(Lab) In this advanced level module, get hands on experience with the BACnet protocol in a simulated server room cooling system to understand how to attack and harden one of the most common building automation system (BAS) protocols in use. After completing this chapter you will be able to
- Explore building automation systems in Shodan
- Run nmap scripts to enumerate BACnet devices
- Set up a rogue BACnet master to read process data and send commands
- Fuzz BACnet servers to check for vulnerabilities
- Write Suricata/Snort content rules to detect suspicious BACnet activity
- Set up a basic BACnet honeypot to study attacker behavior
Hours: 2.0