ICS Vulnerabilities

Year in Review (2014 | 2013 | 2012 | 2011 | 2010)	ICS-CERT	pdf
Industrial Control Systems Assessments 2014 - Overview and Analysis	ICS-CERT	pdf
Incident Response Summary Report - 2009-2011	ICS-CERT	pdf
Distinguishing Internet-facing ICS Devices using PLC Programming Information	AFIT	pdf    R3
2015 Cyber Security Report	Control Engr	pdf
Common Control System Vulnerabilities (2005)	DHS	pdf
Common Cybersecurity Vulnerabilities Observed in ICS (2009)	DHS	pdf
Common Cybersecurity Vulnerabilities in ICS (2011)	DHS	pdf
Common Cybersecurity Vulnerabilities Observed in Control Systems (2008)	DoE	pdf
Leveraging Ethernet Card Vulnerabilities in Field Devices	DigitalBond	pdf    R1
ICCP: Threats to Data Security and Potential Solutions	EPRI	pdf    R4
Hacking Embedded Devices		pdf    R1
Cyber Incidents Involving Control Systems	INL	pdf    R5
Safety vs Security (2006)	INL	pdf
Vulnerability Analysis of Energy Delivery Control Systems	INL	pdf    R4
Project SHINE Findings Report - Oct. 2014	Infracritical	pdf    R3
SCADA Safety in Numbers	Positive Tech	pdf    R5
Caution: Malware Ahead - An analysis of emerging risks in automotive system security	Wind River	pdf    R1
Top 10 Vulnerabilities of Control Systems and their Mitigations (2007)	NERC	pdf
SCADA & PLC Vulnerabilities in Correctional Facilties		pdf    R1
Top 10 Most Dangerous ICS Software Weaknesses	ToolsWatch	pdf
		TOP

Standards

ISA Standards Directory		html  R4
ISO Standards Directory		html  R4
IEEE Standards Directory (1686-2013 | C37.240-2014)		html  R5
Cryptographic Protection of SCADA Communications - 12 Part1	AGA	pdf
API-1164 - Pipeline SCADA Security, 2nd ed	API	pdf
BSI-100-1 - Information Security Management Systems	BSI	pdf    R2
BSI-100-2 - IT-Grundschutz Methodology	BSI	pdf    R2
BSI-100-3 - Risk Analysis Based on IT-Grundschutz	BSI	pdf    R2
BSI-100-4 - Business Continuity Management	BSI	pdf    R2
Mapping Between the Requirements of ISO/27001:2005 and 27001:2013	BSI	pdf    R2
CNSSI-1253R2 - Security Categorization and Control Selection for National Security Systems	CNSS	pdf
CNSSI-1253 - Security Control Overlays for Industrial Control Systems	CNSS	pdf
Comparison of Oil and Gas Segment Cyber Security Standards	DHS	pdf
Chemical Facility Anti-Terrorism Standards (CFATS)		html
CFATS - Risk-based Performance Standard Guidance	DHS	pdf
Comparison of SCADA Security Standards	IEEE	pdf
A Comparison of Cross-Sector Cyber Security Standards	INL	pdf
ISA 62443 Series Overview	ISA	pdf
ISA 99 / 62443 - Work Products - DRAFT Versions	ISA	html
Comparing ISO/27001:2005 to ISO/27001:2013	itGovernance	pdf    R2
NEI 08-09 - Cyber Security Plan for Nuclear Power Reactors (v6 | v5)	NEI	pdf
NERC - CIP U.S. Enforcement Status	NERC	xlsx
NERC - CIP v2	NERC	pdf
NERC - CIP v3	NERC	pdf
NERC - CIP v4	NERC	pdf
NERC - CIP v5 (consolidated - enforcement date: April 1, 2016)	NERC	pdf
NERC - CIP v5 Transition Guidance (Aug 2014)	NERC	pdf
NERC - CIP v5 Implementation Study Report - Transition Program	NERC	pdf
NERC - CIP v6 (updates only - enforcement date: July 1, 2016)	NERC	pdf
NERC - Glossary of Terms	NERC	pdf    R2
SP800-18 - Guide for Developing Security Plans for Information Systems	NIST	pdf
SP800-30 (Rev 1) - Risk Management Guide for IT Systems	NIST	pdf    R1
SP800-30 (Rev 0) - Risk Management Guide for IT Systems	NIST	pdf
SP800-39 - Managing Information Security Risk	NIST	pdf    R1
SP800-40 - Creating a Patch and Vulnerability Management Program	NIST	pdf
SP800-41 - Guidelines on Firewalls and Firewall Policies	NIST	pdf
SP800-42D - Guideline on Network Security Testing	NIST	pdf
SP800-48R1 - Guide to Securing Legacy 802.11 Wireless Networks	NIST	pdf
SP800-50 - Building an Information Technology Security Awareness and Training Program	NIST	pdf
SP800-53 (Rev 4) - Document Summary	NIST	pdf    R1
SP800-53 (Rev 4) - Security and Privacy Controls for Federal Information Systems and Organizations	NIST	pdf    R1
SP800-53 (Rev 4) - Security and Privacy Controls for Federal Information Systems and Organizations	NIST	docx
SP800-53 Controls Catalog	NIST	xml    R2
SP800-53 - R3 to R4 Appendix Table D-2 Markup	NIST	pdf
SP800-53 - R3 to R4 Appendix F Markup	NIST	pdf
SP800-53 - R3 to R4 Appendix G Markup	NIST	pdf
SP800-53 (Rev 3) - (deprecated) Recommended Security Controls for Information Systems (incl ICS)	NIST	pdf
SP800-53A - Guide for Assessing Security Controls in Information Systems	NIST	pdf
SP800-53A (Rev 4) - Guide for Assessing Security Controls in Information Systems DRAFT	NIST	pdf    R2
SP800-61 - Computer Security Incident Handling Guide	NIST	pdf
SP800-82 (Rev 2) - Guide to Industrial Control Systems Security	NIST	pdf
SP800-82 (Rev 1) - Guide to Industrial Control Systems Security	NIST	pdf
SP800-82 - (deprecated) Guide to Industrial Control Systems Security	NIST	pdf
SP800-94 - Guide to Intrusion Detection and Prevention Systems	NIST	pdf
SP800-97 - Establishing Wireless Robust Security Networks	NIST	pdf
SP800-115 - Technical Guide to Information Security Testing and Assessment	NIST	pdf
SP800-120 - Recommendation for EAP Methods Used in Wireless Network Access Authentication	NIST	pdf
SP800-127 - Guide to Securing WiMAX Wireless Communications	NIST	pdf
SP800-167 - Guide to Application Whitelisting	NIST	pdf
SP1800-2a DRAFT - Identity and Access Mgmt for Electric Utilities	NIST	zip
Framework to Reduce Cyber Risks to Critical Infrastructure v1.0	USA	pdf    R1
NIST - System Protection Profile Industrial Control Systems	NIST	pdf
Regulatory Guide 5.71 - Cyber Security Programs for Nuclear Facilities	NRC	pdf    R2
National (Qatar) ICS Security Standard	QCERT	pdf
Process Control Domain Security Requirements for Vendors	WIB	pdf
MAPPINGS BETWEEN STANDARDS
Mapping between NIST 800-53 and ISO/IEC 27001	NIST	pdf
Mapping between DHS Catalog of Control Systems Security and Various Standards	DHS	pdf
Mapping between NISTIR-7628 (Smart Grid) and SP800-53, DHS, and NERC-CIP-2	NIST	pdf
NERC CIP v3-5 Standard Mapping to the Critical Security Controls (Draft)	SANS	pdf
		TOP

