I spoke with two Digital Bond alumni and Lord Remorin at the S4x20 Cabana Sessions about a wide ranging set of technical topics. First Reid Wightman and I speak about CTFs, Pwn2Own, and his basement. Then I talk with Stephen Hilt and Lord Remorin about their ICS Factory Honeynet. How they built it and what they saw.

Dale Peterson interviews Megan Samford of Rockwell Automation in the S4x20 Green Room.

The main topic is Megan's idea of an Incident Command System for Industrial Control Systems (ICS4ICS). While working for the State of Virginia, Megan was active with and saw first hand the benefits of having an Incident Command System ready to deal with disasters, natural and otherwise. She proposes that the ICS community develop a similar structure to deal with major cyber incidents affecting ICS.

This episode is my ~30 minute interview with DHS CISA Director Chris Krebs in the S4x20 Green Room.

It was actually the first time I've met or spoken with Chris. I found him to be frank, thoughtful and most importantly less constrained into bureaucratic speak than usual for someone at his level in government. We talk about the effective use of DHS's big megaphone, the status of information sharing, reaching out to small / medium critical infrastructure, the future of ICSJWG and more.

Marina Krotofil has been able to view the ICS security world from a number of perspectives. Beginning as an academic; working for an ICS vendor (Honeywell); working for an ICS security products and services company (FireEye); and now working for a large European petrochemical company.

In this podcast we talk about 3 main topics:

1) Academia and it's interaction with the ICS community

2) The Cyber / Physical concept.

3) Her thoughts on ICS ATT&CK

Sean McBride was on some of the earliest Unsolicited Response episodes when he was a Founder and Analyst with Critical Intelligence, the first ICS Threat Intel company. The first 10 minutes of the interview discuss the state of ICS threat intel today.

Then the discussion shifts to creating and running an ICS Cybersecurity Associates Degree program at Idaho State University. We go into what students learn, what jobs they are likely to get, how to scale up the number of students and more.

I sat down with Patrick Miller in Sochi, Russia after we both presented at the Kaspersky KICS event. We cover the electric sector beyond NERC CIP, recruiting and retaining ICS security talent, what Patrick is currently passionate about in ICS security and more.

The S4 Closing Panel is always a candid discussion on where the community is in securing ICS, where we are succeeding and where need to do better. This year I was joined by Rob Lee of Dragos and Zach Tudor of INL.

In this episode I interview Megan Samford and Rick Cherney of Rockwell Automation. First, we discuss how they are dealing with vulnerabilities reported to them by researchers and other means. Second we discuss the Rockwell Automation getting past the Insecure By Design issue that has plagued the Level 1/PLC devices. Most notably the signed firmware and ICS protocol security in CIP Security. We also delve into the challenges of getting CIP Security deployed in both green field and legacy systems.

Forescout's acquisition of SecurityMatters for $113M in cash was the first major exit from the OT Detection Space (or broader passive monitoring market as you will hear in the podcast). I spoke with Brian Proctor about:

1) What it was like moving from an asset owner to a vendor

2) The best way for an asset owner to recruit or develop ICS security talent in this high demand environment

3) Forescout's strategy for the OT capabilities in their "platform" and the market in general

In this episode, I interview Jonathan Homer, the Chief of the ICS Group/Hunt & Incident Response Team at DHS. We discuss: 1) What changes will asset owners see with the creation of CISA in DHS? 2) A detailed discussion of the metrics DHS will use to determine if they are successful / having an impact? 3) Why or if DHS is competing with industry in many of their ICS security services. 4) The CISA Strategic Risk Management Process and how it will prioritize ICS security related efforts.