ICS_Awesome_List

Table of Contents

• ICS_Awesome_List
  • Communities
  • Conferences
  • Ecosystems
  • Exercises
  • ISACs
  • Free Trainings
  • Bulletins
  • Articles
  • Books
  • Certificates
  • Top 10 Twitter Accounts
  • Standards & Guidelines
  • In Progress
  • References

Communities

Country	Community Name	Web Page	Twitter	Channels
Global	BEER-ISAC	N/A	@BEERISAC	N/A
Turkey	Türkiye EKS Siber Güvenlik Ekosistemi	https://eksguvenligi.org	@eks_ekosistem	https://t.me/eksguvenligi
Russia	Russian ICS Cyber Security Community	https://ruscadasec.com	N/A	https://t.me/ruscadasecnews
Brazil	Brazil ICS Cyber Security Community	scadasecbr.org	N/A	https://t.me/scadasecbr
Global	ICSVillage	https://icsvillage.com	@ICS_Village	N/A
Global	SANS ICS	https://ics.sans.org	@SANSICS	N/A
Global	SCADASEC	https://scadamag.infracritical.com/	N/A	https://groups.io/g/scadasec

Conferences

Country	Conference Name	Web Page
Turkey	EKS Konferans	https://www.ekskonferans.org/
Germany	SANS ICS Europe	https://www.sans.org/
Russia	Kaspersky Industrial Cybersecurity Conference	https://ics.kaspersky.com/conference/
Sweden	CS3STHLM	https://cs3sthlm.se/
Belgium	BRUCON	https://www.brucon.org/
America	SANS ICS Summit USA	https://www.sans.org/
America	SANS Oil & Gas Cyber Security	https://www.sans.org/
America	S4xEvents	https://s4xevents.com/
America	ICS Cyber Security Conference	https://www.icscybersecurityconference.com/
Singapore	ICS Cyber Security Conference	https://www.icscybersecurityconference.com/
Flexible	CIPRE	https://www.cipre-expo.com/

Ecosystems

Country	Ecosystem	Web Page
Global	CCI-ES	https://www.cci-es.org/
Global	OT-CSA	https://otcsalliance.org/
Global	ISA Global Cybersecurity Alliance	https://isaautomation.isa.org/cybersecurity-alliance/
Global	Charter of Trust	https://www.charteroftrust.com/

Exercises

Country	Exercise Name	Web Page
North America	GridEX	https://www.nerc.com/pa/CI/CIPOutreach/Pages/GridEx.aspx
Global	Locked Shields	https://ccdcoe.org/exercises/locked-shields/

ISACs

Community	Research Areas	Web Page
E-ISAC	Electricity Information Sharing and Analysis Center	https://www.eisac.com/
EE-ISAC	European Energy Information Sharing & Analysis Centre	https://www.ee-isac.eu/
Water-ISAC	Water Information Sharing and Analysis Center	https://www.waterisac.org/
ONG-ISAC	Oil and Natural Gas Information Sharing and Analysis Center	https://ongisac.org/

Free Trainings

Organization	Web Page
ICS-CERT	https://us-cert.cisa.gov/ics/Training-Available-Through-ICS-CERT
IAEA	https://websso.iaea.org/login/login.fcc
S4XEvents	https://onramp.s4xevents.com/login

Bulletins

Publisher	Web Page
Dale Peterson	https://mailchi.mp/f53b1c8c2da0/friday
eksguvenligi.org	https://www.eksguvenligi.org/bulten
CCI-ES	cci-es.org

Articles

Organization	Topic	Link
SANS	Secure Architecture for Industrial Control Systems	https://www.sans.org/reading-room/whitepapers/ICS/secure-architecture-industrial-control-systems-36327
SANS	The Industrial Control System Cyber Kill Chain	https://www.sans.org/reading-room/whitepapers/ICS/industrial-control-system-cyber-kill-chain-36297

