S4 Events

624 talks · 2001–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Poland 2025: Attack on the Electric System 2025
• 2024 Threat Report - Cyber Incidents With Physical Impact 2024
• September 2022 - ICS Security Month In Review 2022
• February 2021 - ICS Security Month In Review 2021
• CyberX 2020 Global IOT and ICS Risk Report 2020
• Ralph Langner, Zach Tudor & Dale Peterson On ICS Security in 2020 ... from the S4x20 Closing Panel 2020
• 2019 SCADA Diva Award Ceremony 2019
• Prairie Storm 2019: Hands On Power Grid Incident Response Exercise 2019
• Hacking A Medical Device … Way Back In 2013 At S4 2013
• S4 2009 Keynote Dr Ross Anderson's Economics of Information Security 2009
• The Lost Decade: ICS Vulnerabilities Since 2001 2001
• "It Never Happened Before" 5 Minutes from Richard Clarke Keynote
• 1. Cyber / Physical Attacks with Jason Larsen
• 1. Marty Edwards: Know Your ICS
• 10. ICS in the Cloud with Bryan Owen
• 14 Hours And An Electric Grid - Jason Larsen
• 2. Asset Management and Security with Ralph Langner
• 2. ICS Security Architecture with Dale Peterson
• 3 Step Success Story In Semiconductors
• 3-Minutes on Langner's Stuxnet Deep Dive
• 3. ICS Protocols with Adam Crain
• 3. NIST CSF and Maturity Models with Joel Langill
• 4. ICS Assessments with Jason Holcomb
• 4. Security Requirements & Acceptance Testing with Mark Heard
• 5. ICS Security Assessments with Jonathan Pollet
• 5. Safety and Protection with Bryan Singer
• 6. Managing Risk Through Consequence Reduction with Andy Bochman
• 6. The Threat To ICS with Rob Lee
• 7. Incident Response with Chris Sistrunk
• 7. Table Top Incident Response Exercises with Kai Thomsen
• 8. Edge, Fog and SDN for ICS with Tim Watkins
• 8. ICS Security Standards, Guidelines and Regulations with Jason Christopher
• 9. Risk Management & Executive Communication with Patrick Miller
• A 2nd Monitoring Network at Level 0/1
• A Converged Actor Framework
• A Distributed Auto Charger Attack On The Grid
• A High Interaction Factory Honeynet
• A Network Sandbox for ICS Malware
• A New CVSS For ICS Vulnerabilities
• A PLC Integrated Security Module
• A Secure ICS Protocol in a Chip ... because ICS people don't patch
• A Severity Rating Scale For OT Security Incidents
• A Technical Solution for Internet-Exposed OT Assets
• A Tour Of The S4x26 Cabana Sessions
• A Walk Around The S4x19 Welcome Party
• Active or Passive Detection? - Indegy Sponsor Session
• Adam Crain on ICS Protocols
• Adversary Emulation in OT Environments
• AI Analysis of OT Packets For SOC Analysts
• AIBOM: Powering Transparency And Security In AI And Software Supply Chains
• Alternate Factors For MFA Deep In The Manufacturing Environment
• Amazon Fulfillment Center Implementing OT IIoT
• An Economic Analysis of ICS Attacks
• An Examination of Hardware Convergence in ICS
• An Interview with Eddie Habibi
• An Interview With Robert Graham
• Analyzing the ICS Asset Inventory / Detection Market
• Andrew Ginter Interview
• Andrew Ginter's SEC-OT
• Applied Fiction: Training That Engages The Team
• Applied Fiction: Training That Engages The Team
• Applying the Rust Programming Language in ICS
• April ICS Security Month In Review
• Are We On The Right Track?
• ARM Hardware Security
• Assessing The Cyber Readiness Of A State (Florida)
• Asset Inventory, Lawyers, and AI
• Attack Surface in ICS: Do you have a Badness-ometer?
• Attacking The Plant Through WirelessHART
• Author Interview - Industrial Cybersecurity by Steve Mustard
• Automatic Recovery At Level 0
• Averting Supply Chain Attacks
• Avoiding Insecurity in ICS Protocols
• Avoiding OT Vulnerabilities
• Bay Sessions Sponsorship Packages in Tampa
• Bayshore Networks' CEO Kevin Senator
• Better Threat Intel: Climate Change or OT Security?
