Kaspersky has just published the videos from the Kaspersky Industrial CyberSecurity 2018 conference. This video shows Kenexis CEO Ed Marszal presenting the Security PHA Review concept using a pump station as an example. https://www.youtube.com/watch?v=QnfBRlgBaHg&t=239s
On 20 Sep 2018, Kenexis CEO Ed Marszal presented at the 2018 Kaspersky Industrial Cyber-Security conference in Sochi, Russia. The topic of the presentation was Security PHA Review (SPR). The presentation provides a brief overview of the topic while highlighting a specific application - a oil pipeline pumping station. This example was chosen because an [...]
A month ago I was on my way into Istanbul from the Middle East. I filled out the online form for a Visa to enter the country and received an email that had malware attached to the link for my Visa. That one got me and took down my email for a couple hours why [...]
2-factor authentication Most of the people I work with know how I feel about password security. I’m well aware of the password management burden we all face, so I’m always promoting the use of password managers and two-step authentication for any account that supports it. I recently read an article posted on The Register in which a [...]
Network appliances like firewalls and switches, have software (commonly referred to as firmware) on them that monitor and log security events. Unfortunately, the logs are rarely read by anyone. In fact, most people have never logged into their home router to look at the logs or change the administrator password. If the firmware was compromised, [...]
Recently, Jim Gilsinn presented at BSides DC 2016 about cybersecurity work on Industrial Control Systems (ICS) and SCADA (Supervisory Control And Data Acquisition). His presentation was titled: "What's the Big Deal with Assessing ICS/SCADA?" If you are considering a career in ICS Cybersecurity, this might persuade you to go back to law school. YouTube Link
Make sure to check out the cover article in ISA’s InTech publication. In the article, Ed Marszal explains: “Even though cyber-threats are not adequately addressed with existing process hazard analysis (PHA) methods, there is no reason to abandon everything that we know about process risk assessment and start from scratch. Instead, industry is extending tried-and-true [...]
