Offensive Cybersecurity Practices for the Power Industry
Learn how to take an offensive security approach to protecting power plants from cyber attacks.
In this episode, OMIRCON OT cybersecurity expert Simon Rommer speaks with Thomas Weber, who is an Embedded Security Specialist at CyberDanube, a developer of customized security testing solutions based in Vienna, Austria. Thomas shares his extensive experience in offensive security, particularly in operational technology (OT) environments.
Simon and Thomas discuss the challenges and methodologies involved in testing critical infrastructure such as power plants, emphasizing the importance of understanding device vulnerabilities, network segmentation, and the implications of physical access to devices. Thomas also describes how to uncover even the most hidden vulnerabilities, including zero-day threats and blind spots, for ensuring robust protection of OT systems and infrastructures. The conversation also highlights the significance of thorough reporting and vulnerability disclosure in enhancing overall cybersecurity.
For more information about advanced cybersecurity for OT environments, please visit our website.
“The design of OT networks significantly impacts their security. Understanding the operating system level is crucial for vulnerability assessment."
- Thomas Weber, Embedded Security Specialist, CyberDanube