Defending ICS Against Cyberthreats with Next Generation Security
- Tuesday, April 29th, 2014 at 1:00 PM EDT (17:00:00 UTC)
- Michael Assante, Del Rodillas
You can now attend the webcast using your mobile device!
A new threat landscape has emerged in Industrial Control Systems that is becoming more complex and sophisticated, to include game-changing attacks, like Stuxnet. Aside from the threat of a "Son of Stuxnet" attack, asset owners now need to be concerned about field-originated attacks that "swim upstream", a growing base of ICS-specific exploits, and malicious use of industrial protocol functions. Given the ability of any of these threats to impact availability and safety, it is imperative that operators take them into consideration when developing their ICS cybersecurity strategy.
In this webinar we look at the nature of both existing and emerging cyberthreats to ICS and why asset owners need to pay attention to them. Next, we present strategies and frameworks for defending your critical infrastructure against these threats. Finally, we will discuss next-generation technologies that enable the requisite capabilities for granular network segmentation, least privilege access control based on users and applications (including ICS protocols/applications) and threat prevention for both known and zero-day attacks.
Michael Assante is currently the SANS lead for Industrial Control System (ICS) and Supervisory Control and Data Acquisition (SCADA) security and Co-founder of NexDefense an Atlanta-based ICS security company. He served as Vice President and Chief Security Officer of the North American Electric Reliability (NERC) Corporation, where he oversaw industry-wide implementation of cyber security standards across the continent. Prior to joining NERC, Mr. Assante held a number of high-level positions at Idaho National Labs and served and as Vice President and Chief Security Officer for American Electric Power. Mr. Assante's work in ICS security has been widely recognized and was selected by his peers as the winner of Information Security Magazine's security leadership award for his efforts as a strategic thinker. The RSA 2005 Conference awarded him its outstanding achievement award in the practice of security within an organization.
He has testified before the US Senate and House and was an initial member of the member of the Commission on Cyber Security for the 44th Presidency. Before his career in security served in various naval intelligence and information warfare roles, he developed and gave presentations on the latest technology and security threats to the Chairman of the Joint Chiefs of Staff, Director of the National Security Agency, and other leading government officials. In 1997, he was honored as a Naval Intelligence Officer of the Year.
Del Rodillas is the ICS solution lead for Palo Alto Networks. He and his team of SCADA security architects help asset owners across multiple process control and automation sectors understand the importance of cybersecurity and how best practices and technologies can be applied to balance the goals of preventing cyber incidents while keeping uptime and safety high. His 19 years of technology industry experience spans cybersecurity, networking, aerospace/defense, and semiconductor design and manufacturing, with roles in strategic marketing and engineering. Del holds a master's in electrical engineering from Santa Clara University and an MBA from the Wharton School of the University of Pennsylvania.