SCADA controls our nation’s mission critical infrastructure, everything from the power grid to water treatment facilities Gain homeland security skills, by learning to assess and secure SCADA systems. This five-day boot camp covers everything from field based attacks to automated vulnerability assessments for SCADA networks.

Learn the best practices for security SCADA networks and systems inside and out. Infosec shows you how to defend against both internal and external attackers to provide holistic security for critical industrial automation systems.

• Five days of training with an expert instructor
• CSSA exam voucher
• 90-day access to course replays (Flex Pro)
• Curated videos from other top-rated instructors (add-on)
• 100% Satisfaction Guarantee
• Exam Pass Guarantee (Flex Pro)

• Understanding of a SCADA system
• Attendees can be anyone involved with protection of a SCADA system: SCADA supervisors, analysts, system administrators as well as SCADA vendors
• Desire to learn how to protect the cyber critical infrastructure

The CSSA certification provides professionals with an objective measure of competence as well as a recognizable standard of achievement. The CSSA credential is ideal for industrial network administrators and their managers, as well as IT professionals and their managers. The CSSA certification encompasses the following domains:

• SCADA security policy development
• SCADA security standards and best practices
• Access Control
• SCADA protocol security issues
• Securing field communications
• User authentication and authorization
• Detecting cyberattacks on SCADA systems
• Vulnerability assessment

Infosec’s courseware materials are always up to date and synchronized with the latest exam objectives. Our industry-leading curriculum and expert instructors have led to the highest pass rates in the industry. More than 93% of Infosec students pass their certification exams on their first attempt.

Part 1
SCADA/ICS Overview

• Introduction to CSSA
• Industrial Control Systems (ICS)
• Types of ICS
• ICS components
• BPCS & SIS
• Control system strengths and weaknesses
• ICS PCN & protocols
• PCN evolution
• Modbus / DNP3 / HART
• Lab: modbus PLC lab
• IT vs. ICS
• RS-232 and RS-485
• TASE 2.0 / ICCP
• CIP
• PROFIBUS / PROFINET
• FOUNDATION fieldbus
• Open vs. proprietary protocols
• HMI applications
• HMI/OIT implementations
• OPC and OPC UA
• Data historians
• Integration software (ERP/MES)

Part 2
SCADA security governance

• Threat to SCADA
• SCADA attacks and threats case studies
• Lab: attacking the infrastructure
• SCADA security challenge
• Security frameworks, strategy, policies
• Standards, procedures and guidelines
• SCADA security standards bodies (NIST / ISA / CFATS /
• NERC CIP)
• Risk management process
• Lab: “theoretical” assessment with CSET
• SCADA security assessment methodology
• NESCOR guide to vulnerability assessment

Part 3
Pentesting SCADA systems

• Security assessment strategy
• Pentesting steps
• Safety and security considerations
• Information gathering
• Architecture analysis
• Host, application and platform fingerprinting
• DNS and SNMP recon
• Lab: SNMP recon
• Host and port scanning
• Security considerations
• Scanning tools and techniques
• Lab: scanning ICS/SCADA networks
• Network communications capture and analysis
• RF signal capture

• Sniffing network traffic
• Device functionality analysis
• Lab: datasheet analysis
• Vulnerability identification
• Common SCADA vulnerabilities
• Finding vulnerabilities
• Physical access
• Vulnerability scanning
• Server OS testing
• Patch levels
• Default and insecure configurations
• Authentication and remote access
• Firmware analysis
• Attacking ICS
• Attacking standard services (HTTP, FTP)
• Attacking server OS
• Lab: Exploiting OS-level vulnerabilities (Shellshock Exploit)
• Attacking ISC Protocols
• Lab: capturing and manipulating protocol data
• Attacking wireless communications
• Lab: recovering ZigBee network keys
• Lab: WEP/WPA2 password cracking

Part 4
SCADA security controls

• Categorization of system controls
• Physical security & safety
• Identification, Authentication, & Authorization (IA&A)
• IA&A and access control
• Remote access security
• Encryption
• Logical security
• Lab: firewall rule design
• Monitoring, detection & protection
• Secure SCADA architecture
• Lab: security architecture (group discussion)
• IDS/IPS (Introduction to Snort)
• Log monitoring and management
• Lab: SCADA honeypot (Conpot)
• Lab: Snort SCADA rules (Quickdraw)
• Incident response
• Anti-malware
• Application whitelisting
• Patch management
• Active directory & group policy
• Summary of good security practices