Bishop Fox is proud to present at RSTCON 2024, with Senior Security Engineer Dan Petro discussing Distributed Networking Protocol 3 (DNP3) security.

For full details, visit the official RSTCON 2024 website.

DNP3 Security: The most important protocol you've never heard of

Speaker: Dan Petro, Senior Security Engineer

The Distributed Networking Protocol 3 (DNP3) is a core part of communications in what we collectively call "critical infrastructure". It's responsible for carrying commands to actuate physical components in stuff like electric generating facilities and power transmission equipment.

Despite its importance, DNP3 has been difficult to implement security on. Demanding operational requirements, legacy hardware, and an impenetrable wall of jargon have been just some of the impediments towards security.

Let's talk about DNP3 from a pentester's perspective. What issues has the protocol had in the past, where does DNP3 security stand currently, and where is the protocol going in the future to solve them (DNP3 SAv6)?