ACHILLES COMMUNICATIONS CERTIFICATION
Achilles Certification Level 1 Requirements - Embedded Device	Wurldtech	pdf    R1
Achilles Certification Level 1 Requirements - Gateway (Network Device)	Wurldtech	pdf    R1
Achilles Certification Level 1 Requirements - Host Based Device	Wurldtech	pdf    R1
Achilles Certification Level 2 Requirements - Embedded Device	Wurldtech	pdf    R1
Achilles Certified Products		html  R1
ISA SECURITY COMPLIANCE INSTITUTE EMBEDDED DEVICE SECURITY ASSURANCE (EDSA)
ASCI Policies and Procedures	ASCI	pdf    R1
EDSA Certification Scheme Description
EDSA-100 - ISASecure Certification Scheme	ASCI	pdf    R1
EDSA-102 - Errata for EDSA Specifications	ASCI	pdf    R1
Lab Accreditation Requirements & Tool Recognition Requirements
EDSA-200 - EDSA Chartered Laboratory Operations and Accreditation	ASCI	pdf    R1
EDSA-201 - Recognition Process for CRT Tools	ASCI	pdf    R1
EDSA-202 - Chartered Lab Application and Contract	ASCI	pdf    R1
EDSA-204 - Use of Symbol and Certificates	ASCI	pdf    R1
ASCI Chartered Test Lab 2009 Approval Process	ASCI	pdf    R2
ISASecure Transition to ISO/IEC 17065	ASCI	pdf    R2
Initial Certification & Maintenance of Certification Policies & Criteria
EDSA-300 - ISASecure Certification Requirements	ASCI	pdf    R1
EDSA-301 - Maintenance of ISASecure Certification	ASCI	pdf    R1
Certification Requirements Specifications
EDSA-310 - Common Robustness Test Specification	ASCI	pdf    R1
EDSA-311 - Functional Security Assessment	ASCI	pdf    R1
EDSA-312 - Common Reqts for Comm Robustness Testing of IP-based Protocol Implementations	ASCI	pdf    R1
CRT Test Requirements for Protocols in EDSA Certification
EDSA-401 - Common Ethernet Protocol Robustness	ASCI	pdf    R1
EDSA-402 - ARP Protocol over IPv4 Robustness	ASCI	pdf    R1
EDSA-403 - IPv4 Network Protocol Robustness	ASCI	pdf    R1
EDSA-404 - ICMPv4 Network Protocol Robustness	ASCI	pdf    R1
EDSA-405 - UDP Transport Protocol over IPv4 or IPv6 Robustness	ASCI	pdf    R1
EDSA-406 - TCP Transport Protocol over IPv4 or IPv6 Robustness	ASCI	pdf    R1
ISASecure Embedded Device Security Assurance Certification - March-2010	ASCI	pdf    R1
ISASecure Certified Device List		html  R1
ISA SECURITY COMPLIANCE INSTITUTE SYSTEM SECURITY ASSURANCE (SSA)
SSA Certification Scheme Description
SSA-100 - ISASecure Certification Scheme	ASCI	pdf    R2
SDLA Certification Specification
SDLA-100 - ISASecure Certification Scheme	ASCI	pdf    R2
SSA Lab Acreditation Requirements
SSA-200 - Chartered Lab Operations and Accreditation	ASCI	pdf    R2
SSA-204 - Use of Symbols and Certificates	ASCI	pdf    R2
ASCI Chartered Test Lab 2009 Approval Process	ASCI	pdf    R2
ISASecure Transition to ISO/IEC 17065	ASCI	pdf    R2
Initial Certification & Maintenance of Certification Policies & Criteria
SSA-300 - ISASecure Certification Requirements	ASCI	pdf    R2
SSA-301 - Maintainence of ISASecure Certification	ASCI	pdf    R2
SSA Certification Requirements
SSA-310 - Requirements for System Robustnest Testing (SRT)	ASCI	pdf    R2
SSA-311 - Functional Security Assessment for Systems (FSA-S)	ASCI	pdf    R2
SSA-312 - Security Development Artifacts for Systems (SDA-S)	ASCI	pdf    R2
SDLA-312 - Security Development Lifecycle Assessment (SDLA)	ASCI	pdf    R2
SSA-420 - Vulnerability Identification Test (VIT) Policy Specification	ASCI	pdf    R2
ISA SECURITY COMPLIANCE INSTITUTE SECURITY DEVELOPMENT LIFECYCLE ASSURANCE (SDLA)
SDLA Certification Specification
SLDA-100 - ISASecure Certification Scheme	ASCI	pdf    R2
Accreditation Documents
SDLA-200 - Chartered Lab Operations and Accreditation	ASCI	pdf    R2
SDLA-204 - Use of Symbols and Certificates	ASCI	pdf    R2
Technical Specifications
SDLA-300 - ISASecure Certification Requriements	ASCI	pdf    R2
SDLA-312 - Security Development Lifecycle Assessment	ASCI	pdf    R2
		TOP

Best Practices

40 Essential Measures for a Healthy Network	ANSSI	pdf    R4
Cybersecurity for ICS - Classification Method and Key Measures	ANSSI	pdf    R4
Cybersecurity for ICS - Detailed Measures	ANSSI	pdf    R4
Application Whitelisting Explained	Au DSD	pdf
Assessing Security Vulnerabilities and Patches	Au DSD	pdf
Email Filtering and Mitigating Circumention Techniques	Au DSD	pdf
Restricting Adminstrative Privileges Explained	Au DSD	pdf
Strategies to Mitigate Targeted Cyber Intrusions (2014 | 2012)	Au DSD	pdf
Strategies to Mitigate Targeted Cyber Intrusions - Mandatory Requirements (2013)	Au DSD	pdf
Strategies to Mitigate Targeted Cyber Intrusions - Mitigation Details (2014)	Au DSD	pdf
Top 4 Strategies to Mitigate Targeted Cyber Intrusions to ICT Systems (2012)	Au DSD	pdf    R1
Top 4 Strategies to Mitigate Target Cyber Intrusions to Linux Systems (2013)	Au DSD	pdf
Top 35 Strategies to Mitigate Targeted Cyber Intrusions (2012)	Au DSD	pdf    R1
Cybersecurity Reference Model	CIDX	pdf    R1
Guidance for Addressing Cybersecurity in the Chemical Sector	CIDX	pdf    R1
Configuring and Managing Remote Access for Industrial Control Systems	CPNI	pdf    R2
Good Practice Guide - Process Control and SCADA Security	CPNI	pdf    R2
Good Practice Guide - Implement Secure Architecture	CPNI	pdf    R2
Good Practice Guide - Establish Response Capabilities	CPNI	pdf    R2
Good Practice Guide - Improve Awareness and Skills	CPNI	pdf    R2
Good Practice Guide - Engage Projects	CPNI	pdf    R2
Good Practice Guide - Establish Ongoing Governance	CPNI	pdf    R2
Threat Intelligence - Collecting, Analysing, Evaluating	CPNI	pdf
Configuring and Managing Remote Access for Industrial Control Systems	CPNI	pdf    R2
7 Steps to Effectively Defend Industrial Control Systems	DHS	pdf
Improved Robustness of Time and Frequency Sources in Fixed Locations	DHS	pdf    R4
Catalog of Control Systems Security	DHS	pdf
Cyber Security Framework and Technical Metrics	DHS	pdf
Cyber Security Procurement Language for ICS	DHS	pdf
Cyber Security Procurement Language for Energy Delivery Systems	DHS	pdf    R4
Defense in Depth Strategies	DHS	pdf
Recommended Practice for Patch Management	DHS	pdf
Remote Access for ICS	DHS	pdf
Securing SCADA and Industrial Control Systems	DHS	pdf
Steps to Improve Cyber Security of SCADA Networks	DoE	pdf
Certification of Cyber Security Skills of ICS/SCADA Professionals	ENISA	pdf    R4
Good Practice Guide for CERTs in the Area of Industrial Control Systems	ENISA	pdf    R1
Good Practices for an EU ICS Testing Coordination Capability	ENISA	pdf    R1
Methodologies for Identification of Critical Information Infrastructure Assets Services	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex I - Desktop Research Results	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex II - Survey and Interview Analysis	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex III - ICS Security Related Standards, Guidelines and Policy Documents	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex IV - ICS Security Related Initiatives	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex V - Key Findings	ENISA	pdf    R5
Protecting Industrial Control Systems - Annex VI - Minutes of the Workshop	ENISA	pdf    R5
Smart Grid Security - ENISA Recommendations	ENISA	pdf    R5
Smart Gride Security Certification in Europe	ENISA	pdf    R5
Window of Exposure - A Real Program for SCADA - Recommendations for Europe on SCADA Patching	ENISA	pdf    R5
Cybersecurity Lifecycle Poster - Ver 1.19 - 01-2013	Exida	pdf    R1
Cyber Security eGuide r1	GarrettCom	pdf
Handbook for Network Security - DRAFT RFC 0.4	IAONA	pdf
7 Best Practices for Automation System Cyber Security & Compliance	Ind Def	pdf    R1
SANS 20 and ICS Considerations	Ind Def	pdf    R1
Using Operational Security to Support Cyber Security Culture	INL	pdf
Design and Operational Guide to Protect against "Advanced Persistent Threats"	IPA-JP	pdf    R5
Securing WLANs using 802.11i	LLNL	pdf
Implementing the Top 4 Mitigation Strategies - A Guide for Project Managers	Microsoft	pdf
Implementing the Top 35 Mitigation Strategies on Windows Platform	Microsoft	pdf    R1
Guide to Increased Security in Industrial Information and Control Systems	MSB	pdf    R5
Good Practice Guide on Firewall Deployment for Control Systems	NISCC	pdf
Secure Remote Access Reference	NIST	pdf
NISTIR-7628 - Guidelines for Smart Grid Cyber Security (consolidated) Rev. 1	NIST	pdf    R3
Cisco Security Switch Configuration Guide	NSA	pdf
Top 10 Information Assurance Mitigation Strategies	NSA-IAD	pdf    R4
Anti-Exploitation	NSA-IAD	pdf    R4
Antivirus File Reputation Services	NSA-IAD	pdf    R4
Application Whitelisting	NSA-IAD	pdf    R4
Control Administrative Privileges	NSA-IAD	pdf    R4
Defending Against Destructive Malware	NSA-IAD	pdf    R4
Host Intrusion Preventation Systems	NSA-IAD	pdf    R4
Limited Workstation-to-Workstation Communications	NSA-IAD	pdf    R4
Secure Baseline Configuration	NSA-IAD	pdf    R4
Segregate Networks and Functions	NSA-IAD	pdf    R4
Software Improvements	NSA-IAD	pdf    R4
Web DNS Reputation	NSA-IAD	pdf    R4
Mapping of NERC-CIP Ver 3-5 to 20 Critical Security Controls	CoCS	pdf    R2
Mapping of NERC-CIP Ver 3-5 to 20 Critical Security Controls	CoCS	xls     R2
Top 20 Critical Security Controls - Ver 5.1	CoCS	pdf
Top 20 Critical Security Controls - Ver 5.0	CoCS	pdf    R2
Top 20 Critical Security Controls - Ver 4.0 poster	CoCS	pdf    R2
Top 20 Critical Security Controls - Ver 4.0 - 11-2012	SANS	pdf    R1
Top 20 Critical Security Controls - Ver 3.1 - 11-2011	SANS	pdf
Top 20 Critical Security Controls - Ver 3.1 poster	SANS	pdf
Top 20 Critical Security Controls - Ver 3.1 - 08-2011	SANS	pdf    R1
Top 20 Critical Security Controls - Ver 2.3 - 11-2009	SANS	pdf    R1
A Brief History of the 20 Critical Secuirty Controls	SANS	html  R1
Designing a DMZ	SANS	pdf
Industrial Control System Security Resources - poster	SANS	pdf    R2
Quantitatively Assessing and Visualising Industrial System Attack Surfaces	Univ of Cam	pdf    R4
10 Basic Cybersecurity Measures - Best Practices to Reduce Exploitable Weaknesses and Attacks	Water-ISAC	pdf
		TOP

White Papers & Articles

Securing Your Control System	ABB - ISA	pdf
The Rocky Relationship between Safety and Security	ABB	pdf
Distinguishing  Internet-facing ICS Devices using PLC Programming Information	AFIT	pdf    R4
Creating Secure Systems through Attack Tree Modeling	Amenaza	pdf
Windows XP End of Service: Practical Options for Industrial Applications	Belden	pdf    R4
Windows XP End-of-Life Handbook for Upgrade Latecomers	Bit9	pdf    R2
Changing the CFO Mindset on Cybersecurity	CFO Mag	pdf
Cyber Security at Civil Nuclear Facilities	Chatham House	pdf
Security and Prosperity in the Information Age ( Vol 1 | Vol 2)	CNAS	pdf    R1
Understanding Distributed-Denial-of-Service (DDoS) Attacks	DHS	pdf    R1
Six Questions CEOs Should IT Teams about Cybersecurity	Crowe Horwath	pdf
Changing Face of Cybersecurity	Crowe Horwath	pdf
A New Responsibility for Utility Boards of Directors: Cybersecurity	Energy Collect	pdf
Energy Company Cybersecurity References	Energy Collect	pdf
Can We Learn from SCADA Security Incidents	ENISA	pdf    R5
Case Studies for the Cybersecurity of IACS	ERNCIP	pdf
R&D and Standardization Road Map	ESCoRTS	pdf
Securing SCADA Infrastructure	Fortinet	pdf    R5
Critical Capabilities for Security Information and Event Management (SIEM)	Gartner	pdf
Magic Quadrant for Security Information and Event Management (2015 | 2014)	Gartner	pdf
Cyber Security Posters	Honeywell	pdf    R1
Secure Remote Access to Process Control Systems	Honeywell	pdf    R1
Cyber Wars by Byres Staggs	Hydrocarbon Engineering	pdf    R1
Know Your Enemies - A Primer on Advanced Persistent Threat Groups	ICIT	pdf
Implementing Deep Packet Inspection for EtherNet/IP	IEB	pdf    R4
SCADA Challenges for Forensic Investigators	IEEE	pdf
Architecture for Secure SCADA and Distributed Control System Networks	Juniper	pdf    R5
Debunking the Top 5 Security Implementation Myths	Kaspersky	pdf
Six Steps to Control System Cybersecurity	InTech	pdf
ICS Virtualization Project - Final Report	LOGIIC	pdf    R5
Advanced Targeted Attacks: It Takes a System	McAfee	pdf
Disrupt Targeted Attacks	McAfee	pdf
Monitor Continuously. Respond Swiftly.	McAfee	pdf
Mitigating Pass-the-Hash and other Credential Theft Attacks	Microsoft	pdf    R1
Importance of Cybersecurity Monitoring for Utilities	n-Dimension	pdf
Centralized OT Security Management for Your Entire SCADA/ICS Environment	NextNine	pdf
Exploit Evasion Defenses Analysis	NSS Labs	pdf    R1
Exploit Protection Analysis	NSS Labs	pdf    R1
Convergence in Automation System Protection (Executive Summary)	Pikes Res	pdf    R1
All Data Diodes Are Not Equal	Owl	pdf
Defining the 21st Century Cybersecurity Protection Platform for ICS	Palo Alto	pdf
Defending Yesterday (all sectors)	PWC	pdf    R1
Categorizing Threats - Building and Using a Threat Matrix	SNL	pdf    R1
Pass-the-Hash Attacks: Tools and Mitigation	SANS	pdf    R4
Protecting Control Networks	Sourcefire	pdf    R1
Eliminating Cybersecurity Blind Spots - Challenges for Business	Tenable	pdf
SCADA and CIP Security in a Post Stuxnet World	Tofino	pdf    R1
7 Steps to ICS and SCADA Security	Tofino	pdf
Understanding Deep Packet Inspection for SCADA Security	Tofino	pdf    R1
Communicating Cybersecurity to Boards and Executives	Tripwire	pdf
The Cybersecurity Literacy Confidence Gap	Tripwire	pdf
Executive Guide to the Top 20 Critical Security Controls	Tripwire	pdf
Stepping Up the Battle Against Advanced Threats	Trusteer	pdf    R5
		TOP

Assessment Guidance

Security Vulnerability Assessments	API	pdf
Cyber Security Assessments of Industrial Control Systems (Good Practice Guide)	CPNI	pdf    R2
Cyber Security Assessments of Industrial Control Systems (Viewpoint)	CPNI	pdf    R2
Cyber Security Assessments of Industrial Control Systems	DHS	pdf
Cyber Assessments Methods for SCADA	ISA	pdf
Guideline on Network Security Testing	NIST	pdf
Framework for Assessing and Improving Security Posture of ICS	NSA	pdf
Blending Security Checks	Tenable	pdf
Open Source Security Testing Methodology Manual v3.0		pdf
		TOP

Assessment Tools

Cyber Security Evaluation Tool (CSET)	html
Cyber Security Evaluation Tool (CSET) - Version 8.1	iso
Cyber Security Evaluation Tool (CSET) - Version 8.0	iso
Cyber Security Evaluation Tool (CSET) - Version 7.0	iso
Cyber Security Evaluation Tool (CSET) - Version 6.2	iso    R4
Cyber Security Evaluation Tool (CSET) - Version 6.1	iso    R4
Cyber Security Evaluation Tool (CSET) - Fact Sheet	pdf
CSET Sample Project (CSET v4)	orxml
CSET Sample Project (CSET v6)	cset  R1
CSET Sample Output - Detailed Report	pdf
CSET Sample Output - Executive Summary	pdf
CSET Sample Output - Security Plan Report	pdf
CSET Sample Output - Site Summary Report	pdf
Nessus SCADA Plugins	html
Nessus and NERC CIP Compliance	html  R1
DigitalBond - Nessus SCADA Toolkit	html  R1
Digital Bond - Bandolier Audit Files for Nessus	html
Auditing SCADA and Control System Networks (Tenable)	html
Compliance Auditing with Microsoft PowerShell (Tenable)	html
Nessus Blog - SCADA (Tenable)	html
	TOP

ICS Cyber Event Reference

STUXNET
Stuxnet Under the Microscope v1.31 | v1.1	ESET	pdf
Stuxnet Worm and Options for Remediation	Ind Def	pdf
To Kill a Centriduge - Technical Analysis of What Stuxnet’s Creators Tried to Achieve	Langner	pdf    R4
Stuxnet 0.5 - The Missing Link v1.0	Symantec	pdf    R1
Stuxnet Dossier v1.4 | v1.3	Symantec	pdf
Analysis of Siemens Stuxnet Malware Attacks	Tofino	pdf
How Stuxnet Spreads v1.0	Byres Ginter Langill	pdf
DUQU
Duqu 2 - Technical Details v2.1	Kaspersky	pdf
Duqu 2 - Frequently Asked Questions	Kaspersky	pdf
Duqu 2 - Indicators of Compromise (IoC)	Kaspersky	pdf
Duqu 2 - Yara Rules	Kaspersky	pdf
W32.Duqu Threat Analysis	McAfee	pdf
W32.Duqu v1.3 | v1.2 | v1.0	Symantec	pdf
DRAGONFLY / HAVEX
Defending Against the Dragonfly Cyber Security Attacks	Belden	pdf    R5
Havex Hunts for ICS/SCADA Systems	F-Secure	pdf    R2
Energetic Bear - Crouching Yeti ( Report | Appendices)	Kaspersky	pdf    R2
Full Disclosure of Havex Trojans	NETRESEC	pdf    R4
Observing the Havex RAT	NETRESEC	pdf    R4
SCADA Network Forensics - Analyzing Havex	NETRESEC	pdf    R4
Dragonfly: Cyberespionage Attacks Against Energy Suppliers v1.2 | v1.0	Symantec	pdf    R2
Targeted Attacks Against the Energy Sector	Symantec	pdf    R2
Miscellaneous
sKyWIper (Flame/Flamer) - A Complex Malware for Targeted Attacks	CrySys	pdf    R1
ICS-CERT Incident Response Summary (2009-2011)	DHS	pdf
Targeted Cyber Intrusion Detection and Mitigation Strategies (ICS-TIP-12-146-01A)	DHS	pdf    R1
Fireeye APT30 Report - The Mechanics of a Long-Running Cyber Espionage Operation	Fireeye	pdf    R5
Hacking the Street? FIN4 Likely Playing the Market	Fireeye	pdf    R4
Mandiant APT28 Report - A Window into Russias Cyber Espionage Ops	Mandiant	pdf    R4
Mandiant APT1 Report - Exposing One of China's Cyber Espionage Units	Mandiant	pdf    R1
Mandiant APT1 Report Appendices	Mandiant	zip     R1
Night Dragon - Global Energy Cyberattacks	McAfee	pdf
The Black Vine Cyberespionage Group	Symantec	pdf
Operation "Oil Tanker" - The Phantom Menace	Panda	pdf
Regin: Top-tier Espionage Tool Enables Stealthy Surveillance	Symantec	pdf    R4
The Downadup Codex v2.0	Symantec	pdf    R1
The Elderwood Project	Symantec	pdf    R1
OpenSSL - How Does It Affect You	Tenable	pdf    R2
		TOP

Threat Intelligence

Cyber Threat Report 2015	ACSC	pdf
IT Security Situation in Germany (2014 (DE) | 2011 | 2009)	BSI	pdf
Threat Catalogue for Elementary Threats	BSI	pdf     R2
Cyber Crime and Security Report 2013 (pdf | doc)	CERTAu	R2
Cyber Crime and Security Report 2012 (pdf | doc)	CERTAu	R2
Cisco Annual Security Report (2016 | 2015 | 2014 | 2013 | 2011 | 2010)	Cisco	pdf
Global Threat Report	CrowdStrike	pdf     R2
Computer Crime and Security Survey (2010 | 2009)	CSI	pdf     R2
Sector Resilience Report: Electric Power Delivery - June 2014	DHS	pdf     R2
Threat Landscape 2015	ENISA	pdf
Advanced Threat Report - 2012 (1H | 2H)	FireEye	pdf     R1
Definitive Guide to Next-Generation Threat Protection	FireEye	pdf     R1
The Evolving Threat Landscape in 2016	Fortinet	pdf
ICS2 Global Information Security Workforce Study (2013)	Frost-Sullivan	pdf     R1
BYOD and Mobile Security 2014	InfoSec	pdf     R2
Executive Perspectives on Cyber Threat Intelligence	iSight	pdf
Cybersecurity in the Oil and Gas Industry	LMCO	pdf     R4
Cybercrime Exposed: Cybercrime as a Service	McAfee	pdf     R1
McAfee Global Threat Intelligence	McAfee	pdf     R1
Hacking the Human OS	McAfee	pdf     R5
Reputation - The Foundation of Effective Threat Protection	McAfee	pdf     R1
State of Security (March 2012)	McAfee	pdf     R1
Threat Predictions 2016	McAfee	pdf
Threat Predictions 2015 (add'l details in Q3-2015 Threat Report)	McAfee	pdf
Threat Report 2015 (Q1 | Q2 | Q3)	McAfee	pdf
Threat Predictions 2014	McAfee	pdf     R1
Threat Report 2014 (Q1 | Q2 | Q3 | Q4)	McAfee	pdf     R5
Threat Predictions 2013	McAfee	pdf     R1
Threat Report 2013 (Q1 | Q2 | Q3 | Q4)	McAfee	pdf     R1
Threat Predictions 2012	McAfee	pdf     R1
Threat Report 2012 (Q1 | Q2 | Q3 | Q4)	McAfee	pdf     R1
Security Intelligence Report 2015 (1H)	Microsoft	pdf
Security Intelligence Report 2015 - Key Findings (1H)	Microsoft	pdf
Security Intelligence Report 2015 - Worldwide Threat Assessment (1H)	Microsoft	pdf
Security Intelligence Report 2014 (1H | 2H)	Microsoft	pdf
Security Intelligence Report 2013 (1H | 2H)	Microsoft	pdf     R1
Security Intelligence Report 2012 (1H | 2H)	Microsoft	pdf     R1
Security Intelligence Report 2011 (2H)	Microsoft	pdf
Global Threat Intelligence Report 2014	NTT	pdf     R4
Application Usage and Threat Report 2015 - Unit 42	Palo Alto	pdf
Vulnerability Review 2015	Secunia	pdf     R5
State of Security in Control Systems Today (Survey Results) - 2015	SANS	pdf
Intelligence Report (Feb. 2013)	Symantec	pdf     R1
Internet Security Threat Report - 2012 Trends (Appendix)	Symantec	pdf     R1
Report on Cybersecurity and Critical Infrastructure in the Americas	Trend Micro	pdf     R5
Spear-Phishing - Email: Most Favored APT Attack Bait (2012)	Trend Micro	pdf     R1
Data Breach Investigations Report 2016	Verizon	pdf     R7
Data Breach Investigations Report 2015	Verizon	pdf     R5
Data Breach Investigations Report 2014 (Briefing)	Verizon	pdf     R5
Data Breach Investigations Report 2013	Verizon	pdf     R1
Data Breach Investigations Report 2012	Verizon	pdf     R1
		TOP

