Lessons from the School of Security Hard Knocks

Today's guest is Patrick O'Brien, Senior Safety and Cybersecurity Engineer at exida.

In today's episode, Patrick discusses exida and his role there, the safety and cybersecurity issues facing industrial systems, the similarities and differences between threat models facing organizations, working on ISA/IEC 62443 and other standards, what role the software development plays in developing standards, his industry's use of SBOM, the most significant cybersecurity threat asset owners face today, whether he is optimistic or pessimistic about the future of cybersecurity, a surprise Penn State football question, and as always, his toughest lesson learned.

Today's guest is Ralph Langner, founder/CEO of Langner, Inc.

In today's episode, Ralph discusses Langner, Inc., his role in what happened at stuxnet, our progress over the years in terms of OT security, motivations to attack OT networks, shifting cyber liability, whether he is optimistic or pessimistic about the cyber protections for cyber physical systems, and as always, his toughest lesson learned.

Today's guest is Chris Blask, VP of Strategy at Cybeats.

In this episode, Chris discusses Cybeats and his role there, his work with SBOMs, why SBOMs are a corporate asset, the importance of understanding open source software, his work as the chair of ICS-ISAC, the greatest cybersecurity threats currently facing society and why we're not ready to face them, his thoughts on the current national cyber strategy, how he got his start in security, and as always, his toughest lesson learned. 

Today's first return guest is Bryan Ware, CEO of LookingGlass Cyber.

Today we welcome back our first returning guest, Bryan Ware! In this episode, Bryan discusses his move to CEO of LookingGlass Cyber, founding Next5, competition with China, and then Joe and Bryan dive into some Next5 Matrix Monitor highlights including: the recent Chinese spy balloon, Huawei's patent strategy, his hopes for the next National Cyber Director and the Biden administration, and as always, an all-new toughest lesson learned!

Today's guest is Emily de La Bruyère, co-founder of Horizon Advisory.

In this episode, Emily discusses Horizon Advisory, China's digital strategy, examples of China's influence on supply chain technology, new factors of production and who will benefit the most in this era of digital competition, what the US should do, the implications on China of President Biden's semiconductor ban, implications for Germany, and as always, her toughest lesson learned. 

Today's guest is David Weston (aka "DWIZZLE"), Vice President of Enterprise and OS Security at Microsoft.

In this episode, David talks about his role at Microsoft, changes Microsoft has made over the past few years to protect software, their defense in depth outlook, how his earlier career impacts his current work, the greatest security threats facing enterprise customers, his work with TAC, how he got interested in the cyber world, the origins of his "Dwhizzle" name, and as always, his toughest lesson learned.

Today's guest is Richard Stiennon, Chief Research Analyst at IT-Harvest.

In a nod to Clausewitz and Gaddis, this episode is called On Cyber Warfare. In this episode, Richard discusses founding IT-Harvest and his current role there, the transition to data-driven research, the biggest industry shifts and trends, the threat and the current state of cyber warfare, his feelings towards cyber defense, and as always, his toughest lesson learned.

Today's guest is Dmitri Alperovitch, executive chairman at Silverado Policy Accelerator.

In this episode, Dmitri discusses the story behind co-founding CrowdStrike, how threat intelligence has advanced since its founding, his non-profit Silverado Policy Accelerator, the struggle for world order, what the United States can do to reduce the threat against Taiwan, the Biden administration's semi-conductors policy, the importance of chips, his predictions about the future of Russia and Ukraine, Silverado's ecological footprint, his optimism towards the future, and as always, his toughest lesson learned.

Today's guest is Dr. Laurie Williams, Distinguished University Professor of Computer Science at North Carolina State University.

In this episode, Laurie discusses some of the programs she works in as a distinguished university professor in Computer Science at North Carolina State University, her current research projects, developers' role in fixing vulnerabilities, the future of DevOps, the efficacy of scanning tools for detecting vulnerabilities, supply chain issues, benefits of SBOM, today's biggest security threat, how her past experience informs her current work, and as always, her toughest lesson learned.

Today's guest is Thomas Pace, founder/CEO of NetRise.

In this episode, Thomas discusses NetRise and his role as founder/CEO, how the approach to OT security has changed, their ideal customer profile, what surprises him about current trends, SBOM, managing software supply chain risk, how he entered the field, the trials of being a founder/CEO, and as always, his toughest lesson learned.