The National Institute of Building Sciences is sponsoring introductory and advanced workshops on cybersecurity for building control systems Aug. 27 and 28 in Washington, D.C.
Introduction to Cybersecuring Building Control Systems, to be held Aug. 27 from 8 a.m. to 5 p.m. EDT, covers control-system basics, protocols, and how to use the information-assurance risk-management framework. Additionally, it provides hands-on laboratory exercises using tools and methods to inventory, diagram, identify, attack, defend, contain, eradicate, and report a cyber event.
Advanced Cybersecuring Building Control Systems, to be held Aug. 28 from 8 a.m. to 5 p.m. EDT, provides more technical, in-depth training geared toward teaching security professionals to approach security with an attacker mentality. This includes understanding and practicing techniques for footprinting, scanning and enumeration, exploitation, post exploitation, containment and eradication, and reporting. Students use exploit tools to gain entrance into a control system, pivot through the network, establish beacon command and control channels, modify logs to mask presence, and exfiltrate data. Students then contain and eradicate the exploit, prepare artifacts and event logs, and develop an incident report.
The workshops are taught by Michael Chipley of The PMC Group LLC and Michael Morris of root9b.
Attendees will need a laptop with administrative privileges to load software. They will receive the course content, tools, and lab exercises on a CD at the beginning of each workshop.
The registration fee is $1,000 for the introductory workshop and $1,200 for the advanced workshop. Because this is a “beta trial run” of the workshops, attendees can receive a discount of 50 percent off the full rate by using the code CYBER50.
Each workshop is limited to 20 students. For more information and to register for the introductory workshop, click here. For more information and to register for the advanced workshop, click here.
The workshops next will be offered Sept. 17 and 18.