Pentesting Industrial Control Systems: An ethical hacker's guide to analyzing, compromising, mitigating, and securing industrial processes

Paul Smith

€26.98 ~~€29.99~~

3.9 (8 Ratings)

eBook Dec 2021 450 pages 1st Edition

Paul Smith

€26.98 ~~€29.99~~

3.9 (8 Ratings)

eBook Dec 2021 450 pages 1st Edition

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

View table of contents

Preview Book

Description

The industrial cybersecurity domain has grown significantly in recent years. To completely secure critical infrastructure, red teams must be employed to continuously test and exploit the security integrity of a company's people, processes, and products. This is a unique pentesting book, which takes a different approach by helping you gain hands-on experience with equipment that you’ll come across in the field. This will enable you to understand how industrial equipment interacts and operates within an operational environment. You'll start by getting to grips with the basics of industrial processes, and then see how to create and break the process, along with gathering open-source intel to create a threat landscape for your potential customer. As you advance, you'll find out how to install and utilize offensive techniques used by professional hackers. Throughout the book, you'll explore industrial equipment, port and service discovery, pivoting, and much more, before finally launching attacks against systems in an industrial network. By the end of this penetration testing book, you'll not only understand how to analyze and navigate the intricacies of an industrial control system (ICS), but you'll also have developed essential offensive and defensive skills to proactively protect industrial networks from modern cyberattacks.

Who is this book for?

If you are an ethical hacker, penetration tester, automation engineer, or IT security professional looking to maintain and secure industrial networks from adversaries, this book is for you. A basic understanding of cybersecurity and recent cyber events will help you get the most out of this book.

What you will learn

Set up a starter-kit ICS lab with both physical and virtual equipment
Perform open source intel-gathering pre-engagement to help map your attack landscape
Get to grips with the Standard Operating Procedures (SOPs) for penetration testing on industrial equipment
Understand the principles of traffic spanning and the importance of listening to customer networks
Gain fundamental knowledge of ICS communication
Connect physical operational technology to engineering workstations and supervisory control and data acquisition (SCADA) software
Get hands-on with directory scanning tools to map web-based SCADA solutions

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

€41.99

€41.99

€36.99

Total € 120.97

Filter reviews by

All

Amazon verified reviews

katrina Mar 29, 2022

This book is an extensive overview of the security of industrial processes, from the ground up. It's got plenty of practical knowledge and hands-on instruction. It starts at the beginning, with chapters on virtualization and hardware, to setting up a lab for the book. Then it moves on to the main content: investigating invasions with the various tools such as ExploitDB, Wireshark, and IDS monitoring. It teaches a deep dive into packets, packet analysis and the TCP/IP stack. It shows the reader how to scan, and what protocols are used, and then how to configure major tools like Kerberos and Kali Linux. Firewalls, shells, and various attacks and how to handle them are covered, and finally how to perform pentesting.

Amazon Verified review

Kurtis J Dec 27, 2022

Book is laid out in a fun and engaging way. Paul knows his stuff. Excellent learning tool and i’m very much enjoying this. I look forward to any follow up publications.

Placeholder Jan 16, 2023

It's perfect , if you want to learn about ICS pentesting. Covers several topics and gives you insights for real world..

Amazon Customer Jan 26, 2022

Amazing book, loved the little Easter eggs scattered around the book. :)

Ryan S. Jul 29, 2022

The book covers a lot of information, though its heavier on virtualization and general tool use. The chapters flow logically, from setting up your playground -> learning the systems -> using the tools -> reporting the findings. Book focuses on tool use rather than in depth understanding of a SCADA system and how it may differ from an enterprise network, though some will find learning the tool will teach them a great deal. The section on Modbus was good, especially since Modbus is one of the more popular protocols. Would have liked a small section on other popular protocols and where to read up on them.

Pentesting Industrial Control Systems: An ethical hacker's guide to analyzing, compromising, mitigating, and securing industrial processes

What do you get with eBook?