• Beyond Visibility - Towards Analytics ... Radiflow Sponsor Session
• Billy Rios - Infusion Pump Teardown
• Book Interview - Countering Cyber Sabotage: Introducing CCE
• Brave New Industrie 4 0
• BrickerBot - The IoT Vigilante
• Bringing DevSecOps to ICS
• Building An OT Capable SOC
• Building FrostyGoop With The Help Of AI
• Building Great OT Incident Response Tabletop Exercises
• Burning Down Cities
• Calculating OT Cyber Risk With Ilan Barda of Radiflow
• Calculating Return On Mitigation
• Calculating The Payoff For Attack And Defensive Strategies
• Case Study Fuzzing Before and After You Are Ready
• Case Study: An ICS Breach, an Investigation and Mitigations
• Case Study: Operationalizing Multi-Source Threat Intelligence
• Catastronomics
• Challenges Of Using IEC 62443 To Secure IIoT
• Chaos Engineering in ICS
• Chaos Engineering in ICS
• China As The Most Active Shaper Of The Cybersecurity Space
• Chris Blask: Cybersecurity Pioneer and Idea Man
• CISA Attack Surface Scanning Service
• CISA Director Easterly On Metrics
• Cisco Cyber Vision: Cybersecurity for the Industrial Internet
• Cisco's Session In The S4x26 POC Pavilion
• Claroty's Session In The S4x26 POC Pavilion
• Claroty: OT Security - Enter The CISO
• Closing The Cyber Physical Risk Capital Gap In Insurance
• Cloud As A Governance Plane
• CoDeSys Fail
• Collaborative Water Utility Security Program
• Comms Architecture & Security For Complex Energy Ecosystems
• Communicating ICS Security To Executives
• Comparing Government Approaches To Critical Infrastructure Security
• Connect For Industrial DataOps
• Consequence Based ICS Risk Management
• Controlled Chaos - The Inevitable Marriage of DevOps & Security
• ControlLogix PLC Endpoint Hardening
• Converting A C++ Codebase To Rust
• CPlane's Orchestration Pilot In OPA
• Creating The OT Security AI Data Model & Data Fabric
• Creative Sponsor Opportunities for S4x27 in Tampa
• Critical Attack Flow Modeling
• Critical Infrastructure as Code (CIAC) in ICS
• Critical Penetration: Finding The Disaster Built Into The Plant
• Current and Predicted Market Impact of the US Cyber Trust Mark
• Cyber Attacks on Ukraine Power and Critical Infrastructure
• Cyber Detection Initiated Safety And Protection
• Cyber Insurance Exclusions and Rates
• Cyber Insurance: Linking the CISO to the CFO
• Cyber Nationalism: Dilemmas of Offense and Defense Playing Out in Critical Networks
• Cyber Nationalism: Pick A Side
• Cyber Norms and Cyber Escalation with Jason Healey
• Cyber Norms and Glass Houses
• Cyber Persistence Theory with Michael Fischerkeller
• Cyber Physical Attack Engineering
• Cyber Physical with Jason Larsen
• Cyber Process Hazards Analysis (PHA) to Assess ICS Cybersecurity Risk
• Cyber Risk Quantification (CRQ) with Nicole Sundin
• Cyber Risk Ratings From Moodys' Company
• Cyber Security And Its Impacts On Small Utilities
• Cyber-Physical Attacks with Marina Krotofil
• Cyber-Physical Response - Lessons Learned from Liberty Eclipse II
• Cybersecurity Advisories: Still Carving Stone While AI Writes Code
• Cybersecurity for the Factory of the Future and NextGen ICS
• Cybersecurity Oversight and Governance: Managing the Risk
• Cybersecurity PHA: Consequence Based Security
• Cybersecurity Services For The Next Level of Automation
• Dale Peterson Interviewed By Bosch CyberCompare
• Dale Peterson Interviews Ralph Langner and Zach Tudor
• Dale Peterson On the Sunspec Alliance Webinar
• Dale Peterson S4x17 Keynote Come Together
• Dale Peterson's S4x20 Mini-Keynote
• Dan Geer Interview at S4x18
• Dan Geer on Patching ICS Vulnerabilities
• Darren Highfill: Unsolicited Response
• Dave Whitehead On SBOMs, Manufacturing in the US, and more
• Debate: Are OT Specific Tools & Talent Required To Detect Attacks On ICS?