Books

• Industrial Network Security: Securing Critical Infrastructure Networks for Smart Grid, SCADA, and Other Industrial Control Systems
• Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions
• Applied Cyber Security and the Smart Grid: Implementing Security Controls into the Modern Power Infrastructure
• Security PHA Review for Consequence-Based Cybersecurity
• Practical Modern SCADA Protocols: DNP3, 60870.5 and Related Systems

Certificates

• GISCP (Global Industrial Cyber Security Professional)
• CSSA (Certified SCADA Security Architect)
• GRID (GIAC Response and Industrial Defense)
• Certified Operational Technology Cybersecurity Professional (TÜV)
• ISA/IEC 62443 Cybersecurity Fundamentals Specialist
• ISA/IEC 62443 Cybersecurity Risk Assessment Specialist
• ISA/IEC 62443 Cybersecurity Design Specialist
• ISA/IEC 62443 Cybersecurity Maintenance Specialist
• ISA/IEC 62443 Cybersecurity Expert

Top 10 Twitter Accounts

• @shipulin_anton
• @digitalbond
• @PatrickCMiller
• @RobertMLee
• @SarahFluchs
• @SinclairKoelemi
• @SCADAhacker
• @Marmusha
• @timyardley
• @CloverStreetMan

Standards & Guidelines

Organization	Standard	Link
NIST	Guide to Industrial Control Systems (ICS) Security	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r2.pdf
NIST	Guidelines for Smart Grid Cybersecurity	https://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7628r1.pdf
TSA	Pipeline Security Guidelines	https://www.tsa.gov/sites/default/files/pipeline_security_guidelines.pdf
IAEA	Computer Security at Nuclear Facilities	https://www-pub.iaea.org/MTCD/Publications/PDF/Pub1527_web.pdf
ACRP	Guidebook on Best Practices for Airport Cybersecurity	http://trbcybersecurity.erau.edu/resources/acrp_rpt_140.pdf
CFATS	Risk-Based Performance Standards Guidance	https://www.dhs.gov/xlibrary/assets/chemsec_cfats_riskbased_performance_standards.pdf
US-CERT	Cyber Security Procurement Language for Control Systems	https://us-cert.cisa.gov/sites/default/files/documents/Procurement_Language_Rev4_100809_S508C.pdf
AWWA	Water Sector Cybersecurity Guidance	https://www.awwa.org/Portals/0/AWWA/ETS/Resources/AWWACybersecurityGuidance2019.pdf?ver=2019-09-09-111949-960
NIST	Cybersecurity Framework Manufacturing Profile	https://www.nist.gov/publications/cybersecurity-framework-manufacturing-profile-0
NIST	Energy Sector Asset Management	https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1800-23.pdf
Energy Gov	Electritcy Subsector Cybersecurity Capability Maturity Model	https://www.energy.gov/sites/prod/files/2014/02/f7/ES-C2M2-v1-1-Feb2014.pdf
Energy Gov	Oil and Natural Gas Subsector Cybersecurity Capability Maturity Model	https://www.energy.gov/sites/prod/files/2014/03/f13/ONG-C2M2-v1-1_cor.pdf
NIST	Behavioral Anomaly Detection in ICS	https://csrc.nist.gov/publications/detail/nistir/8219/draft
ICS- CERT	Seven Strategies to Defend ICSs	https://us-cert.cisa.gov/sites/default/files/documents/Seven%20Steps%20to%20Effectively%20Defend%20Industrial%20Control%20Systems_S508C.pdf
ICS-CERT	ICS Defense-in-Depth Strategies	https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
ICS-CERT	ICS-CERT Recommended Practices	https://us-cert.cisa.gov/ics/Recommended-Practices

In Progress

• Regulations
• Podcasts
• ICS PCAPs
• Videos
• Feeds
• Goverment Funded Research Projects
• Offensive Tools
• Defensensive Tools
• Products
• Research Institutes

References

• https://scadahacker.com/library/index.html
• https://github.com/demirelcan/awesome-industrial-control-system-security