Potential Topic(s) List

Topic 1:

SCADA Systems: SCADA systems are a subset of Industrial Control Systems (ICS). The goal would be to automate these systems to make them safer and more efficient. ICS is a niche area lacking proper security and isn't taught at Champlain. Nobody knows where to start when security these systems are cutting off an entire section of work for us.
ICSs are important because they are the backbone of the world's manufacturing capabilities. They control power production, agriculture, water distribution, oil production, refinery, storage, etc. The lack of security regarding ICSs is concerning because we rely on them and the industries. If someone we to gain access to the ICS of a water sanitation plant, they could tamper with the chemical level used to clean and filter the water, and if this were not to get noticed, a whole city could be put in danger via the water supply.
For the SCADA systems part, we plan to create a virtual environment to conduct penetration tests against SCADA for training and education purposes.

EDR Testing: This secondary topic may be done if time and other factors allow. We would be testing the efficacy of various EDR platforms on their ability to detect and stop various threats. Most vendors oversell their capabilities and do not allow testing of their devices, so their claims frequently seem too good to be true.
It is important to test EDR systems so we can make informed decisions about which is best suited for our needs, and it also will allow us to know which EDR systems deliver on their promises and which fail to meet expectations.
For this topic, we will test EDR capabilities against various types of malware and various malware samples on different systems to see which EDR is most capable.