BSides Bristol 2024

Awais Rashid

Awais Rashid is co-founder and director of Hacktonics Ltd. He is also Professor of Cyber Security at University of Bristol. He has been involved in cyber security research and training for >30 years. He has led the development of multiple ICS testbeds, is Director of the EPSRC Centre for Doctoral Training focusing on cyber security of large-scale infrastructures and was the founder and director of the MSc in Cyber Security (Infrastructure Security) at University of Bristol. He has led many research programmes on ICS cyber security including projects as part of RITICS (EPSRC-NCSC Research Institute on Trustworthy Interconnected Cyber-Physical Systems) and the PETRAS National Centre on Cyber Security of IoT. He is also the editor-in-chief and lead of CyBOK, the Cyber Security Body of Knowledge.


Sessions

08-30
10:00
150min
Ethical hacking for Industrial Control Systems 101
Joe Gardiner, Awais Rashid

Industrial Control Systems (ICS) run many aspects of critical infrastructure and manufacturing. In this practical led workshop, you'll learn what ICS is, how to identify ICS devices and a number of ways to attack them, with practical labs using real-word devices. No past experience required!

Workshops
08-31
11:10
40min
The se7en deadly sins of OT security
Joe Gardiner, Awais Rashid

Operational Technology (OT) underpins the critical infrastructures on which we rely everyday. Devices and systems such as programmable logic controllers, SCADA platforms and distributed control systems are central to delivering water and power to our homes, driving manufacturing environments and safe, continued operation of transportation systems. As attacks against OT systems grow, what are the typical security issues that plague such environments? What are the anti-patterns that repeatedly occur across OT systems compromising their security and leaving attackers with easy forays into the very heart of critical infrastructures. This talk will reflect on experiences of nearly 30 years and the deadly sins from which many OT environments suffer. What can we do to avoid these traps? In fact, quite a lot!

Track 1