Advance your Career with Hands-on Cyber Security Training in San Francisco. Save $350 thru 5/29.

San Antonio 2018

San Antonio, TX | Mon, Aug 6 - Sat, Aug 11, 2018
This event is over,
but there are more training opportunities.

Industrial Control System Active Defense and Threat Intelligence

  • Robert M. Lee
  • Monday, August 6th, 7:15pm - 9:15pm

Industrial control systems (ICS) are some of the most defensible environments on the planet. Sure ICS tend to have legacy equipment and numerous vulnerabilities, but if you really want to make the lights blink it's going to take more than an exploit. In this presentation, the course author for ICS515 - ICS Active Defense and Incident Response and FOR578 - Cyber Threat Intelligence, will talk about what it means to make a defensible environment a defended one leveraging active defense best practices such as threat hunting and network security monitoring. In addition, what types of threat intelligence are applicable to such environments will be covered with use-cases highlighting lessons learned for both good and bad practices. Ultimately, defending these industrial environments requires a human focus.


Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
  • Lunch & Learn: Short presentations given during the lunch break.
Monday, August 6
Session Speaker Time Type
Welcome to SANS Johannes Ullrich Monday, August 6th, 8:00am - 8:30am Special Events
Industrial Control System Active Defense and Threat Intelligence Robert M. Lee Monday, August 6th, 7:15pm - 9:15pm Keynote
Tuesday, August 7
Session Speaker Time Type
Cyber Threats Are Changing, It's Time for Your Security to Catch Up Tom McNash, Senior Solutions Engineer Tuesday, August 7th, 12:30pm - 1:15pm Lunch and Learn
Nation State Level Honeypotting: Emulating Vulnerable Web Applications at Scale Johannes Ullrich Tuesday, August 7th, 7:15pm - 8:15pm SANS@Night
Wednesday, August 8
Session Speaker Time Type
OODA Security: Taking Back the Advantage Kevin Fiscus Wednesday, August 8th, 7:15pm - 8:15pm SANS@Night