Hackers-Arise

This course focuses on Advanced SCADA and ICS security, teaching how industrial systems communicate and how they can be analyzed and tested. Students will learn how reconnaissance is performed in industrial networks, including how to read and interact with values in PLCs, sensors, and controllers using both common and advanced SCADA protocols. The training covers SCADA architecture and how different components exchange and log data. Students will also build a basic industrial honeypot to support early detection and skill development. In addition, the training explores real-world SCADA attacks, including analysis of malware used in those incidents and an introduction to firmware reverse engineering and credential extraction.

Labs demonstrate how different attack vectors can impact industrial environments, showing how even simple techniques may lead to significant consequences. The course concludes with realistic scenarios simulating the compromise of a natural gas power generation environment to reinforce practical understanding.

Why it’s important

SCADA and ICS environments are becoming more important targets as industrial systems face increasing attention from criminal groups and state-backed actors. Understanding how these systems work, how protocols expose operational data, and how attackers may move through them is essential for improving resilience. This course helps students build the technical awareness needed to identify weak points, recognize suspicious activity earlier, and strengthen industrial defenses before real incidents occur.

Real-world relevance

The knowledge gained in this course applies directly to industrial operations, critical infrastructure protection, security monitoring, incident response, and threat analysis. Students will see how protocol knowledge helps in both defense and assessment, how honeypots can support detection and research, and how industrial environments can be studied safely in a lab to better prepare for real-world threats.

Learning Objectives & Outcomes

By the end of this course, students will be able to understand SCADA system architecture, identify and analyze common industrial protocols, inspect values from PLCs, sensors, and controllers, and recognize how industrial systems exchange information. They will also gain skills in honeypot design, basic firmware reverse engineering, credential extraction awareness, and malware analysis as it relates to SCADA/ICS threats. In addition, students will learn how to evaluate recent industrial attacks and understand the kinds of attack vectors that are commonly discussed in modern SCADA security research.

Who this course is for

This course is intended for industrial security professionals, OT security engineers, SOC analysts working with critical infrastructure, incident responders, threat researchers, red and purple team members, and technical staff responsible for SCADA or ICS environments. It is also suitable for learners who want to understand how industrial systems operate and how attackers and defenders approach them differently.

Prerequisites or Tools Needed

Students should have a basic understanding of networking, Windows and Linux systems, and general cybersecurity concepts. Familiarity with industrial operations is helpful. A laptop capable of running virtual machines is recommended.