4 papers
Industrial Ouroboros: Deep Lateral Movement via Living Off the Plant
Richard Derbyshire
Lateral movement is a tactic that adversaries employ most frequently in enterprise IT environments to traverse between assets. In operational technology (OT) environments, however,…
From Protest to Power Plant: Interpreting the Role of Escalatory Hacktivism in Cyber Conflict
Richard Derbyshire, Diana Selck-Paulsson, Charl van der Walt +1
Since 2022, hacktivist groups have escalated their tactics, expanding from distributed denial-of-service attacks and document leaks to include targeting operational technology (OT)…
Dead Man's PLC: Towards Viable Cyber Extortion for Operational Technology
Richard Derbyshire, Benjamin Green, Charl van der Walt +1
For decades, operational technology (OT) has enjoyed the luxury of being suitably inaccessible so as to experience directly targeted cyber attacks from only the most advanced and w…
Walking Under the Ladder Logic: PLC-VBS, a PLC Control Logic Vulnerability Discovery Tool
Sam Maesschalck, Alexander Staves, Richard Derbyshire +2
Cyber security risk assessments provide a pivotal starting point towards the understanding of existing risk exposure, through which suitable mitigation strategies can be formed. Wh…