OT/ICS series

In today’s interconnected world, securing and understanding Operational Technology (OT) and Industrial Control Systems (ICS) is more important than ever. This series of posts explores hands-on lab setups, security best practices, and key learning resources to help you build, test, and protect critical infrastructure. Whether you’re just starting or looking to deepen your expertise, these posts will provide valuable insights into the evolving OT/ICS landscape.

Building OT/ICS Cybersecurity labs

Learn how to build your own OT/ICS cybersecurity lab for hands-on testing, training, and research. This guide covers essential hardware, software, and network setups to simulate real-world industrial environments, helping you develop and refine your security skills in a safe, controlled setting.

Why build an OT/ICS Cybersecurity lab?
An ICS lab with VirtuaPlant
Installing VirtuaPlant Bottle Filling plant
Attacking the Bottle Filling plant
Installing VirtuaPlant Oil Refinery plant
Attacking the Oil Refinery plant (paid memebers only)
An ICS lab with GRFICSv2
Installing the GRFICSv2 Chemical plant
Attacking the Chemical plant
An ICS lab with Factory I/O
Installing a Factory I/O based plant
Attacking a Factory I/O based plant

Visibility, observability, and segregation in OT/ICS

Visibility and observability are critical for securing and managing industrial OT/ICS environments. Visibility ensures that all assets, communications, and network activities are identified, while observability provides deeper insights into system behaviors, anomalies, and potential threats. Effective segregation of OT/ICS networks using VLANs, firewalls, and air-gapping minimizes the attack surface by isolating critical systems from IT and external networks. This layered approach enhances security, reduces operational risks, and ensures compliance with industry regulations.

Industrial network segmentation with VLAN Insertion
Industrial network segmentation with Private VLANs (to be released on 2025-04-30)
OT/ICS visibility with Palo Alto Networks
OT/ICS visibility with Cisco Cyber Vision
Secure remote maintenance with Cisco Secure Equipment Access
Edge computing with Cisco IOx