Stay ahead of cyber threats with immersion-style training in Reston, VA! Save $150 thru 1/29.


To attend this webcast, login to your SANS Account or create your Account.

APTs in ICS - Understanding and Preparing for the Rising Threat Landscape in Critical Infrastructure

  • Wednesday, July 22nd, 2015 at 1:00 PM EDT (17:00:00 UTC)
  • Mike Assante and Del Rodillas
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.


  • Palo Alto Networks

You can now attend the webcast using your mobile device!


2014 was a memorable year in Industrial Controls cybersecurity with reports of several ICS-specific advanced persistent threats (APTs) such as Energetic Bear, Black Energy and the attack on the German Steel Factory. These successful campaigns are concerning in how they utilize a plethora of new attack vectors and techniques from social engineering, exploiting zero-day vulnerabilities, to stealthy use of industrial control protocols. The trajectory of the capabilities of these attacks suggest that cyber attacks to ICS will only continue to grow in sophistication. During this webinar we take a look at several aspects of APTs in ICS to help asset owners better understand the threat and prepare themselves to secure their critical infrastructure from this growing concern:

  • A review of the key APTs in ICS to characterize the attack life cycle and extract key lessons learned - Mike Assante
  • A discussion on where the trends are heading and identify potential areas of exposure for asset owners - Mike Assante
  • Present ideas on how existing and emerging network and endpoint technologies could be deployed to detect and prevent zero-day attacks - Del Rodillas

Speaker Bios

Michael Assante

Michael Assante is currently the SANS lead for Industrial Control System (ICS) and Supervisory Control and Data Acquisition (SCADA) security and Co-founder of NexDefense an Atlanta-based ICS security company. He served as Vice President and Chief Security Officer of the North American Electric Reliability (NERC) Corporation, where he oversaw industry-wide implementation of cyber security standards across the continent. Prior to joining NERC, Mr. Assante held a number of high-level positions at Idaho National Labs and served and as Vice President and Chief Security Officer for American Electric Power. Mr. Assante's work in ICS security has been widely recognized and was selected by his peers as the winner of Information Security Magazine's security leadership award for his efforts as a strategic thinker. The RSA 2005 Conference awarded him its outstanding achievement award in the practice of security within an organization.

He has testified before the US Senate and House and was an initial member of the member of the Commission on Cyber Security for the 44th Presidency. Before his career in security served in various naval intelligence and information warfare roles, he developed and gave presentations on the latest technology and security threats to the Chairman of the Joint Chiefs of Staff, Director of the National Security Agency, and other leading government officials. In 1997, he was honored as a Naval Intelligence Officer of the Year.

Del Rodillas

Del Rodillas is the ICS solution lead for Palo Alto Networks. He and his team of SCADA security architects help asset owners across multiple process control and automation sectors understand the importance of cybersecurity and how best practices and technologies can be applied to balance the goals of preventing cyber incidents while keeping uptime and safety high. His 19 years of technology industry experience spans cybersecurity, networking, aerospace/defense, and semiconductor design and manufacturing, with roles in strategic marketing and engineering. Del holds a master's in electrical engineering from Santa Clara University and an MBA from the Wharton School of the University of Pennsylvania.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.