Unseen University Power & Light Co.¶
Follow the adventures of testing the industrial control systems at the Unseen University Power & Light Co. (UU P&L), Ankh-Morpork’s main supplier of electricity, hot water, and occasional mysterious glows. This story served as a user story for developing workshops and analytical processes, and for building a simulator to practise against. The first simulator proved not dynamic enough for the scenarios we had in mind, so work is now under way on a more capable ICS SimLab.
OT/ICS penetration testing:
- Understanding the territory
- Before touching anything
- Reconnaissance
- Vulnerability assessment
- Exploitation and impact demonstration
- Specialised topics
- Reporting and remediation
- UU Power & Light training programme
- UU Power & Light ICS Simulator @GitHub
- ICS SimLab Under construction @GitHub
- Underfunded cybersecurity in critical infrastructure
- Legacy systems that refuse to die