• Deceive By Design: How To Protect Critical Infrastructure With Deception Technology
• Decision Points: OT Fit-For-Purpose Or IT
• Deep Dive On Low Skilled Threat Actors
• Defense Will Win (In ICS / SCADA Security)
• Denial of Surface: Shodan and ICS
• Dept of Energy OT Defender Fellowship Program
• Designing for Failure: Lessons from Aerospace to OT
• Detecting Counterfeit Smart Grid Devices
• Detecting Disgruntled Insiders
• Detecting ICS Attacks Through Process Variable Analysis
• DHS CISA Director Chris Krebs Keynote
• Digital Forensics and Incident Response (DFIR) for ICS Embedded Devices
• Digital Ghost: Real Time, Active Defense for ICS
• Dino on DCOM Patch and ICS
• Dispel - Rapid, Secure Remote Access To ICS
• Distress Tolerance In Your Job, Life, & OT System
• Distributed Energy Resource (DER) Attack Vectors
• DNP3's New Authorization Management Protocol
• Does DPI In Industrial Firewalls Actually Work?
• Down The Rabbit Hole: Insights From ICS Vulnerability Assessments and Threat Research
• Dragos Sponsor Session: ICS Cybersecurity Technology Selection
• Dragos' Session In The S4x26 POC Pavilion
• Droning About The Supply Chain
• Dynamic Response In Secure Remote Access
• Ed Schweitzer Clip on Complexity and Waynes World
• Edgard Capdevielle on Nozomi Networks & the OT Visibility & Detection Market
• Edgard from Nozomi (Part 2)
• Effective Engagement with Boards (of Directors)
• Effectively Using Attribution
• Efficiently Testing Large Numbers of HART DTMs
• Elisity's Session In The S4x26 POC Pavilion
• Emerging Markets OT Security Regulation
• Eric Cosman Interview - Dow, Open Automation, 62443 and More
• EU CRA Terms and Terminology ... What They Mean For Compliance
• Europe, ENISA and ICS Security
• Evaluating Vendor AI Claims
• Exploitable Vulnerabilities (Weaknesses) Hidden Deep In ICS
• Exploiting XIoT Devices
• Extending Zero Trust To Your Vendors OR When Managed Security Services Fail
• Extreme Visibility - Claroty S4x19 Sponsor Session
• ExxonMobil OPA Interview
• Factories Are Families: How Does Security Join The Family?
• Factory Honeynet: Highly Realistic and Interactive
• Financial Analysis Of The OT Security Market
• Financing The Future of ICS Security
• Find Your Way Around The S4 Big Party
• Finding N-Day Vulnerabilities in an ICS Embedded Devices
• Fireside Chat: Chris Anthony On Singapore’s OT Security Actions & Lessons Learned
• Fireside Chat: Katie Jereza Of The US Dept. Of Energy
• Fireside Chat: Where OPC UA Makes Sense, Standards Adoption, & More
• Fireside Chat: Who Needs To Step Up?
• Five Blind People and an Elephant called ICS Supply Chain Security
• Fortinet - Beyond Visibility in OT
• Fortinet Keynote: Operational Resilience
• Fortinet Keynote: The Year of Disruption
• Frenos' Session In The S4x26 POC Pavilion
• From One Classroom to a Thousand People
• From One Invite to 87 Women
• Functional Safety & Cybersecurity ... Diving into the Details
• Game Show: My Favorite Metric!
• Gaming With Metrics To Achieve An OT Security Program
• GE - Maintaining Security In An Agile Environment
• General Michael Hayden's S4x16 Keynote
• Generating Malicious OT Data To Test Systems
• Getting An Installed Base Off The Internet
• Going Small When Attacking a Process (Triangles)
• GPS As An Attack Vector
• Grant Geyer of Claroty on Edge, VC Round and Market
• Great Debate: Human In The Loop
• Hacking ICS Via DNS
• Hardcore Windows Hardening
• Hardware Hacking - Extracting Information From Chips
• Hardware Hacking Live at S4x16
• Harmonics and Oscillations and Boom
• Havex Deep Dive
• Heavy Vehicle & Me Kate Vajda and Ben Gardiner Name Fixed
• High School Students Learn To Secure Critical Infrrastructure
• Holding the Line in Blues and Packets
• Honeypots For Threat Intelligence
• Hot New Gameshow! My Favorite Metric
• Hot New Gameshow: My Favorite Metric!