Open-Source Intelligence

Bugtraq (seclists.org) (2014 filter)	html  R1
Computer Security Vulns	html  R1
Exploit-DB	html  R1
National Vulnerability Database (NIST)	html  R1
Open-Source Vulnerability Database (SCADA search)	html  R1
Rapid 7 (Metasploit) Vulnerabilities & Exploit Modules	html  R1
Secunia	html  R1
Security Focus (by Symantec)	html  R1
	TOP

ICS Supplier Security Reference

Industrial Information System Security	ABB	pdf    R3
A Guide to Securing Your Process	Emerson	pdf
Essentials of Cyber Security	Honeywell	pdf
Integrating Control and Safety with Secure System Segregation	Honeywell	pdf
Securing Industrial Control Systems: A Guide for Properly Securing ICS Operating in a Microsoft Windows Environment	Wonderware (Schneider)	pdf    R1
Achieving Secure, Remote Access to Plant-Floor Applications and Data	Rockwell Cisco	pdf    R1
Control System Security Updates	Rockwell	pdf    R1
Securing Manufacturing Computing and Controller Assets	Rockwell Cisco	pdf    R1
Security Concept for PCS7 and WinCC	Siemens	pdf    R1
NERC CIP Security Solution Suite	Tripwire	pdf    R4
SUPPLIER SECURITY WEBSITES / PORTALS / CERTS
Cyber Security Alerts and Notifications	ABB	html  R1
Cyber Security Updates	Invensys	html  R1
Security Advisory Index (login required)	Rockwell	html  R1
Cybersecurity Support Portal (Products)	Schneider	html  R1
Cyber Security Updates (Software)	Schneider	html  R1
ProductCERT Security Advisories	Siemens	html  R1
		TOP

Insider Threats

Common Sense Guide to Prevention and Detection of Insider Threats	CERT	pdf    R1
Insider Threat Control - Using a SIEM signature to detect potential precursors to IT Sabotage	CERT	pdf    R1
Insider Threat Control - Using Centralized Logging to Detect Data Exfiltration Near Insider Termination	CERT	pdf    R1
Insider Misuse of IT Systems	CPNI	pdf    R2
2010-2011 Computer Crime and Security Survey	CSI	pdf    R1
Cybersecurity Watch Survey 2011	Deloitte	pdf    R1
Combating the Insider Threat	DHS	pdf    R4
Insider Threat Awareness Webinar	DHS	pdf    R1
National Risk Estimate: Insider Threat Fact Sheet	DHS	pdf    R4
Risks to US Critical Infrastructure from Insider Threat (23 Dec 2013)	DHS	pdf    R1
Insider Threats	FBI	pdf    R1
Insider Threat Examples by Sector		pdf    R1
Insider Threat to Criticail Infrastructure	NIAC	pdf    R1
Cost of Data Breach Study 2011	Ponemon	pdf    R1
		TOP

Risk Management

Good Practice Guide - Understand the Business Risk	CPNI	pdf    R2
Good Practice Guide - Manage Third Party Risk	CPNI	pdf    R2
Five Critical Attributes of Effective Cybersecurity Risk Management	Crowe Horwath	pdf
Reducing Operational Risk in Oil and Gas Industry	EMC	pdf    R4
Bound to Fail: Why Cyber Security Risk Cannot Simply Be "Managed" Away	Langner	pdf    R2
Cyber Supply Chain Risk Management: Toward a Global Vision of Transparency & Trust	Microsoft	pdf    R1
SP800-30 (Rev 1) - Risk Management Guide for IT Systems	NIST	pdf    R1
SP800-39 - Managing Information Security Risk	NIST	pdf    R1
Cyber-Risk Oversight - Director's Handbook Series	Tripwire	pdf
State of Risk-Based Security Management	Tripwire	pdf
		TOP

Incident Response

Handbook for Computer Security Incident Response Teams (CSIRT)	CMU-SEI	pdf
Developing a Cybersecurity Incident Response Capability	DHS	pdf
Best Practices for Victim Response and Reporting of Cyber Incidents	FBI	pdf
SP800-61 - Computer Security Incident Handling Guide	NIST	pdf
		TOP

Government

Directive 2008/114/EC - Identification of European Critical Infrastructures	EU	pdf    R2
European Programme for Critical Infrastructure Protection	EU	pdf    R2
Analysis of Critical Infrastructures	Germany	pdf    R2
CIP Implementation Plan of the National Plan for Information Infrastructure Protection	Germany	pdf    R2
Meridan Library of Global Regulatory Standards (hosted by Qatar CERT)	Qatar	html  R1
Strategic Framework and Policy Statement - Improving Resilience of Critical Infrastructure	UK	pdf    R2
Framework to Reduce Cyber Risks to Critical Infrastructure v1.0	USA	pdf    R1
Executive Order - Improving Critical Infrastructure Cyber Security	USA	pdf    R1
Executive Order - Fact Sheet	USA	pdf    R1
PPD-21 - Critical Infrastructure Security and Resilience	USA	pdf    R1
PPD-21 - Fact Sheet	USA	pdf    R1
Postmarket Management of Cybersecurity in Medical Devices (FDA)	FDA	pdf
Challenges in Securing Control Systems (GAO)	USA	pdf
Cybersecurity for Critical Infrastructure Protection (GAO)	USA	pdf    R1
DHS Needs to Enhance Capabilities, Improve Planning, and Support Greater Adoption of Its NCPS (GAO)	USA	pdf
CyberSkills Task Force Report - 2012	USA	pdf    R4
Intelligence Information Sharing Report - 2012	USA	pdf    R4
National Infrastructure Protection Plan	USA	pdf
NIPP - Sector-Specific Plan - Chemical	USA	pdf
NIPP - Sector-Specific Plan - Critical Manufacturing	USA	pdf
NIPP - Sector-Specific Plan - Energy	USA	pdf
NIPP - Sector-Specific Plan - Information Technology	USA	pdf
NIPP - Sector-Specific Plan - Transportation Systems	USA	pdf
NIPP - Sector-Specific Plan - Water	USA	pdf
Federal Government's Track Record on Cybersecurity and Critical Infrastructure	USA	pdf
National (Qatar) ICS Security Standard	QCERT	pdf
		TOP

