Unsolicited Response

This was a very revealing panel on how the VC world is viewing the ICS security space. Many strong statements and feelings about where we are and what the future will be. 

The VC's were Bob Ackerman of AllegisCyber and Sameer Reddy of Energy Impact Partners. Both funds are active in the ICS security space.

Hack The Capitol

AllegisCyber

Energy Impact Partners

Dale's weekly article published on 23 Feb 2022. He dives into why it is so difficult to value these companies, and the disconnect between any value investing analysis and the actual, what someone will pay, market valuation.

Total Power by Kyle Mills is a story about a successful cyber/physical attack on the US electric grid, the impact of a prolonged outage, and the effort to bring the power back and catch the bad guys. What impressed me most about the fun read is it pulled some key facts out of the mountain of grid-hacking FUD so that it was much more plausible than a typical work of fiction, and much reporting.

I couldn't get the author on, but I got another author in the genre and the person who recommended I read the book on the podcast, Bob Peterson aka my Dad. We talk about the plausibility, how authors do their research, how much detail to include in a work of fiction, the Mitch Rapp character created by Vince Flynn, and some other things in this short, fun episode.

- Total Power By Kyle Mills

- The Syndicate's Church and Deniable Justice by R.D. Peterson

This week's Unsolicited Response Show focuses on the issue that women are vastly underrepresented in ICS security and what we need to do to change this both in numbers and career paths and prospects. Kelly Jackson Higgins joins me to co-host this episode, and we have great guests including:

• Kristin Demoranville
• MJ Emanuel
• Najo Ifield
• Najla Lindsey
• Megan Samford

We've seen lots of progress and growth in the women in ICS community, and I actually could have had many more great guests on the episode. Still their is much to do to make the community more open and inclusive and supportive to those entering the field.

Chapter 2 of Nicole Perlroth's new book was a dinner at S4x13 that I hosted. This article is my recollection of that dinner.

The ICS security product vendors tend to focus on a product segment, firewall, data-diode, detection, ..., Bayshore Networks is unique in that they have the closest thing to a full line of ICS security products. This is being grown further with their recent acquisition of GE's OpShield technology.

Dale Peterson talks with CEO Kevin Senator about the strategy, individual product segments, and why GE and Bayshore did this detail. It is admittedly a bit commercial as Kevin touts the company, products and strategy. Dale asks some tough questions, and Kevin gives some candid answers.

Dale Peterson interviews authors Andrew Bochman and Sarah Freemen of Idaho National Laboratory (INL) about their just published book Countering Cyber Sabotage - Introducing Consequence-driven, Cyber-informed Engineering (CCE).

The CCE methodology has been discussed by the INL team for over two years to great interest in the ICS security community. Now there is a book that describes it in some of the detail the industry was craving.

Dale begins with a 3-minute review and then dives into the interview. They start their discussion with who the book was for, their hopes for readers who finish the book, the stats on CCE, CCE training and certification and more on the program INL is rolling out. Then the discussion shifts to a detailed Q&A on the four phases of CCE. If you have any interest in determining what should be done next in reducing ICS risk, then this is a must watch episode.

Get Countering Cyber Sabotage on Amazon

I missed recording my weekly article last week so this episode includes the articles from Jan 28th and Feb 4th.

Tweet Me! @digitalbond
Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

One of my favorite interviews is with founders who have persevered to build companies over decades. This one is with Eddie Habibi, the founder of PAS. 

We go over his 27 year journey to uncover some of the lessons learned and how he sees the future of ICS security.

PAS Web Site

Hexagon Acquisition Press Release

S4x21 Charity Water Campaign

S4x20 Video

The Detection Market

Ask A Question

The ZDI team brought Pwn2Own to ICS with Pwn2Own Miami at S4x20. They awarded almost $300K to researchers who were able to find and exploit 0day vulnerabilities in important ICS applications. Applications such as HMI and EWS from Rockwell Automation and Schneider Electric, OPC UA, TMW's DNP3 stack and more.

In this episode I talk with Brian Gorenc and Abdul-Aziz Hariri about the competition. Why they do it? What it achieves? And what happened?

0:00 My brief discussion on which patches matter and which don't

8:12 My interview with Brian and Abdul

47:47 ZDI's video wrap up of the event

Tweet Me! @digitalbond
Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday