Resources

Sharing some useful free to use resources to learn about various aspects of security.
This page will be continuously updated as long as I gather more information.


ICS/OT/Scada Security

  1. Energy 101 - https://www.youtube.com/playlist?list=PLACD8E92715335CB2 
  2. Control System Basics - https://www.youtube.com/watch?v=VQLRVjEFRGI
  3. PLC Basics - https://www.youtube.com/watch?v=PbAGl_mv5XI
  4. PLC Tutorial Basics 1 - https://youtu.be/y2eWdLk0-Ho
  5. PLC Tutorial Basics 2 - https://youtu.be/nYr8Q21nG0k
  6. ICS Cert e-Learns - https://ics-cert-training.inl.gov/learn
  7. Alerting & Detecting - Alerting and Detection Strategy
  8. SANS Materials - https://www.sans.org/cyber-security-summit/archives/cyber-defense

Web Application Security
API Security
  1. API Security Overview- https://youtu.be/zTkv_9ChVPY




Comments

Post a Comment

Popular posts from this blog

What is OT Security?

Image
A non-theoretical explanation of OT Security. In our normal Cyber Security practices, OT Security is an unusual keyword. Be it LinkedIn or Job portals the search results fetched using OT Security are mere small compared to other Cyber Security keywords. But in the practical world, OT is the most important term and line of service for any industry. If you look at the image the orange portion is the IT network. This IT network grabs most of the cybersecurity budget of an organization. We design secure networks, deploy firewalls, write ACL rules, and implement SIEM solutions to protect the IT infrastructure. Why? Because of inherent ideas, we assume systems that are connected to the internet and visible as a desktop or laptop are the attack surface of a cyber adversary. But if the revenue generation is taken under consideration then it can be observed that these systems are only supporting elements of operations, finance, sales, etc. Obviously, these are very important com...
Read more

Demystifying SCADA Testing - P1

Image
There is a big difference between doing pen-tests in IT and doing it in SCADA. Tools and methodology outlines will be almost the same but the main concern is availability. You need to know certain things before attempting to find flaws in industrial networks. Else, you won't realize why shift managers were rushing here and there while you were sitting in their control room with your test laptop. Approach: Always remember we are not trying to prove anything by breaking stuff ruthlessly. A PLC or RTU, stuck in a loop, can delay production for several hours, creating not-so-funny consequences. While trying to assess cyber risk in plants our aim should be clear. Here are few points to keep in mind. Find out unnecessary hosts in the network. These hosts can be legitimate, else they are leaking into the plant network by a badly configured switch or the plant team was badly stuck with finance and they have used a generic switch (those household tp-link/d-link devices).  Try to impersonate...
Read more
Image
  M ongoDB is a popular NoSQL database that has been widely adopted by many organizations for its scalability and flexibility. However, with the increase in cyber attacks, it is important to ensure that MongoDB databases are secure to prevent data breaches. As a security engineer, I had to face challenges while creating security checks and security plans on MongoDB. I am trying to collate the sweeter grapes of that journey in this write-up. Some resources might seem a bit high-level, but these can be utilized to come down to a granular level as per your org setup or requirements. Let’s begin :) Authentication MongoDB provides authentication features that allow users to access the database only after providing valid credentials. MongoDB supports several authentication mechanisms, including LDAP, Kerberos, and x.509 certificates. However, SSO integrations for authentication have been the best approach so far. There are various SSO providers, as an example you may use OKTA as SSO inte...
Read more