• How Complete Is Your Asset Visibility? A Metrics Answer
• How Deep Is Your Deep Packet Inspection (DPI)
• How Did Team Atlanta Win The DARPA AI Cyber Challenge?
• How to Fix the People and Skills Problem in Securing Building Automation Systems
• How To Measure Anything in Cybersecurity Risk
• How We Used Dynamic Edge Segmentation To Secure Our Hyperconnected Factory
• Hyper-Connectivity Will Improve Cybersecurity
• IACS System Testing and Assessment Rating (STAR) Methodology with Don Weber
• IATROGENICS - HARM DONE BY THE HEALER
• ICS 0day Market Analysis
• ICS Actor Inflation
• ICS Anomaly Detection Panel
• ICS ATT&CK Framework: Adversary Tactics and Techniques
• ICS Botnetage
• ICS Capture The Flag (CTF) Winners from S4x17
• ICS Detection Challenge: Phase 1 Asset Identification and Inventory
• ICS Detection Challenge: Phase 2 Detection
• ICS Honeypots - How To Use Them
• ICS Incident Management (Japanese)
• ICS Incident Response
• ICS Is Doing Threat Intelligence Wrong - Targeteering Is Needed
• ICS Malware: Havex and Black Energy
• ICS Protocol Debate: Is Wrap It In TLS The Solution?
• ICS Security - The European Perspective
• ICS Security Architecture
• ICS Security Assessment Methodology, Tools & Tips
• ICS Security Assessments
• ICS Security Career Q & A
• ICS Security Certification Panel at S4x17
• ICS Security Press Panel on S4x18 Main Stage
• ICS Security Random Walk with Dale Peterson and Ralph Langner
• ICS Security Standards
• ICS Spear Phishing
• ICS Village Running the S4x23 ICS Capture The Flag Competition
• ICS-Patch ... What To Patch When In ICS
• ICS/IoT Data ... from the Cloud to the Multi-Edge
• ICSsec Awards: Last SCADA Diva and First Beer ISAC Community Builder Award
• Identifying And Overcoming Cognitive Bias In Detection Systems
• Identifying Malware In Factory Program Files
• Identifying the Disgruntled Insider
• IIoT: Sitting Under The Sword of Damocles
• Ilan Gendelman of SIGA OT Solutions
• In Firmware We Trust: Securing The Software Supply Chain
• Incident Command System for ICS (ICS4ICS)
• Industrial Cyber Risk Management with Jason Christopher
• Industrial DevOps For Velocity and Resilience
• Initiative ... A Key In Cyber Persistence Theory
• INL's Survey of ICS Security Tools
• Innovative CIP Security Training
• Integrating Cybersecurity Accelerated Computing & AI Technologies Into OT
• International Rules on Targeting of Critical Infrastructure with Cyber Operations
• Interview with Acting CISA Director Nick Andersen
• Interview with Andy Greenberg, Author of Sandworm
• Interview with Dave Whitehead, CEO of SEL
• Interview with DHS CISA Director Chris Krebs
• Interview with Ed Schweitzer
• Interview with HD Moore
• Interview with Justine Bone of MedSec on St. Jude Disclosures / Short Selling
• Interview with Kelly Jackson Higgins (plus pirates)
• Interview with Pascal Ackerman - Author of Industrial Cybersecurity
• Interview with Puesh Kumar, Director of CESER
• Interview With Rob Lee On Dragos At 10, OT Threat & Incidents, Ransomware & More
• Interview with Robert Malmgren of CS3STHLM
• Investigating Triton
• IoT Botnets in 3 Minutes
• IronGate: Technical Deep Dive
• Is The Normalized, Taxonomized Approach In A SIEM Doomed To Fail
• Is The Purdue Model Dead?
• Is The Purdue Model Dead?
