This session will dispel the myth that attacks on ICS must rely on standard industrial protocols, demonstrating how PLC code blocks can be changed via proprietary protocols that “standard” OT protocol inspections can’t see. A further gap will be demonstrated: that HMIs are blind to the nature of PLC code blocks. The session closes by describing what capabilities are needed to close these gaps.