You're reading from Industrial Cybersecurity Efficiently monitor the cybersecurity posture of your ICS environment

Product type Paperback

Published in Oct 2021

Publisher Packt

ISBN-13 9781800202092

Length 800 pages

Edition 2nd Edition

Tools

Kali Linux

Concepts

Cybersecurity

Author (1):

Pascal Ackerman

View More author details

Table of Contents (26) Chapters

Preface

1. Section 1: ICS Cybersecurity Fundamentals

2. Chapter 1: Introduction and Recap of First Edition FREE CHAPTER

3. Chapter 2: A Modern Look at the Industrial Control System Architecture

4. Chapter 3: The Industrial Demilitarized Zone

5. Chapter 4: Designing the ICS Architecture with Security in Mind

6. Section 2:Industrial Cybersecurity – Security Monitoring

7. Chapter 5: Introduction to Security Monitoring

8. Chapter 6: Passive Security Monitoring

9. Chapter 7: Active Security Monitoring

10. Chapter 8: Industrial Threat Intelligence

11. Chapter 9: Visualizing, Correlating, and Alerting

12. Section 3:Industrial Cybersecurity – Threat Hunting

13. Chapter 10: Threat Hunting

14. Chapter 11: Threat Hunt Scenario 1 – Malware Beaconing

15. Chapter 12: Threat Hunt Scenario 2 – Finding Malware and Unwanted Applications

16. Chapter 13: Threat Hunt Scenario 3 – Suspicious External Connections

17. Section 4:Industrial Cybersecurity – Security Assessments and Intel

18. Chapter 14: Different Types of Cybersecurity Assessments

19. Chapter 15: Industrial Control System Risk Assessments

20. Chapter 16: Red Team/Blue Team Exercises

21. Chapter 17: Penetration Testing ICS Environments

22. Section 5:Industrial Cybersecurity – Incident Response for the ICS Environment

23. Chapter 18: Incident Response for the ICS Environment

24. Chapter 19: Lab Setup

25. Other Books You May Enjoy

Details about the enterprise environment lab setup

Let's look at the enterprise environment for the lab architecture:

Figure 19.3 – Lab architecture – enterprise network

We will use a Dell Precision tower to virtualize everything shown here, a VMware ESXi Virtual Switch (vSwitch) to virtually connect all the VMs, and then use a physical uplink wired to a physical network port of the Dell server, which we can use to connect the server (and the enterprise environment) to the enterprise Cisco switch. The IT firewall is a VM running pfSense (https://www.pfsense.org/download/). The IT firewall VM will have three virtual NICs configured to connect to the internet, the enterprise network, and a network we will use to emulate an attacker from China in the Simulating Chinese attackers section.

For instructions on how to configure ESXi networking, refer to the official VMware documentation: https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere...