught in an interactive,
hands-on, learning environment. The last two periods of the
course are taken up with an examination, consisting of nine
questions that test the major concepts taught on the course.
Students prepare short narrative answers (no more than 10
minutes per question) that are scored on both content and
argument.
While
it is recommended to take the Program course first in the
series, candidates may opt to attend the PCIP Class 2 CIP
Technical Course beforehand. However, both the Program and
Technical Courses must be completed before the PCIP Class
3 CIP Applied Course may be undertaken.
Click
here
for pricing. Textbooks, breakfast and luncheon meals, all
courseware materials, and take-home CDs containing tools used
in class are included in the cost
Course
Outline:
|
- CIP
Model Review
- Critical
Assets (Technical)
- IT
Refresher / Overview
-
SCADA / DCS Overview
-
Sector-Specific Technology
-
SCADA / DCS within specific sectors (Oil/Gas, Utility, Transportation, Manufacturing)
-
Digital and Analog I/O
-
Smart Transmitters
-
RTUs vs. PLCs vs. IEDs
-
RS-232, RS-485, and RS-422
-
Typical Communication Protocols, Including
TCP/IP Ethernet Protocols
-
Profibus, Fieldbus, Hart, Modbus Plus, and
Other Field Buses
-
Other technologies within specific sectors
-
Tracking Systems
-
Electronic Supply Chain Technology
-
SAP, Oracle, and ERP Systems
-
Bar Code Scanning
-
RFID
-
GPS
-
Funds Tracking Technologies (Cash, Checks,
Credit Cards, etc.)
-
Medical Specific Systems (e.g. medical
records, prescriptions, insurance submissions)
-
Agriculture and Livestock Tracking
-
Emergency Response and 911 Systems
-
Payment Systems
-
Fed Wire Transfer System (Money Wiring)
-
Electronic Checking Systems
-
Credit Card Transactions
-
E-commerce, E-cart, and Online Transactions
-
Telecom Systems
-
Industrial Wireless Communications
- Radio
(Serial and Ethernet)
- Microwave
-
CDPD
-
Leased Lines, ISDN, Modems
-
Dialup Vulnerabilities
-
Dialup Solutions
-
Voice Over IP (VoIP)
-
Mobile Wireless
-
GPRS/1XRTT
-
Satellite
- VSAT
- Security
Overview
-
Threat, Vulnerability, Risk
-
C.I.A. Triad (Confidentiality, Integrity, Availability)
-
Threat, Exploit, Vulnerability Triangle
-
Technical Threats
-
Viruses, Trojans, Worms, Malware
-
Case study / Demonstration
-
Hackers
-
Classifications
-
Motivations
-
Hacker Methodology (Attacks/Exploits)
-
Anatomy of an Attack
-
Network Recon/Covert Recon
-
Information Disclosure
-
Finding a Way In
-
Network Sniffing
-
Password Cracking
- Host
Based Attacks & Privilege Escalation
- Trojans
and Rootkits
- Automated
Hacking Tools
- Social
Engineering & Sys Admin Profiling
- Advanced
Hacker Methodology
- Privilege
Escalation Techniques (Symlink Vulnerabilities,
Permissions, Race Conditions, and More.)
- IP
Spoofing
- Sniffing
a Switched Environment
- Session
Hijacking/Man-In-The-Middle
-
Bypassing Encryption
- Network
Protocol Based Attacks
- Covert
Channels And Protocol Tunneling
- Packet
Injection
- Bypassing
IP-Based ACL and Firewall Rules
- IDS
Evasion Techniques
- Web
Hacking (Cross-Site Scripting, SQL Injection,
and More)
- Wi-Fi
Hacking
- Class
Demonstrations
-
Technical Vulnerabilities
-
Basic Programming Language Overview
- Basic
Programming Primer
- Stack
and Heap Data Structures
- Understanding
Overflows (Stack/Buffer, Heap, Integer)
- Understanding
Format String Vulnerabilities
- Understanding
Off-by-one Errors
-
Payloads and Attack Vectors
- The
Kernel and Core Files
- Syscall
Redirection
- 0-Day
Vulnerabilities
- Protocol
“Fuzzing”
- Wi-Fi
Weaknesses
- Biometric
Weaknesses
-
Voice Over IP (VoIP) Weaknesses
-
Mobile Wireless Weaknesses
-
GPRS/1XRTT Weaknesses
-
Satellite Weaknesses
-
VSAT Weaknesses
-
Vulnerability by Sector (Technical)
-
Class Demonstrations
-
SCADA / DCS and Technical Risks
-
General Technical Risks
-
Technical Risks by Sector
-
Breakout Session
-
Policies, Standards, Guidelines, Regulations
-
NERC CIP 002 – 009
-
NIST 800-82
-
AGA 12
-
ISO Standards
-
Others
-
Challenges to Compliance (Case Study)
-
Safeguards by Category (Technical)
-
Intrusion Detection/Prevention Systems Management
for CIP - "Industrial Strength" Countermeasures
and Defensive Strategies
-
Innovative Methods for Isolating Corporate LAN
from SCADA LAN
-
Getting Around COTS (Commercial Off The Shelf)
- Defensive Security Scripting (Use the native
shell to write proactive IDS-like scripts to
help protect your high-availability systems)
-
Remote Access for SCADA Support Using 2-Factor
Authentication Coupled with Thin-Client Technology
-
Encrypting SCADA Node Traffic Within the Control
Room
-
Encryption Primer
-
Non-Executable Stacks
- Canary
Values
- Breakout
Session
-
Incident Response and Consequence Management
-
BCP (Business Continuity Planning) Review
-
Response (Technical)
-
Disaster Recover
-
Forensics Overview
-
Breakout Session
-
Legal Aspects (Cyber/Technical)
-
Cyber Security Laws and Acts
-
What Lies Ahead
-
End of Day Technical Hands-on Labs (Days 1 and 2,
Student Optional)
|
|