ICS515: ICS Active Defense and Incident Response

A session at SANS Security East 2017

This course is designed to empower students with the ability to understand and utilize active defense mechanisms in concert with incident response for industrial control system networks to respond to and deny cyber threats. This class uses a hands-on approach to give students a technical understanding of concepts such as generating and using threat intelligence, communicating control system needs to information technology personnel to deploy appropriate defenses, detecting malicious actors or threats on control system networks, and performing threat triage and incident response to ensure the safety and reliability of operations technology.

About the speaker

This person is speaking at this event.
Robert M. Lee

USAF Cyberspace Ops Officer | PhD candidate @KingsCollegeLon | Co-Founder @DragosSecurity | SANS ICS 515 author | Lecturer @UticaCollege | SCADA and Me author bio from Twitter

Sign in to add slides, notes or videos to this session

Tell your friends!


Date Mon 9th January 2017

Short URL


Official session page


View the schedule


See something wrong?

Report an issue with this session