Learn How to Thwart Cyber Attackers with Training in New Orleans. Save $350 thru 3/27.

ICS Europe 2019

Munich, Germany | Mon, Jun 24 - Sat, Jun 29, 2019
Event starts in 94 Days
 

NetWars: Grid

Netwars grid gear

Grid NetWars is a suite of hands-on, interactive learning scenarios that enable Operational Technology security professionals to develop, test and master the real-world, in-depth skills they need to defend real-time systems. It is designed as a challenge competition and is split into separate levels so that allow players to quickly move through earlier levels based on their expertise. The Grid Netwars experience has been themed for the electricity industry and the scenario has been previously used to support multiple electric sector exercises. Grid NetWars was designed to enable participation by players at all skill levels and from any sector (not just the electric sector).

"The hands-on skills and testing the class provided were perfect for identifying what knowledge I lacked and what I truly knew and understood." - Grid NetWars 2017 participant

Grid NetWars Scenario

The fictional US based Alset Energy company owns and operates electric generation, transmission and distribution assets. The company takes pride in its active participation in compliance and standards drafting activities, its information sharing with its partners and the larger industrial control system community, and its overall IT and OT cybersecurity posture. Recently, however, Alset Energy has experienced numerous unexplained system failures - concern and doubt about the effectiveness of their cybersecurity program is increasing. In levels 1 and 2, participants are tasked with achieving an understanding of the environment and determining what is occurring at Alset Energy. Then it's game on as participants become the Red Team establishing access and expanding a foothold in a neighboring (also fictional) utility!

"Very hands on quality content, exposure to material I wouldn't otherwise encounter." - Grid NetWars 2017 participant

Level 1

  • In level 1 participants utilize publicly available information and information provided to them by Alset Energy to help them gain an understanding of the operational environment at Alset Energy. In this level, participants are challenged to examine ICS network architectures, utilize public information sources to locate relevant incident response information, analyze firewall rules, and much, much more!

Level 2

  • In level 2, students utilize several virtual machines on a SANS-provided USB to examine artifacts left behind by the adversary and to progress through the level. In this level participants must figure out the extent and true nature of the compromise.

Level 3

  • In level 3, participants switch roles and become the Red Team! Now as the adversary, you will target a second (also fictional) utility. First youll need to learn the virtual target corporate environment and then successfully navigate your way through multiple levels of network architecture to capture the flags and successfully answer the challenge questions.

Level 4

  • In level 4, participants move beyond the virtual corporate environment where theyve established a foothold in the corporate enterprise environment (level 3) and are now determined to impact field systems and system operations. In this level, participants will map and target real, functioning industrial control systems designed specifically for the Grid NetWars experience.

Laptop Requirements

  • 64-bit system
  • Laptop with at least one USB port
  • Laptop must include Wireless capabilities
  • Latest VMware Player or admin privileges with the ability to install VMplayer and enable VT support in BIOS
  • Ability to disable all security software on your laptop, including antivirus and/or firewalls
  • At least 30 GB of free hard-drive space (50 GB recommended)
  • At least 8 GB of RAM
  • Laptop with Windows 7 or higher installed on the host or in a Virtual Machine is helpful for many questions

For more information about GRID NetWars email us at ics@sans.org.

Course Syllabus
Schedule Instructors
Thu Jun 27th, 2019
6:30 PM - 9:30 PM
Fri Jun 28th, 2019
6:30 PM - 9:30 PM