Description

This course aims to provide you with the technical skills necessary to understand industrial SCADA control systems that are responsible for managing society's critical infrastructure such as power grids, water treatment plants and facilities chemical industries. At the end of the course, you will be able to identify threats and vulnerabilities in these SCADA systems.

Who is this training for ?

For whom ?

CISO, CIO, architects, project managers, system and network administrators.

Prerequisites

• Basic knowledge of Ethernet, TCP/IP and industrial process architectures.

Training objectives

Understand the components of an industrial supervision and control system (SCADA)

Analyze the risks of a SCADA architecture

Understand threats and vulnerabilities

Identify protective measures

Training program

• Introduction to industrial supervision and control systems (SCADA)
  • - Panorama of industrial cybersecurity.
  • - Repositories on the security of industrial information systems.
  • - ANSSI (National Agency for Systems Security) 'Information).
  • - History of SCADA systems, definition and terminology (SCADA, control systems, regulation loop).
  • - Target sectors of activity, typology, target population in the 'French industry.
  • - Types of SCADA system architectures.
  • - Functional principles and areas of application of industrial supervision and control.
  • - Industrial programmable logic controllers (PLC), remote terminals (RTU).
• Components and network architectures of SCADA systems
  • - Hardware components: architecture and functionalities.
  • - Software components: architectures and functionalities.
  • - Automata, valves, chemical or thermal sensors, command and control system , HMI (Human Machine Interface).
  • - Communication flows in SCADA systems.
  • - Network architectures by functional need.
  • - Time communication protocols real, PLC.
  • - Programming languages ​​for industrial automation.
  • - The design of a control system in response to specifications.
• Introduction to SCADA System Security
  • - The security issue in SCADA systems.
  • - Cybersecurity of industrial systems, classification methods.
  • - Threats and vulnerabilities, known intrusions, APT attacks (advanced persistent threats).
  • - Real attack scenarios on SCADA systems: STUXNET, FLAME.
  • - Attack analysis: construction of the attack tree STUXNET attack.
  • - Authentication/encryption.
• Risk analysis and security requirements for SCADA systems
  • - Risk analysis methodology.
  • - Risk analysis of a SCADA architecture.
  • - Identification and definition of security requirements.