Articles
Technical posts on smart-grid security, anomaly detection, and reproducible research practice.
3DPacketViewer: Native Wireshark Extensions for Field Location and OT Transaction Analysis
Two native Wireshark extensions, open source: a byte/bit-level 3D field viewer and a stateful semantic analyzer for IEC 104, GOOSE/R-GOOSE, SV, MMS, Modbus/TCP and DNP3. With a 60-second R-GOOSE demo.
Virtual Power Plants (VPPs) vs Microgrids
Differences: 1) Core construct and purpose 2) Locality and geographical coupling 3) Market interface and operational role 4) Scale and installed capacity 5) Flexibility model and customer involvement 6) Asset…
System Profiling
🔸Before any OT/ICS risk assessment, profile the system. 🔸System profiling = a deliberate inventory of components, connections, and weak points of the complete System under Consideration (SuC) so your risk…
Brief History of ICS-Tailored Attacks
Download the PDF
MITRE ATT&CK
The MITRE ATT&CK framework, created in 2013, is a detailed catalog of how attackers operate and common attack patterns. It maps real-world TTPs (Tactics (the “why”), Techniques (the “how”), and…
Common OT Security Misconceptions
Download the PDF
IEC 62443
Article content is being prepared.
DDoS UDP Flood Attack (Layer 4 Attack)
UDP flood attacks exploit the lack of connection control in the User Datagram Protocol. Unlike TCP, UDP doesn’t manage sessions, track connections, or limit traffic. Attackers take advantage by sending…
CSV
Relationships are like CSVs—one wrong delimiter, and it all breaks. CSV stands for Comma-Separated Values. It’s a plain text format that stores tables. CSV stores records as comma-separated fields; quoted…
Granularity
In IT network traffic, granularity refers to the level of detail at which network data is captured or monitored. High Granularity (packet-level):Tracks network traffic at the packet level. Shows details for…