Industrial Protocol Security & Traffic Analysis
Participants examine controlled captures for protocols such as Modbus TCP, DNP3, OPC UA, and EtherNet/IP. The emphasis is on function codes, sessions, errors, process-aware baselines, and detection opportunities—not attacking live systems.
Learning objectives
- Interpret key industrial-protocol messages and behavior
- Recognize deviations from process-aware baselines
- Design protocol-aware monitoring indicators and rules
Who should attend
- Network and SOC analysts
- Control and instrumentation engineers
- OT security researchers and assessors
Prerequisites
- Good TCP/IP and Wireshark skills
- Introductory knowledge of industrial control systems
Core course modules
- Secure Industrial Traffic Analysis