OT Security Lab walkthrough: defend a plant network
A walkthrough of the free OT security lab: map a plant network, split it into zones, write firewall rules and respond to an incident on a fictional plant.
Chapters
- 0:00 The plant network
- 0:11 Zones and rules
- 0:34 Detect and respond
Transcript
Defend a plant network. This is the OT security lab, free to open. It is a fictional plant, and the lab teaches defence only. Place every device on its Purdue level, and find the DMZ. Split a flat network into zones, joined by the fewest conduits. Write the fewest firewall allow rules that keep production running. Deny everything else. Route a vendor's remote session through the DMZ, with approval and a recording. Read a day of plant logs, and flag the few events that matter. Then run the response drill, without stopping the plant unsafely. Eight levels, from the map to the drill, each marked automatically. Open the lab free.