From the course: Ethical Hacking: Hacking IoT Devices

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Using MITRE ATT&CK for ICS

Using MITRE ATT&CK for ICS

- [Instructor] Ethical hacking in an industrial control system environment can be overwhelming. In this segment, we'll outline how to use MITRE ATT&CK for Industrial Control Systems during an ethical hacking exercise. First, let's talk about Mitre. Mitre is a US-based nonprofit organization that provides research, publications, and tools that are freely available for anyone who accesses the site. One of the tools that you can find is MITRE ATT&CK, or Adversarial Tactics, Techniques, and Common Knowledge. The framework provides methods to recognize an attacker's tactics, techniques, and procedures as part of defending against threats. So what are the tactics, techniques, and procedures? Well, tactics are the technical goals that an attacker must accomplish to execute an attack, that includes initial access, execution, persistence, and exfiltration. Techniques are the methods attackers use to accomplish their goals within each tactic. And procedures are sequences of techniques and…

Contents