Title: Describe threats to ICS.
Course: Cybersecurity in Manufacturing, Advanced (13002-IV) > Section: Evaluating Vulnerabilities, Risks, and Threats in Manufacturing Systems

Description may include threats such as

- ICS-specific malware (e.g., Stuxnet, Havex, BlackEnergy 3, CrashOverride, and Triton)
- physical security access
- supply chain
- social engineering.

Teacher Resources:

- Open Web Application Security Project
- Richard Clarke Keynote (explaining the challenges ICS security and plant managers face) at S4x17 (video)
- Understanding Threats will Promote the “Right Amount” of Security, General Electric and Dragos

Process/Skill Questions:

- How did Stuxnet change the security of connected systems?
- What is social engineering?
- Why is physical security part of cybersecurity?
- What lessons were learned after the Colonial Pipeline or Solarwinds cyber incidents?