Unsolicited Response

In this episode Dale Peterson interviews Sandworm author and Wired Senior Writer Andy Greenberg on the S4x20 Main Stage. They focus on the ICS issues in the story. Who is Sandworm? What did Sandworm do? How was the West's response to these attacks? and much more.

The tables are turned in this episode of the Unsolicited Response podcast with Kelly Jackson Higgins of Dark Reading interviewing Dale in the S4x20 Green Room. Kelly has been coming to S4 and covering the ICS security space for over seven years, and this experience lets her write and edit articles with important information and minimal hype.

I spoke with two Digital Bond alumni and Lord Remorin at the S4x20 Cabana Sessions about a wide ranging set of technical topics. First Reid Wightman and I speak about CTFs, Pwn2Own, and his basement. Then I talk with Stephen Hilt and Lord Remorin about their ICS Factory Honeynet. How they built it and what they saw.

Dale Peterson interviews Megan Samford of Rockwell Automation in the S4x20 Green Room.

The main topic is Megan's idea of an Incident Command System for Industrial Control Systems (ICS4ICS). While working for the State of Virginia, Megan was active with and saw first hand the benefits of having an Incident Command System ready to deal with disasters, natural and otherwise. She proposes that the ICS community develop a similar structure to deal with major cyber incidents affecting ICS.

This episode is my ~30 minute interview with DHS CISA Director Chris Krebs in the S4x20 Green Room.

It was actually the first time I've met or spoken with Chris. I found him to be frank, thoughtful and most importantly less constrained into bureaucratic speak than usual for someone at his level in government. We talk about the effective use of DHS's big megaphone, the status of information sharing, reaching out to small / medium critical infrastructure, the future of ICSJWG and more.

Marina Krotofil has been able to view the ICS security world from a number of perspectives. Beginning as an academic; working for an ICS vendor (Honeywell); working for an ICS security products and services company (FireEye); and now working for a large European petrochemical company.

In this podcast we talk about 3 main topics:

1) Academia and it's interaction with the ICS community

2) The Cyber / Physical concept.

3) Her thoughts on ICS ATT&CK

Sean McBride was on some of the earliest Unsolicited Response episodes when he was a Founder and Analyst with Critical Intelligence, the first ICS Threat Intel company. The first 10 minutes of the interview discuss the state of ICS threat intel today.

Then the discussion shifts to creating and running an ICS Cybersecurity Associates Degree program at Idaho State University. We go into what students learn, what jobs they are likely to get, how to scale up the number of students and more.

I sat down with Patrick Miller in Sochi, Russia after we both presented at the Kaspersky KICS event. We cover the electric sector beyond NERC CIP, recruiting and retaining ICS security talent, what Patrick is currently passionate about in ICS security and more.

The S4 Closing Panel is always a candid discussion on where the community is in securing ICS, where we are succeeding and where need to do better. This year I was joined by Rob Lee of Dragos and Zach Tudor of INL.

In this episode I interview Megan Samford and Rick Cherney of Rockwell Automation. First, we discuss how they are dealing with vulnerabilities reported to them by researchers and other means. Second we discuss the Rockwell Automation getting past the Insecure By Design issue that has plagued the Level 1/PLC devices. Most notably the signed firmware and ICS protocol security in CIP Security. We also delve into the challenges of getting CIP Security deployed in both green field and legacy systems.