Technical Tag

ICS Security

4 related articles.

Getting Started with Industrial Control System Security

0x01 Preface Industrial-control security has grown increasingly popular in recent years, and many friends have asked how to learn it. I am still learning myself, so I cannot claim to know the single correct or fastest path. I can only share methods and experience from my own perspective. At the grandest level, learning industrial-control security contributes to national security; at the practical level, it is a way to make a living. The important thing is to choose the right prescription. What does that mean? It means…

2019 Industrial Information Security Competition Recap

0x00 Preface I participated in this year's industrial security competition: five online rounds, an on-site semifinal for the top 60, and a final for the top 30. Our three-person team placed first in online round three, ninth in the semifinal, and seventh in the final. This article was written for a 90sec event, with some sections contributed by my teammates. 0x01 Online Round 3…

Solving a Covert-Channel Data Analysis Challenge from an ICS CTF

0x01 Challenge description. 0x02 Detours. This is clearly an MP3 steganography challenge. Three conventional approaches come to mind: open it as text and search for 'flag'; inspect its waveform and spectrogram for Morse code; or check the MP3 for embedded files and extract them. The first idea found nothing. The waveform and spectrogram also contained no useful information…

Writeup for a CTF Challenge Based on the MMS Industrial Protocol

0x01 Challenge. A substation uses IEC 61850 for data collection between the station and bay layers. Analyze the capture, learn the MMS protocol, and find the hidden flag. File: question_1531222544_JYvFGmLP49PFC0R2.pcap.zip. 0x02 Background. MMS is the Manufacturing Message Specification…