• Is the World Ready for Cloud-based Autonomous Control System Operations?
• ISA Updates
• It’s Not About Consequences. It’s About Connection.
• It’s Not As Simple As “Use A Memory Safe Language"
• Jason Christopher on SANS ICS418 - ICS Security Essentials For Managers
• Jason Healey - Building A More Defensible Cyberspace
• Josh Corman
• Jumpstart Your NIST CSF Maturity
• Kaspersky Tools & Info For The ICS Security Community
• Keeping Time In A Warzone
• Kelly Shortridge: Security Chaos Engineering in ICS
• Kicking Off S4x19
• Langner's Stuxnet Deep Dive
• Language Theoretic Security (langsec) Applied to ICS
• Lateral Movement At Level 1
• Layered Blueprints for OT Security
• Less ... The Answer To ICS Security
• Lessons from the CISA COVID Task Force
• Lessons Learned From A Major ICS Detection Deployment
• Lessons Learned from Norsk Hydro on Loss Estimation and Cyber Insurance
• Let's Assume SBOM's Exist ... Now What?
• Leveraging Other Department's Tools To Secure OT
• LOGIIC Project 12 - Safety Instrumentation
• Long Conversation: OT and IT - Convergence, Integration, and Separation?
• Loss Of Life Do To Cyber Attacks
• Machine Learning With and Without the Hype
• Make The Big Decisions With Cyber Decision Diagrams
• Making Power System Cybersecurity Part of the Engineering Process
• Malware on ICS
• Mapping Incidents to ICS ATT&CK
• Maritime: Compliance Risk Trumping OT Cyber Risk
• Marty Edwards, Director of DHS ICS-CERT, Interview
• Mary McCord, Dept of Justice, Keynote at S4x17
• Measuring And Reducing Maintenance Debt
• Medical Device Security: Uncomfortable Truths Require Uncomfortable Responses
• Metrics: How Effective Is A Security Control?
• Microlearning Techniques To Improve Cybersecurity Awareness Training
• Midsummer S4x26 Update
• Mikko Hypponen Cyber Geopolitics
• Mikko Hypponen, Author of If It's Smart, It's Vulnerable
• Mocana Sponsor Session: Automated Security Lifecycle Management
• Modbus Secure Update from S4x18
• Modern Defense Evasion in IoT Botnets
• Modified ROP Chain Generators To Identify Potential Code Execution Exploits
• Moody's / Team8: Cyber Risk Ratings for Companies
• MUD - To Help Secure IoT
• Nation State ICS Attack On A Budget
• Native EDR for PLCs
• Navigating S4x26 At The Loews Miami Beach
• Navigating The S4x26 Welcome Party
• Network Traffic Collection Methodologies
• New Adventures in Legacy System Modernization
• New Coverage or OT SBOM Market & Women In ICS Security Day at S4x22
• New Detection Models: Testing & Results
• Nicole Perlroth Interview - This Is How They Tell Me The World Ends
• NIS2 As A Multi-Country Cyber Regulation Experiment
• Non-Security Metrics To Identify & Quantify Security Related Risk
• Normalization of Deviance in 3 Minutes
• NOW!: Dale Peterson's S4x13 SCADA Apologist Keynote
• Nozomi - Encryption in ICS and It's Impact on Passive Monitoring
• Nozomi Networks: Lessons Learned After 1,000 Installations
• Nozomi's SCADAguardian and Case Studies
• October ICS Security Month In Review
• Oil & Gas: ICS Threat Landscape
• Oldsmar Deconstructed
• On Data, Complexity and Asking Questions That Matter
• OnRamp Online: ICS in the Cloud
• OnRamp: AI In OT & ICS Security
• OnRamp: Cyber Informed Engineering
• OnRamp: Dealing With Ransomware On IT
• OnRamp: OT Supply Chain
• OnRamp: Vulnerability Management – What To Patch When
• OPC UA as the Bridge to IoT
• Operating With Adversary Supplied Components
• Operation Grim Beeper: A Cyber-Physical Attack
• Orchestration for OT at Scale
• OT Data Lakes
• OT Incident Impact Score
• OT Managed Security Services - 1898 & Co.
