Industrial control systems (ICS) are increasingly targeted by Cyberattacks employing Living-off-the-Land (LOTL) techniques — sophisticated, multi-stage intrusions that abuse legitimate engineering and system administration tools to blend in with normal operations and in an attempt to evade conventional OT cybersecurity controls. Because these techniques closely mimic routine industrial activity, timely and reliable detection remains one of the most pressing challenges in industrial control system security today.

This ISA webinar presents a research-informed detection strategy that fuses evidence across three critical layers: physical process behavior, industrial network communications and host system activity. Drawing on findings from evaluations conducted using cyber-physical simulation testbeds simulating a pick-and-place process, speaker Carol Lo, Ph.D. (CISSP, CISA, CISM) will demonstrate how this multi-layer approach strengthens situational awareness and supports earlier, more confident operational decision-making in ICS environments.

Designed for both industry professionals and academic researchers, this session bridges applied OT security practice with cutting-edge cybersecurity research.