THREAD SECURITYEDUCATION
OT / ICS SecurityAdvanced Level60 Hours Live

Industrial OT / ICS & SCADA Defense

Purdue model architecture, Modbus & DNP3 industrial packet injection, PLC firmware extraction, and safety instrumented systems.

Modbus & DNP3 Packet Injection
PLC Ladder Logic Vulnerabilities
Purdue Model Zone/Conduit Isolation
60 Hours Practical Workload
1 Core Modules
1 Sandboxed Labs
Cryptographic TS-ID Verifiable

Course Overview & Objectives

Defend physical systems from cyber warfare. Learn how Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), and SCADA HMIs operate, analyze industrial Modbus/DNP3 protocols, and secure critical infrastructure from advanced threat actors.

What You Will Master

  • Map physical plant networks according to the Purdue Enterprise Reference Architecture
  • Inspect unencrypted industrial control traffic (Modbus TCP, DNP3, Ethernet/IP)
  • Simulate unauthorized command injection against virtualized PLC ladder logic
  • Implement passive OT network intrusion detection using Suricata and Zeek ICS parsers

Prerequisites

  • Networking fundamentals
  • Basic understanding of industrial automation or IoT

Platforms & Tools Covered

Wireshark (ICS)Modbus-cliOpenPLCScapyGhidra

Detailed Curriculum Modules

1 modules structured from foundational theory through complex adversarial execution.

60 Total Workload Hours
MODULE 01

Purdue Model & Industrial Network Segmentation

1 Lessons

Level 0 field devices to Level 3 operations management zoning.

Dissecting Modbus Function Codes and Register Memory
50m

Hands-on Virtual Sandbox Labs

Zero local hardware dependencies. Provisioned in cloud containers via browser terminal.

LAB 01~60 mins

OpenPLC Coils & Register Injection Attack

Inject rogue Modbus packets to force open simulated coolant valves.

Skills Tested:Modbus, OpenPLC, Industrial Security

Faculty & Lead Instructor

Direct weekly instruction, live office hours, and code-review feedback.

RM

Rohan Mehta

Thread Security Education

Critical Infrastructure Security Consultant

Advising power generation, water treatment, and manufacturing facilities on air-gapped industrial defense.

Frequently Asked Questions

Everything you need to know about scheduling, cohort admissions, and lab access.

How is physical equipment simulated?

We use OpenPLC running in virtualized sandbox containers with animated digital twin plant simulations.

Ready to Master Industrial OT / ICS & SCADA Defense?

Join the upcoming cohort. Seats are limited to maintain a high faculty-to-student ratio and rigorous sandbox feedback.