Potential Topic(s) List - Paiet/Capstone GitHub Wiki

Topic 1:

SCADA Systems: SCADA systems are a subset of Industrial Control Systems (ICS). The goal would be to explore all these interconnecting systems to increase awareness for ourselves and others. We feel this would be a great idea because ICS is such a niche area, often lacking proper security, and furthermore, isn't taught at Champlain. Nobody knows where to start when securing these systems is cutting off an entire section of work for us.
It's important: ICSs are important because they are the backbone of the world's manufacturing capabilities. They control power production, agriculture, water distribution, oil production, refinery, storage, etc. The lack of security regarding ICSs is concerning because we rely on them and the industries. If someone we to gain access to the ICS of a water sanitation plant, they could tamper with the chemical level used to clean and filter the water, and if this were not to get noticed, a whole city could be put in danger via the water supply.
For this topic, we plan to create a virtual environment to conduct penetration tests against SCADA for training and education purposes.

EDR Testing: This secondary topic may be done if time and other factors allow. We would be testing the efficacy of various EDR platforms on their ability to detect and stop various threats. Most vendors oversell their capabilities and do not allow testing of their devices, so their claims frequently seem too good to be true.
It is important to test EDR systems so we can make informed decisions about which is best suited for our needs, and it also will allow us to know which EDR systems deliver on their promises and which fail to meet expectations.
For this topic, we will test EDR capabilities against various types of malware and various malware samples on different systems to see which EDR is most capable.