start	end	text
27100	30520	How's it going, everybody? It's TreyCraft. We're here at DEF CON. This is what, day two
30520	34340	or three for us now? I don't know. It kind of all blends together, right? But we're hanging
34340	38640	out at the ICS Village. I'm sitting here talking with the extraordinary Tom, our ICS master
38640	41620	here. We figured we'd give you guys a quick look at the village, see what all they've
41620	47300	got going on, and hear about what they are. So, Tom, for this village, for ICS, you guys
47300	50560	are pretty much veterans at this point. You've been here five, six, seven years, a while,
50560	55840	right? Absolutely. We're one of the older villages. We've been here, I believe this
55840	62300	is our seventh year, so we started around 23, DEF CON 23, that is. We have a lot of
62300	69100	things lined up at this event. We have about 30 speakers going on. We have two workshops
69100	74000	right now, one maritime-themed, one run by DDS, which is Microgrid. We have a pretty
74000	80940	big CTF going on around the corner here. INL and CISA, they brought their AR and VR
80940	85060	headsets along with their cellar skids. And then to top it off, we have an escape room
85060	88800	that's running. And this is one of those topics, like you hear it, this can almost be overwhelming
88800	94240	to even think about. Industrial control systems, I mean, what does that mean for people? And
94240	97900	I think it would be really interesting to hear your take on how you would bring this
98320	101920	kind of back down to everyone's levels, to that beginner level. How does it impact their
101920	106720	daily life? Where would they see it? Yep. Industrial control systems are everywhere.
106720	110660	So building management system that controls the lighting, the AC in the conference room,
110660	115180	that's controlled by a control system. You can go all the way down to traffic lights,
115180	120660	your water plant, your wastewater plant, your power plant. All of these have control systems.
121360	129920	These systems are designed to last 15, 20 years of nonstop running, uptime. Every single
129920	134320	process is going to have some sort of control system. Might be smaller, might be larger,
134320	139660	but control systems are everywhere. So yeah, this is Hack the Microgrid. We have three
139660	144900	little Christmas villages set up here. And what we're doing is basically showing people
144900	149900	how to hack a microgrid, but using weather data as opposed to some more conventional
149900	154020	means. If you notice each of our little microgrid setups, whether it be the little military
154020	158320	town one or whether it be the little city ones, they're using solar panels and wind
158320	162020	as their power source. These sources are unique because they're vulnerable to wind,
162020	167140	which means most modern microgrids are pooling weather forecasts to try to improve efficiency
167140	171600	of these systems. However, those weather forecasts aren't really held in any secure way. They're
171600	176860	mostly just blanket FTP systems. And so that allows an attacker to get in and mess with
176860	180760	them. The goal of this is to kind of show people these kind of exploits and get people
180760	184140	excited about it, because we're going to be doing a partnership with Fort Hunter, Ligon
184140	188520	and Camp Parks of the Army to actually do pin tests on actual Army installations soon,
188990	193760	because Big Army is planning on putting microgrids at every installation by 2035. And so this
193760	197180	is going to be a chance for the community to help rewrite the cybersecurity standards
197180	202260	of those before they actually get implemented and built. This is the CTF. It's the Maritime
202260	207000	Equipment Hacking Competition. And so, you know, this has the real equipment that you
207000	210800	would have on board a ship. So this is an ECGIS electronic chart display information
210800	214820	system, what you would actually use on board at the bridge of a ship to do the controls.
214820	218560	And it's one of the systems that we allow the contestants here in the competition to
218560	222480	actually attack. So that's awesome. You're bringing in multiple different protocols,
222480	226660	but everything's up for grabs. Everything's up for grabs. There's about 20 flags across
226660	231860	all three consoles. And it's really focused on the OT protocols, the operational technology
231860	236200	protocols have no real security based into it. And so it's really security by obscurity,
236200	239800	right? So we try to make it available. Most people don't have a boat at home that they
239800	242960	can hack. So we like to bring it here and try to improve the maritime cybersecurity
242960	244140	research community.
244240	247600	Yeah, very true. It's definitely appreciated. This thing is awesome. And so this is only
247600	250480	the third chance people are getting at this here at DEF CON, right?
250480	254160	Yeah, you know, it's the third time. It's the second time. It's been an official competition.
254260	256420	We got to give out a black badge last year. That was really cool.
256460	260660	So this is very obviously a labor of love for you. What inspires you guys to put this
260660	264200	on every year? What message do you want to get out to the world and get them interested?
264200	270780	So we're very passionate about us, about industrial control system security and everything else.
271080	275760	This was started about seven years ago to give back to the community, to show people
276340	281860	what industrial control systems actually are. So not necessarily the security of them, that
281860	286180	came a little bit later. We had to start out with how they actually work, what they do.
286600	293080	Over time, we've included security. We've gotten some sponsors that do security with
293080	299920	control systems, integrate that. So we are maturing the community. You know, we go out
299920	304160	there to many different conferences, DEF CON being one of our largest ones. But we're just
304160	308480	passionate about it and love to share our experiences. Most of us are seasoned veterans
308480	312380	in the field, and we want to share our experiences.
312520	315220	Well, thanks for taking the time to do a quick chat with us. Is there any last things you'd
315220	316280	like to get out to the world?
317060	323360	Stop on by to check us out on the internet. ICSVillage.com. Love being here at DEF CON.
323360	326560	We've got a lot of really good stuff. And thank you, everybody, for the support.
326960	330380	You guys heard it from the mage himself. Come check out ICS Village.