Roadmaps

Cross Sector Roadmap for Cybersecurity of Control Systems	pdf
Roadmap to Achieve Energy Delivery Systems Cybersecurity (current)	pdf
Roadmap to Secure Control Systems in the Chemical Sector	pdf
Roadmap to Secure Control Systems in the Energy Sector (outdated)	pdf
Roadmap to Secure Control Systems in the Water Sector	pdf
Securing ICS in the Chemical Sector	pdf
Strategy for Securing Control Systems	pdf
	TOP

Case Studies

Backdoors and Holes in Network Perimeters	pdf
Deepwater Horizon Accident Investigation Report (Executive Summary | Full Report)	pdf    R1
Maroochy Water Services Australia (NIST) (Report | Presentation)	pdf
Olympic Pipeline Bellingham, Washington (NIST) (Report | Presentation)	pdf
German Still Works Facility (SANS)	pdf
Undirected Attached Against Critical Infrastructure	pdf
Air Traffic Control (ATC) Cyber Security Project (CSFI)	pdf
ABB SCADA EMS System INEEL Baseline Summary Test Report (INEEL)	pdf
Control System Security Assessments including PCS7 Details (INL-Siemens)	pdf
Bellingham Pipeline Explosion (NTSB)	pdf    R1
	TOP

Security Considerations for OPC

Effective OPC Security for Control Systems	Matrikon	pdf
Hardening Guidelines for OPC Hosts	Byres	pdf
OPC Exposed	Byres	pdf
Understanding OPC	Byres	pdf
Securing Your OPC Classic Control Systems	Tofino	pdf
Security Implcations of OPC in Control Systems	DHS	pdf
		TOP

ICS Basics

"The Ever-Expanding Mind of Morley = the Father of the PLC"	mp4
Automation 101 - An Industry Guide to Control System Engineering	pdf    R3
Acronyms List	pdf
PLC Handbook - Practical Guide to Programmable Logic Controllers	pdf
SCADA Basics - NCS TIB 04-1	pdf
SCADA Basics - TM 5-601	pdf
PLC Programming Theory	pdf
Power System and Substation Automation	pdf    R3
Control Magazine's 2016 Readers Choice Awards	pdf
Top 50 Automation Vendors - North America (Control-ARC) (2015 | 2013)	pdf
Top 50 Automation Vendors - Worldwide (Control-ARC) (2015 | 2013)	pdf
ICS SUPPLIER SYSTEM INFORMATION
ABB AC800M Controller - Communication Protocols	pdf    R3
ABB System 800xA - Reference Architecture	pdf
ABB System 800xA - Solutions Handbook	pdf    R3
ABB System 800xA - System Guide Summary	pdf    R1
ABB - Essentials of Safety Instrumented Systems	pdf    R1
Emerson - Safety LIfecycle Workbook	pdf    R4
Wibu Systems - Software Integrity Protection	pdf
	TOP

ICS Protocols & Networks

INDUSTRIAL PROTOCOLS
System Comparison - The Five Major Technologies	IE Facts	pdf    R1
Comparison of Protocols Used in Remote Monitoring	IIT	pdf    R4
Introduction to Modbus TCP/IP	Acromag	pdf    R2
Introduction to Modbus Serial and Modbus TCP	Extension	pdf    R1
Modbus Application Protocol Specification v1.1b3	Modbus.org	pdf
Modbus Messaging on TCP/IP Implementation Guide v1.0b	Modbus.org	pdf
Open Modbus/TCP Specification		docx R4
DNP3 User & Reference Manual	Control Microsystems	pdf    R1
DNP3 Overview	Triangle Microworks	pdf    R1
DNP3 Protocol Primer	DNP Users Group	pdf    R1
DNP3 Secure Authentication v5 2011-11-08		pdf    R1
DNP3 Decoder/Parser (online)	Automatak	html  R5
Introduction to EtherNet/IP Technology		pdf
EtherNet/IP	Delta	html  R3
Principles of EtherNet/IP Communication	Schneider	pdf
EtherNet/IP - Using Explicit Messaging	Delta	pdf    R3
Communicating with Rockwell Automation Products using EtherNet/IP Explicit Messaging	Rockwell	pdf
Optimize EtherNet/IP	Journal	pdf    R1
Common Industrial Protocol (CIP)	ODVA	pdf    R1
ControlNet - CIP on CTDMA Technology	ODVA	pdf    R1
DeviceNet - CIP on CAN	ODVA	pdf    R1
EtherNet/IP - CIP on Ethernet Technology	ODVA	pdf    R1
EtherNet/IP - A Guide for Developers	ODVA	pdf    R3
Network Infrastructure for EtherNet/IP: Introduction and Considerations	ODVA	pdf    R1
Securing EtherNet/IP Networks	ODVA	pdf    R1
EtherNet/IP Specification for ACR Series Products	Parker	pdf    R3
DF1 Protocol and Command Set Reference Manual	Rockwell	pdf    R4
BACnet Primer	Phoenix Controls	pdf    R3
Guide to OPC	Matrikon	pdf    R2
Distributed Component Object Model (DCOM) Technical Overview	Microsoft	pdf
OPC-DCOM - Five Things You Need to Know	OPC TI	pdf
OPC Data Access - Custom Interface - Ver 2.05A	OPCF	pdf    R2
OPC Unified Architecture - Future standard for communication and information modeling in automation	ABB	pdf
The Evolution of OPC - Classic to Unified Architecture	Honeywell	pdf
OPC Unfied Architecture - The Interoperabilty Standard	OPCF	pdf    R3
OPC Unified Architecture - Collaboration with PLCopen	OPCF	pdf    R3
OPC Unified Architecture - Advantages and Possibilities of Use	OPCF	pdf    R3
OPC Unified Architecture - Overview and Concepts - Ver 1.02	OPCF	pdf    R2
OPC Unified Architecture - Secure Communication with IEC 62541	OPCF	pdf    R3
PROFINET Security Guideline	PI	pdf    R1
PROFINET System Description - Technology and Application	PI	pdf    R1
Power Industry Communication Protocol Features and Benefits	ProSoft	pdf    R3
Technical Overview and Benefits of IEC 61850 Standard for Substation Automation	SISCO	pdf    R3
Top 10 Recommendations for Plantwide EtherNet/IP Deployments	Rockwell Cisco	pdf    R1
PROFIBUS and Modbus: A Comparison	Siemens	pdf    R1
Comparison of DNP3 and IEC 60870-5-101	Triangle Microworks	pdf    R3
Comparison of  Modbus and DNP3 Communication Protocols	Triangle Microworks	pdf    R4
Using DNP3 & IEC 60870-5 Communication Protocols in the Oil & Gas Industry	Triangle Microworks	pdf    R1
INDUSTRIAL NETWORKING
Substation Cellular WAN Solution Reference Architecture	Belden	pdf    R4
Substation Ethernet MPLS Solution Reference Architecture	Belden	pdf    R4
Substation Ethernet WAN Solution Reference Architecture	Belden	pdf    R4
Substation Communications Design - Legacy to IEC 61850	Belden	pdf    R4
Substation Communications Design - Legacy to IEC 61850 - Best Practices	Belden	pdf    R4
Substation Communications Design - Legacy to IEC 61850 - Practical Applications	Belden	pdf    R4
Substation Communications Design - Legacy to IEC 61850 - Reliability and Security	Belden	pdf    R4
Industrial Ethernet - A Control Engineers Guide	Cisco	pdf    R1
Industrial Networks: Wired & Wireless		pdf    R1
Ethernet Backbones in Safety and Basic Process Control Systems	GE-IP	pdf    R3
Field Wireless Networks	ISA	pdf    R1
Converged Plantwide Ethernet (CPwE) Design & Implementation Guide	Rockwell Cisco	pdf    R1
Connected Factory Architecture Reference Architecture	Cisco	pdf    R4
Ethernet Design Considerations for Control System Networks	Rockwell	pdf    R1
Fundamentals of EtherNet/IP Networking	Rockwell	pdf    R4
TCP/UDP Ports Used by Rockwell and Allen-Bradley Products	Rockwell	pdf    R1
Ethernet to the Factory Design and Implementation Guide v1.2	Rockwell Cisco	pdf    R1
SNMP Tutorial	DPS Telecom	pdf    R1
Demystifying the SNMP MIB	DPS Telecom	pdf    R1
		TOP

