Skip to content
All courses
SEC 105
Term 2
3 credits

Industrial Protocol Security

SEC 105 'Industrial Protocol Security' is a technician-level course designed to equip students with the essential knowledge required to identify and mitigate security risks within industrial environments. The curriculum delves into the architecture and operational characteristics of widely deployed industrial protocols, including Modbus TCP, EtherNet/IP, BACnet, and DNP3, with a critical focus on their inherent security weaknesses. Students will learn how these vulnerabilities can be exploited and, more importantly, how to implement practical defensive measures and secure configurations. Through theoretical instruction and hands-on laboratory exercises, participants will develop skills in assessing protocol security, applying segmentation techniques, and employing secure communication practices, preparing them to contribute to the robust security posture of critical infrastructure and manufacturing systems.

InstructorJacob Calhoun

Prerequisites

Course outline

Lectures, virtual labs, and graded assignments — completed in your browser.

01Lesson 1: Introduction to Industrial Control System Security and Protocol Fundamentalslecture
02Lesson 2: Modbus TCP: Architecture, Operations, and Intrinsic Vulnerabilitieslecture
03Lesson 3: Securing Modbus TCP Deployments: Best Practices and Mitigation Strategieslecture
04Hands-on Lab: Modbus TCP Vulnerability Assessment and Secure Configurationlab
05Lesson 5: EtherNet/IP: Data Links, Application Layers, and Security Concernslecture
06Lesson 6: Defending EtherNet/IP Networks: Segmentation and Authentication Techniqueslecture
07Lesson 7: BACnet: Building Automation Communication and Security Challengeslecture
08Hands-on Lab: EtherNet/IP & BACnet Traffic Analysis and Filteringlab
09Lesson 9: DNP3: Wide-Area Network Protocol and Its Security Implicationslecture
10Lesson 10: Protecting DNP3 Communications: Encryption and Access Controlslecture
11Hands-on Lab: DNP3 Secure Implementation and Incident Response Simulationlab
12Lesson 12: Network Segmentation and Defense-in-Depth for Industrial Protocolslecture
13Lesson 13: Protocol Anomaly Detection and Monitoring for ICS Securitylecture
14Capstone Service Project: Industrial Protocol Security Assessment and Recommendation Reportassignment

Syllabus

["Week 1: Lesson 1: Introduction to Industrial Control System Security and Protocol Fundamentals","Week 2: Lesson 2: Modbus TCP: Architecture, Operations, and Intrinsic Vulnerabilities","Week 3: Lesson 3: Securing Modbus TCP Deployments: Best Practices and Mitigation Strategies","Week 4: Hands-on Lab: Modbus TCP Vulnerability Assessment and Secure Configuration","Week 5: Lesson 5: EtherNet/IP: Data Links, Application Layers, and Security Concerns","Week 6: Lesson 6: Defending EtherNet/IP Networks: Segmentation and Authentication Techniques","Week 7: Lesson 7: BACnet: Building Automation Communication and Security Challenges","Week 8: Hands-on Lab: EtherNet/IP & BACnet Traffic Analysis and Filtering","Week 9: Lesson 9: DNP3: Wide-Area Network Protocol and Its Security Implications","Week 10: Lesson 10: Protecting DNP3 Communications: Encryption and Access Controls","Week 11: Hands-on Lab: DNP3 Secure Implementation and Incident Response Simulation","Week 12: Lesson 12: Network Segmentation and Defense-in-Depth for Industrial Protocols","Week 13: Lesson 13: Protocol Anomaly Detection and Monitoring for ICS Security","Week 14: Capstone Service Project: Industrial Protocol Security Assessment and Recommendation Report"]