Building owners and managers, facility engineers, and physical-security specialists, be warned: Building control systems (BCS) are now squarely in the sights of criminal hackers. BCS are an easy target for hackers and people with malicious intent because they are unsecured by design, there is a desire for remote access control, and they operate with minimal staffing.
BCS can be exploited to gain physical access to facilities and virtual access to traditional IT systems and data, exposing organizations to significant financial obligations for containment, eradication, and/or recovery. In many organizations, the IT department now is responsible for converged infrastructure, yet has little to no training on detecting, removing, and recovering from malware directed at BCS. This presentation will provide insight into the Tactics, Techniques, and Procedures required to actively defend a BCS.
