21. OT/ICS Industrial Control Security

21.1 Industrial Network Attack Surface

IT/OT Boundary Breakthrough: exploit DMZ weaknesses → jump into the OT network / industrial protocols (Modbus/S7/CIP) lack authentication HMI Attacks: web vulnerabilities after HMI interfaces are web-enabled PLC Attacks: firmware tampering / logic injection / denial of service SCADA Attacks: historian database leaks / remote management interface vulnerabilities

Tools: plcscan / ISF (Industrial Security Framework)

---