User Guides and Manuals

AlienVault OSSIM Installation Guide	pdf
AlienVault OSSIM Snare Windows	pdf
AlienVault OSSIM Users Manual v1.0	pdf
Allen-Bradley Stratix Ethernet Switches	pdf    R4
Allen-Bradley Stratix 5900 Industrial Router	pdf    R4
Certes Networks Layer 4 (Payload) Encryption	pdf    R1
Certes Networks TrustNet Group Encryption	pdf    R1
Certes Networks CEP-5LC Datasheet	pdf    R1
Certes Networks CEP-5LC Brochure	pdf    R1
Certes Networks CEP-10 Datasheet	pdf
Certes Networks Variable Speed Encryptors Datasheet	pdf
Cisco Guide to Hardening IOS Devices	pdf
Cisco IOS Switch Security Configuration Guide (NSA)	pdf    R2
Cisco SAFE Security Reference Architecture (White Paper)	pdf    R1
Cisco SAFE Security Reference Architecture (Poster)	pdf    R1
Cisco Network Admission Control	pdf    R1
Cisco TrustSec Solution At-a-Glance	pdf    R1
Cisco TrustSec Solution Overview	pdf    R1
Enterasys Secure Networks for Process Control	pdf    R1
Enterasys Network Access Control	pdf    R1
eWon Industrial Remote Access Routers	pdf
Hardening HP ProCurve Switches	pdf    R2
MatrikonOPC Tunneller User Manual	pdf    R1
MatrikonOPC Server for Simulation User Manual	pdf
Microsoft Introduction to Network Access Protection	pdf    R1
Nessus Documentation (Tenable)	html
Nessus 6.4 Command Line Reference	pdf
Nessus 6.4 Installation and Configuration Guide	pdf
Nessus 6.4 SCAP Assessments	pdf
Nessus 6.4 User Guide	pdf
Nessus Activation Code Installation	pdf
Nessus Compliance Checks (r89)	pdf
Nessus Credential Checks	pdf
Nessus Patch Management Integration	pdf
Suricata - Basic Setup	pdf    R1
Suricata - Setting up IPS Inline for Linux	pdf    R1
Suricata - Suricata.yaml Reference	pdf    R1
Suricata - Ubuntu Getting Started with Suricata	pdf    R1
Suricata - Ubuntu Installation	pdf    R1
Tofino Argon 100 Hardware Installation and Troubleshooting Guide v1.0.0	pdf
Tofino Argon 220 Hardware Installation and Troubleshooting Guide v1.0.0	pdf
Tofino Argon CMP Installation and Upgrade Guide v1.7.0	pdf
Tofino Argon CMP User's Guide v1.7.0	pdf
Tofino Pre-Defined Controllers and Protocols	pdf    R5
Tofino Xenon Security Appliance - Datasheet	pdf    R5
Tofino Xenon Security Appliance - Product Bulletin	pdf
VMware Network Segmentation in Virtualized Environments	pdf    R1
VMware DMZ Virtualization using vSphere 4 Cisco Nexus	pdf    R1
VMware DMZ Virtualization with Infrastructure 3 (legacy)	pdf    R1
VMware vSphere 5.5 Security Hardening Guide	xlsx   R1
VMware vSphere 5.1 Security Hardening Guide	xlsx   R1
VMware vSphere 5.0 Security Hardening Guide	xlsx   R1
VMware vSphere 4.1 Security Hardening Guide (legacy)	pdf    R1
VMware vSphere 4.0 Security Hardening Guide (legacy)	pdf    R1
VMware Instrastructure 3 Securing Hardening (legacy)	pdf    R1
Wurldtech Industrial Next-Generation Firewall Solution Brief	pdf    R5
Wurldtech Industrial Next-Generation Firewall Spec Sheet	pdf
	TOP

Cheat Sheets

Hacking - Certified Ethical Hacker Cheat Sheet Exercises	pdf
Hacking - Meterpreter Cheat Sheet	pdf
Hacking - Nessus NMAP Commands	pdf
Hacking - netcat	pdf
Hacking - NMap Mindmap Reference	pdf
Hacking - NMap Quick Reference Guide	pdf
Hacking - Reconnaissance Reference Sheet	pdf
Hacking - Tripwire Common Security Exploit-Vuln Matrix	pdf
HTML - Markdown	pdf
Linux - Bourne Shell Quick Reference	pdf
Linux - Quick Reference Card	pdf
Linux - Scapy	pdf
Linux - Shell Cheat Sheet	pdf
Linux - Shell Scrip Cheat Sheet	pdf
Linux - tcpdump	pdf
Linux - Ubuntu Quick Reference	pdf
Linux - VI Editor Reference	pdf
MAC - OSX Key Combo Reference Guide	pdf
Networking - Border Gateway Protocol	pdf
Networking - Cisco IOS Interior Routing Protocols	pdf
Networking - Cisco IOS IPv4 Access Lists	pdf
Networking - Cisco IOS Versions	pdf
Networking - Cisco IOS Zone-Based Firewall	pdf
Networking - Common TCP-UDP Ports	pdf
Networking - EIGRP (Enhanced Interior Gateway Routing Protocol)	pdf
Networking - First Hop (Router) Redundancy	pdf
Networking - Frame Mode MPLS	pdf
Networking - IEEE 802.11 WirelessLAN	pdf
Networking - IEEE 802.1X Authentication	pdf
Networking - IP Tables Processing	png    R1
Networking - IP Security (IPsec)	pdf
Networking - IPv4 Multicast	pdf
Networking - IPv4_Subnetting	pdf
Networking - IPv6	pdf
Networking - IS-IS	pdf
Networking - Network Address Translation (NAT)	pdf
Networking - Open Shortest Path First (OSPF)	pdf
Networking - Physical Terminations	pdf
Networking - Point-to-Point Protocol (PPP)	pdf
Networking - Quality of Service (QoS)	pdf
Networking - Routing Information Protocol (RIP)	pdf
Networking - Spanning Tree	pdf
Networking - TCPIP	pdf
Networking - Virtual Local Area Networks (VLAN)	pdf
Networking - Voice over IP (VoIP) Basics	pdf
Networking - Wireshark Display Filters	pdf
Programming - Ruby	pdf    R1
Programming - x64 Instructions	pdf    R2
Programming - x86 Instructions	pdf    R2
Programming - x86 Instructions	pdf    R2
Source Control - Git	pdf
SQL - MySQL Commands	pdf
VMware - Reference Card	pdf
Windows - Command Line	pdf    R1
Windows Command Reference (book extract)	pdf    R4
	TOP

eBooks

Endpoint Threat Detection,  Response and Prevention for Dummies	Bit9	pdf    R4
Next-Generation Intrusion Prevention Systems (IPS) for Dummies	Cisco - Sourcefire	pdf    R3
Universal Threat Management (UTM) for Dummies	Forinet	pdf    R1
Fundamentals of Azure	Microsoft	pdf
Introducing Microsoft System Center 2012R2 - Technical Overview	Microsoft	pdf
Introducing Windows 10 for IT Professionals - Preview Edition	Microsoft	pdf
Introducing Windows 8.1 for IT Professionals - Technical Overview	Microsoft	pdf
Introducing Windows Azure for IT Professionals	Microsoft	pdf
Introducing Windows Server 2012R2 - Technical Overview	Microsoft	pdf
Vulnerability Management for Dummies	Qualys	pdf    R1
Network Monitoring and Troubleshooting for Dummies	Riverbed	pdf
Security Configuration Management for Dummies	Tripwire	pdf
		TOP

