Nakatomi Space: Lateral Movement as L1 Post-exploitation in OT

In OT networks, it is common knowledge that Purdue Reference Model Level 1 (L1) devices such as PLCs and RTUs are notoriously insecure. Regardless, L1 devices that sit at the intersection of multiple, mixed networks (Ethernet, Industrial wireless, Fieldbus, etc.) are often still treated as security perimeters without the corresponding hardening and risk profiles that would be accorded to multi-homed workstations in a similar position.

In this talk we will examine *deep lateral movement* in OT networks, looking at various …

devices etc ethernet exploitation fieldbus hardening industrial insecure intersection knowledge lateral movement networks ot networks plcs post-exploitation reference rtus security space wireless