purdue-model

Plug-in ICS/SCADA cybersecurity training range

Passive OT network mapper — turns a packet capture into a Purdue-model asset map with risk findings, without sending a single packet.

Describe your OT zones → get a deny-by-default segmentation policy as real Palo Alto / FortiGate / Juniper / iptables / Cisco ASA rules. IEC 62443 + Purdue, import your inventory, export diagram & policy doc. Runs in your browser.

ICS/OT Exposure Intelligence Platform | 8 Protocols | Purdue Model | Asset Inventory | Threat Intel (APT Groups) | Risk Matrix | 72 Hardening Controls | Login System | IEC 62443, NIST 800-82, NERC CIP | Shodan-aware

ICS OT IoT Infrastructure Management Tool covering inventory, topology, protocols, Purdue zones, events, change tracking, alerts, tasks, vulnerabilities, compliance, audit log, RBAC, backups, reports, and integrations with Splunk, ServiceNow, CrowdStrike, and Azure AD

Red-team OT assessment & adversary-emulation planning mapped to MITRE ATT&CK for ICS.

Plataforma de referencia de integración IT/OT: planta simulada de extremo a extremo (Purdue · IEC 62443)

Offline Streamlit tool that validates OT network segmentation against the Purdue model and IEC 62443 zone/conduit rules - flags violations with IEC 62443 references, MITRE ATT&CK for ICS mappings, and per-asset exposure ratings.

Converged IT/OT security reference: Purdue model, ISA/IEC 62443 zones and conduits with SL-T assignment, IT-to-OT attack paths, NERC CIP evidence mapping

Fictional, vendor-neutral OT/ICS security reference architecture for a manufacturing campus — IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, CIS v8.1, MITRE ATT&CK for ICS.

Caso de estudio sobre mitigación de vulnerabilidades en terminales (SCADA/OT) y evaluación de soluciones EDR/EPP en la nube para roles de Analista SOC y Ciberseguridad.

AI-driven posture is supported by four board-level capabilities

Fully running OT/ICS security lab: real IEC 61131-3 PLCs, Scada-LTS HMI, InfluxDB historian and real DNP3/OPC UA/S7comm endpoints behind a default-deny Purdue zone gateway, with protocol-aware detection (Loki/Grafana), IEC 62443 mapping, and a cold-boot CI gate proving 11/11 checks.

Simulated Industrial Control System security lab based on the Purdue Model, featuring segmented OT networks, Modbus/TCP & OPC UA analysis, firewall zoning, and IDS monitoring with Zeek, Suricata, and Wireshark.

Full OT/ICS security assessment reproducing the 2023 CyberAv3ngers attack on water treatment infrastructure — OpenPLC, Scada-LTS, Modbus TCP exploitation and IEC 62443 hardening

Simulated theme park ride operations platform — OT/SCADA portfolio modeling Purdue ERA, MQTT telemetry, and ISA/IEC 62443 hardening

Improved NSE scripts for OT/ICS protocol discovery and device fingerprinting. Covers DNP3, Modbus, Fox, PCWorx, HART-IP, IEC 61850 MMS, PROFINET, GE SRTP, OPC UA, MELSEC-Q, ProConOS, Red Lion Crimson, and FF HSE — for blue-team security assessments.

Evidence-backed OT/ICS security assessment of a fictional water utility network — Purdue-aligned segmentation (before/after), threat-detection deployment, and a full water-sector regulatory compliance package (RRA, ERP, AWWA, EPA, NIST/IEC crosswalk).