Industrial Control Systems Threat Landscape & Active Defense
The presentation draws attention to practical threat detection and incident response in industrial control system environments, by dissecting advanced ICS adversary threat capabilities in recent attack campaigns. The focus of the session is on ICS adversary Tactics Techniques and Procedures (TTPs) and how industrial control system security can be proactive, affordable and effective without a massive budget. Dean will illustrate why the cyber weapons and the techniques used in modern attacks may be more important than adversary attribution for tactical ICS incident response and provide practical take-aways for actions in any ICS/OT Critical Infrastructure Sector.
Dean brings over 20 years of technical and management experience to the stage. He has worked in both Information Technology and Industrial Control System (ICS) Cyber Defense in critical infrastructure sectors such as telecommunications, and electricity generation, transmission, distribution, and oil & gas refineries, storage, and distribution. Dean is an ambassador for defending industrial systems and an advocate for the safety, reliability, and cyber protection of critical infrastructure. His mission as an instructor is to empower each of his students, and he earnestly preaches that “Defense is Do-able!” Over the course of his career, Dean’s accomplishments include establishing entire ICS security programs for critical infrastructure sectors, successfully containing and eradicating malware and ransomware infections in electricity generation and manufacturing control networks, performing malware analysis triage and ICS digital forensics, building converged IT/OT incident response and threat hunt teams, and conducting ICS assessments in electric substations, oil and gas refineries, manufacturing, and telecommunications networks. A SANS Certified Instructor, Dean teaches ICS515: ICS Visibility, Detection, and Response and is a co-author of the new SANS Course ICS418: ICS Security Essentials for Managers. Dean is a member of the SANS GIAC Advisory Board and holds many cybersecurity professional certifications including the GICSP, GRID, GSLC, and GCIA, as well as the CISSP®. (https://www.sans.org/profiles/dean-parsons/)
The translated recordings are available.
- View Bahasa Indonesia Recording (Lanskap Ancaman pada Sistem Kontrol Industri & Pertahanan Aktif)
- View Japanese Recording (タイトル：産業制御システム（ICS）の脅威の状況とアクティブデフェンス)
- View Korean Recording (산업시스템(ICS) 위협 환경 및 적극적 방어 전략)
- View Thai Recording (ภัยคุกคามต่อระบบ Industrial Control System และวิธีป้องกัน)
- View Vietnamese Recording (Toàn cảnh các mối đe dọa Hệ thống điều khiển công nghiệp & Biện pháp phòng thủ chủ động)
