c0c0n is a 19 years old platform that is aimed at providing opportunities to showcase, educate, understand and spread awareness on Information Security, data protection, and privacy...
C3iHub (Cybersecurity and Cybersecurity of Cyber-physical Systems, A Technology Innovation Hub at IIT Kanpur) is a Technology Innovation Hub established at the Indian Institute of Technology Kanpur under the National Mission on Interdisciplinary Cyber-Physical Systems (NM-ICPS), Department of Science and Technology, Government of India. It focuses on research, product development, and capacity building in cybersecurity, with a particular emphasis on securing critical infrastructure, industrial control systems (ICS), and operational technology (OT) environments.
Through its OT/ICS Security Village, C3iHub aims to bridge the gap between traditional IT security practices and the specialized requirements of industrial and cyber-physical systems, offering hands-on exposure to real-world attack and defense scenarios using dedicated testbeds and simulation platforms.
The OT/ICS Village at c0c0n 2026 is a dedicated, hands-on learning track designed for security professionals, students, and enthusiasts interested in the security of industrial control systems, SCADA networks, and critical infrastructure. Unlike conventional IT-security tracks, this village focuses exclusively on the unique protocols, architectures, and threat landscape of operational technology environments.
Participants will work directly with C3iHub's industrial testbeds and simulation platforms – including a chemical plant process simulator, live PLC hardware, and a functioning OT Security Operations Centre (SOC) – to understand how attacks unfold against industrial systems and how they are detected, triaged, and investigated in practice.
The village is structured as a two-day, hands-on programme covering OT/ICS fundamentals, threat intelligence and dark-web reconnaissance, wireless and RF attack surfaces, and OT security operations, culminating in a live, end-to-end attack detection demonstration.
Each participant must bring the following:
On completion of the OT/ICS Village, participants will be able to:
Participants attending the OT/ICS Village can expect to receive:
Both days of the OT/ICS Village follow an identical structure, allowing participants to attend either day independently or repeat the track for reinforcement.
Welcome address and keynote covering C3iHub, IIT Kanpur's vision and mission.
Comparison of IT security versus OT security and an introduction to the Purdue Enterprise Reference Architecture.
Hands-on OT attack on a chemical plant process simulator (GRFICSv3): ARP poisoning between HMI and PLC, manipulation of Modbus register reads/writes, and injection of unauthorized PLC logic commands.
Ajinkya Panday, C3iHub, IIT KanpurIntroduction to threat intelligence, IOC/IOA analysis, TTPs, and the MITRE ATT&CK framework, followed by practical dark-web intelligence gathering, IOC extraction, enrichment, and verification.
Live demonstration of RF and Bluetooth attack surfaces using Raspberry Pi, PiFmRds, and Bluetooth devices, covering FM/RDS transmission, wireless signal analysis, Bluetooth discovery, and associated attack, detection, and defensive techniques.
Aman Raj, C3iHub, IIT KanpurArchitecture of an OT Security Operations Centre – from OT data sources and sensors through the detection pipeline to analyst workflow, including alert triage, correlation, and incident investigation using real data from C3iHub's industrial testbeds (power, water treatment, manufacturing, conveyor).
Introduction to CyberMap for OT network and process-level visualisation, mapping SOC alerts onto P&ID-style process views and tracing attack paths from the affected device to the affected process.
Live demonstration on the PLC Test Kit: execution of an attack on real PLC hardware, real-time observation of detection on the SOC dashboard, and tracing of its process impact on CyberMap.
Tanmay Agrawal, C3iHub, IIT KanpurWelcome address and keynote covering C3iHub, IIT Kanpur's vision and mission.
Comparison of IT security versus OT security and an introduction to the Purdue Enterprise Reference Architecture.
Hands-on OT attack on a chemical plant process simulator (GRFICSv3): ARP poisoning between HMI and PLC, manipulation of Modbus register reads/writes, and injection of unauthorized PLC logic commands.
Ajinkya Panday, C3iHub, IIT KanpurIntroduction to threat intelligence, IOC/IOA analysis, TTPs, and the MITRE ATT&CK framework, followed by practical dark-web intelligence gathering, IOC extraction, enrichment, and verification.
Live demonstration of RF and Bluetooth attack surfaces using Raspberry Pi, PiFmRds, and Bluetooth devices, covering FM/RDS transmission, wireless signal analysis, Bluetooth discovery, and associated attack, detection, and defensive techniques.
Aman Raj, C3iHub, IIT KanpurArchitecture of an OT Security Operations Centre – from OT data sources and sensors through the detection pipeline to analyst workflow, including alert triage, correlation, and incident investigation using real data from C3iHub's industrial testbeds (power, water treatment, manufacturing, conveyor).
Introduction to CyberMap for OT network and process-level visualisation, mapping SOC alerts onto P&ID-style process views and tracing attack paths from the affected device to the affected process.
Live demonstration on the PLC Test Kit: execution of an attack on real PLC hardware, real-time observation of detection on the SOC dashboard, and tracing of its process impact on CyberMap.
Tanmay Agrawal, C3iHub, IIT KanpurFor queries regarding the OT/ICS Village at c0c0n 2026, please reach out to the C3iHub team on-site at the village, or through the official C3iHub, IIT Kanpur channels.
Meet the experts leading the OT/ICS Security Village.
C3iHub, IIT Kanpur
C3iHub, IIT Kanpur
C3iHub, IIT Kanpur
