SCADA and ICS for Security Experts: How to Avoid Cyberdouchery
James Arlen explores scada and ics for security experts: how to avoid cyberdouchery at DEF CON 18, examining privacy and practical defenses.
Summary
Architecture and Background
James Arlen - SCADA and ICS for Security Experts: How to Avoid Cyberdouchery The traditional security industry has somehow decided that they are the white knights who are going to save everyone from the horror of insecure powergrids, pipelines, chemical plants, and cookie factories. Suddenly, every consultant is an expert and every product fixes SCADA.
Vulnerability Analysis
And because they don't know what the hell they're talking about -- 'fake it till ya make it' doesn't work -- they're making all of us look stupid. Attendees will gain a practical level of knowledge sufficient to keep them from appearing foolish should they choose to opine on any of the various real issues stemming from Industrial Control or SCADA systems.
Exploitation and Demonstrations
Attendees will also feel embarrassed for something they've said, empowered to call out charlatans, and much less worried about cyberhackers unleashing cyberattacks which cybercause cyberpipelines and cybermanufacturing plants to cybergonuts and cybertakeovertheplanet using cybercookiesofdeath. James Arlen, CISA, sometimes known as Myrcurial, is a security consultant usually found in tall buildings wearing a suit, founder of the Think|Haus hackerspace, columnist at Liquidmatrix Security Digest, Infosec Geek, Hacker, Social Activist, Author, Speaker and Parent.
Remediation and Defensive Strategies
He's been at this security game for more than 15 years and loves blinky lights and shiny things. Cyber. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·20 min
Martin Vigo
Martin Vigo presents compromising online accounts by cracking voicemail systems: Voicemail systems have been with us since the 80s.
Main Stage·19 min
Truman Kain
Truman Kain presents dragnet your social engineering sidekick: First, Dragnet collects dozens of OSINT data points on past and present social engineering targets.
Main Stage·39 min
Tottenkoph
Tottenkoph details want to take a stab at graffiti but spray paint fumes get you nauseous.


