Meeting Topic:
Living off of the Land Attack Methods & Mitigation Strategies
Meeting Location (in-person only):
AltaGas Conference Room A&B 3rd Floor
Manulife Place
707 - 5 St SW Calgary, AB
Access instructions:
Take the main floor lobby elevator to floor 3
If you arrive late and there is no one at main lobby reception to provide access to the elevators call or text Tom Grusendorf @ 403-797-3662 or Greg Potter @ 403-816-1384 to get access.
Meeting Agenda:
- Facility overview + emergency & evacuation procedures (Tom Grusendorf)
- Overview of OTCSSIG activities, ISA resources and upcoming events (Greg Potter)
- Main Session Topic:.
This presentation explores Living off the Land (LotL) attack methods -- techniques where adversaries use legitimate tools and processes already present in OT environments to achieve their objectives, making detection significantly more challenging. We'll examine real-world examples of LotL techniques observed in industrial environments, discuss why traditional signature-based approaches often miss them, and outline practical mitigation strategies that organizations can implement to reduce their exposure.
- For those interested adjourn to a local eatery for a bite to eat and further conversation.
Meeting Location Map:
Manulife Place is adjacent to the 6th Street SW LRT station on 7th avenue
Parking:
The City of Calgary McDougall Parkade (Lot 28) 720 5 Avenue SW offers evening parking for $2 starting at 4 pm. Vehicle entrance is off 5 Avenue.
The City of Calgary Centennial Parkade (Lot 54) 608 9 Avenue SW offers parking evening parking for $3 starting at 4 pm. Vehicle entrance on 9th avenue.
About the ISA Calgary OTCSSIG
The Operations Technology Cyber Security Special Interest Group is a community of individuals involved in the implementation and support of systems responsible for the physical control of industrial processes. The goals of the group are:
- Share industry lessons learned & best practices with others
- Host presentations & roundtable discussions on topics relevant to the OT community
- Host educational events
- Feedback / input to ISA/IEC 62443 the world’s only comprehensive consensus-based OT cybersecurity standards
- Grow the local OT cybersecurity community
Membership in the ISA is not a requirement for participation in the OTCSSIG but is encouraged – ISA membership has its benefits!