Multimedia

WEB-BASED DEMONSTRATION VIDEOS BY SCADAHACKER
Exploitation 101: Turning a SCADA Vulnerability into a Successful Attack	html
Protecting Your ICS from Zero-Day Attacks	html
Stuxnet - Introduction, Installation, and Injection Methods	html
Stuxnet - Using Software Restriction Policy as a Mitigation	html
WEB-BASED THIRD-PARTY VIDEOS
Auditing SCADA and Control System Networks (Tenable)	html
	TOP

Spreadsheets

IP Address Subnet Calculator	xls    R1
Network Assistant (subnetting, port lookup, cli commands, acronyms)	xls    R1
IP Subnetting Assistant (tools to understand "visibility")	xls    R1
	TOP

On-Line Tools and Applications

NIST Quick Guide for 800-53 (Apple IOS)	html
NIST Quick Guide for 800-53 (Android)	html
Booz-Allen-Hamilton iAssurance for 800-53 (Apple IOS)	html
NIST Specifical Publication 800-53 Rev. 3 Desktop Tool (Windows)	html
National Vulnerability Database - NIST Special Publication 800-53 Rev. 3 (http)	html
National Vulnerability Database - CVSS Scoring Tool	html
NIST Computer Forensics Tool Catalog	html  R1
	TOP

Websites

INDUSTRIAL
American Chemistry Council Chemical Sector Cyber Security Program	html
American Gas Association -- Natural Gas Security	html
ASIS International	html
Canadian Society for Industrial Security (CSIS)	html
Control Engineering	html
Control Global (Control Magazine)	html
Digital Bond: Securing the Critical Infrastructure	html
Electric Power Research Institute (EPRI)	html
Electrical Energy Online	html
Emerging Security Standards to the EU Power Network Controls & other Critical Equipment	html
IEEE Power Engineering	html
InfraGard	html
ISA-99, Manufacturing and Control Systems Security	html
ISA Security Compliance Institute (ISASecure)	html  R1
Industrial Control System Security (NIST)	html
SCADA and Control Systems Security (SCADASEC) Mailing List	html
SCADA HoneyNet Project	html
ScadaSafe Project	html
The Infrastructure Security Partnership (TISP)	html
Water Sector Information Sharing and Analysis Center	html
CERT AND SECURITY FIRMS
AusCERT - Useful Security Resources	html
Forum of Incident Response and Security Teams (FIRST)	html
McAfee Labs	html
McAfee Threat Center	html
Symantec - Security Response - Threats, Risks, Vulnerabilities	html
Symantec - Security Response - Publications	html
MALWARE ANALYSIS
Malwr	html
Virus Total	html
NATIONAL LABORATORIES
Argonne National Laboratory (ANL) National and Homeland Security	html
Idaho National Laboratory (INL) - National and Homeland Security	html
Idaho National Laboratory (INL) - National SCADA Test Bed Program	html
Pacific Northwest National Laboratory (PNNL) National Security	html
Sandia National Laboratory (SNL) - Center for SCADA Security	html
INFORMATION SHARING AND ANALYSIS CENTERS
Multi-State Information Sharing and Analysis Center: SCADA and Control Systems Procurement Project	html
Electricity Sector Information Sharing and Analysis Center (ESISAC)	html
Surface Transportation Sector Information Sharing and Analysis Center	html
GOVERNMENT / REGULATORY
Directory Listing of Worldwide CERT Organizations	html
Centre for the Protection of National Infrastructure (CPNI)	html
Department of Energy (DOE) Control Systems Security	html
Department of Homeland Security (DHS) National Cyber Security Division	html
Department of Homeland Security (DHS) - Cyber Security	html
Department of Homeland Security (DHS)- Critical Infrastructure - Chemical Security	html
Federal Energy Regulatory Council (FERC)	html
National Institute of Standards and Technology (NIST)	html
NIST - Computer Security Division - Computer Security Resource Center - Industrial Control System Security (ICS)	html
NIST - Computer Security Resource Center - Special Publications (800 Series)	html
North American Electric Reliability Corporation (NERC) - Critical Infrastructure Protection (CIP) Standards	html
Technical Support Working Group TSWG	html
PRODUCTS / VENDORS
Alien Vault	html
Certes Networks	html
Cisco	html
Dragos Security	html
Hirschmann	html
Netresec	html
NexDefense	html
OSIsoft	html
Phoenix Contact / Innominate	html
SCADAfence	html
Secure Crossing	html
Splunk	html
Tenable Network Security	html
Tofino Security	html
Waterfall Security Solutions	html
	TOP

On-Line News Sources

ISSSource	html
Threat Level (Wired)	html
Homeland Security Newswire	html
	TOP

Software

These links will redirect you to various sites on the Internet for downloading of current versions. Some applications may require registration prior to downloading. You should always validate that you are accessing the latest version before downloading.

Cyber Security Evaluation Tool	R1
Kali Linux	R1
Firewall Builder for Windows / Mac / Linux	R1
pfSense Security Appliance	R1
Vyatta Security Appliance	R1
Clonezilla Disk Imaging Utility	R1
Redo Disk Imaging Utility	R1
ModbusPal Java-based Modbus/TCP Simulator	R1
SCADA Honeynet	R1
Triangle MicroWorks Test Harness for Windows	R1
Security Onion Linux (Xubuntu) Distro	R1
Metasploit Community Edition for Windows/Linux	R1
Microsoft Baseline Security Advisor for Windows	R1
Microsoft Message Analyzer	R2
Microsoft Network Monitor	R1
Nessus Bandolier ICS Audit Files	R1
Nessus Center for Internet Security (CIS) Benchmark Files	R1
Nessus Vulnerability Scanner	R1
Wireshark	R1
Rockwell Client Server Protcol (CSP)  Lua add-on for Wireshark	R4
Solarwinds Network Tools for Windows	R1
Libre Office (replaces Open Office) for Windows / Mac / Linux	R1
Ophcrack Password Utility LiveCD	R1
Password Rainbow Tables for Ophcrack	R1
XP Password Recovery Tool (Linux)	R1
QuickDraw IDS Signatures and PCAP Test Files	R1
AlienVault Open-Source Security Incident Monitor (OSSIM)	R1
Splunk Syslog Server for Windows / Mac / Linux	R1
Snare Syslog Agent for Windows	R1
Symantec Malware Removal Tools
TrueCrypt Disk Encryption Utility for Windows/Linux/Mac OS X	R1
Checksum (hash) Generation Utility for Windows	R1
Putty Telnet/SSH Client	R1
UNetBootin USB Boot Creation Utility for Windows / Mac / Linux	R1
WEBSITES
AlienVault Open-Source Security Incident Monitor (OSSIM)	html  R1
Bandolier Project - SCADA Nessus Audit Files (Digital Bond)	html  R1
pfSense (Open-Source Firewall)	html  R1
QuickDraw IDS (Digital Bond)	html  R1
Security Onion (Intrusion Monitoring System)	html  R1
SNORT (Intrusion Monitoring System)	html  R1
Splunk (Syslog Server)	html  R1
Suricata (Intrusion Monitoring System)	html  R1
Vyatta (Security Appliance)	html  R1
	TOP

Revision History:
R1 = New/Updated Content Q1-2014
R2 = New/Updated Content Q3-2014
R3 = New/Updated Content Q4-2014
R4 = New/Updated Content Q1-2015
R5 = New/Updated Content Q2-2015
(R6) = New/Updated Content Q1-2016
(R7) = New/Updated Content Q1-2018