Select your country

Not finding what you are looking for, select your country from our regional selector:

Search

No CVEs, no exploits, no problem: living off the plant to impact OT

Discover the next evolution of OT threats 

Hosted by Ric Derbyshire, Principal Security Researcher, OT & Critical Infrastructure at Orange Cyberdefense.  

OT cyber security borrows heavily from IT cyber security concepts, focusing on adversaries exploiting vulnerabilities. But what if that’s not all we should be concerned about? 

Join OT security researcher and industry expert Ric Derbyshire for an eye-opening webinar exploring Living Off the Plant (LOTP), putting a name to the techniques that leverage legitimate operational technology functionality to achieve stealthy, high-impact outcomes, without exploiting a single vulnerability. 

This session will challenge conventional assumptions about OT security and demonstrate how adversaries can abuse native functionality to cause stealthy and high-precision cyber-physical impact. 

In this webinar, you'll discover: 

  • What Living Off the Plant (LOTP) attacks are and why they matter 

  • How attackers can leverage legitimate OT functionality without exploits 

  • The real-world attack surface created by native OT functionality 

  • An example of PLC-to-PLC lateral movement using only LOTP 


Secure your place to gain practical insights into protecting operational technology environments and strengthening cyber resilience across your organisation. 

Register Here

Speaker

Ric Derbyshire  |  Principal Security Researcher
Orange Cyberdefense

Ric is a Principal Security Researcher at Orange Cyberdefense and an Honorary Researcher at Imperial College London. He holds a PhD in computer science from Lancaster University, funded by Airbus through an EPSRC Industrial CASE studentship, where he focused on adversary-centric quantitative risk assessment. His work takes a pragmatic approach across both offensive and defensive cyber security. More recently, his research has explored both the technical and policy dimensions of operational technology security, particularly in critical national infrastructure. He has presented at international conferences and received multiple vendor acknowledgements.

24/7 incident hotline