Persisting In Level 1 … The Building Is Alive

Stage 2

This session will identify new vulnerabilities in well known Building Automation System components, but this is not what caused us to select the session. The S4 Stage 2 attendee understands only too well the sad state of the existing code bases in that sector.

The reason this session was selected is the demonstration on how an attacker would persist on Level 1 and hide traces of the attack and exploitation from the OT team and even an incident response team. Given the need to pre-stage attacks and persist, this will become increasingly important as detection improves.

Attacks and Attackers