• OT SecOps Or Bust
• OT Security Score For Manufacturers
• OT Security: Cyber & Climate Nexus
• OT Specific DPI for Operational Awareness: Ultra 3eti Session
• OT Threat Intel with Sergio Caltagirone
• OT Threat Predictions For The Next 1 - 3 Years
• OT Visibility Is Overrated - Bryson Bort
• OT Warriors Lock It Down
• Our Interruptible Future
• Overall Equipment Effectiveness (OEE) As An ICS Cybersecurity Metric
• Owl Cyber Defense - Edge Protection for the OT
• Parsons: How To Make Your Next ICS Security Project Successful
• PAS - OT Forensics and Safe Restart
• PAS OptICS Keynote: Making Sense Of ICS Security Products
• PASTA - Portable Automotive Security Testbed with Adaptability
• Pat Kennedy on Founding, Growing and Selling OSIsoft
• Persisting in Level 1: The Building is Alive
• Phil Venables - CISO of Google Cloud
• Phoenix Contact - Large Scale Deployment of mGuard
• PKI: An Aviation Case Study
• PLC (In)Security ... SCADA Apologist or SCADA Realist?
• PLC and Level 1 Device Integrity in ICS
• PLC Virtualization
• PLC's: Backdoors in Disguise
• POC Pavilion Analysis & Outcomes
• Practical ICS Security: Lessons Learned from 12,000 Deployments
• Presidential Candidate Will Hurd
• Problems & Solutions In Deploying SDN In OT
• Problems with ICS Proprietary Encryption (or Encraption)
• Procurement: Addressing Risk Before It Is Purchased
• Project Basecamp - PLC Hacking and Insecure By Design
• Project Basecamp - PLC Hacking Intro
• Public Ledger Technology: Code Signing and Device Birth Certificates
• Pwn2Own Miami ... $250K for ICS Exploits
• Pwn2Own Miami Results At S4x20
• Quantifying Risk For Devices Without Published Vulns
• Quantum Key Distribution in ICS
• RADICS: Recovering From A Blackout On Plum Island
• Rail Security with Miki Shifman
• Ralph Langner on Lean OT Security
• Ralph Langner on OT Asset Management
• Ransomware in ICS ... It Begins
• Rapid 7 / SCADAfence Integration for Vuln Management (and Q&A on getting into OT security)
• Rating Deployed OT Firewalls’ Effectiveness
• Recognizing & Analyzing Compiled AI In OT Binaries & Firmware
• Recruiting Non-Traditional Talent for the OT Security Team
• Remote Control Automobiles: Hacking The Snapshot Dongle
• Replacing Likelihood With Credibility In The Risk Equation
• Review of the New API 1164 Pipeline Control Systems Security Standard
• Richard Clarke Keynote at S4x17
• Richard Seiersen Author Of The Metrics Manifesto
• Risk Quantification
• Risk, Utility & The Public Good (Cyber Insurance for ICS)
• Rob Lee on US Government Activities, Disagreements with Dale, and the Market for ICS Security Pro's
• Rockwell Automation's Approach To An Effective Cybersecurity Strategy
• Rogue Firmware Upload in PLC's and Other Field Devices
• Ryuk Activity On Oil/Gas Environments
• S4 Classic: First Ever ICS On The Internet Session
• S4 Closing Panel
• S4 Closing Panel
• S4 Great Debate: Cyber Resilience Act Impact
• S4 Interview with Bill Fehrman CEO of Berkshire Hathaway Energy
• S4 Legend Interview: Mark Weatherford
• S4x12 Mini-Keynote: No More Fragility
• S4x18 Closing Panel with Langner, Peterson and Tudor
• S4x18 Debate: Enterprise SOC or OT SOC?
• S4x18 ICS Capture The Flag (CTF) Competition
• S4x18 Theme & Mini Keynote by Dale Peterson
• S4x19 Cabana Sessions
• S4x19 Charity: Water Campaign
• S4x19 Closing Panel with Rob Lee, Dale Peterson and Zach Tudor
• S4x19 Closing Panel: Government's Role
• S4x19 Dale Peterson Mini Keynote - Create The Future
• S4x19 ICS Detection Challenge Results
• S4x22 Call For Presentations
• S4x23 Call For Presentations
• S4x23 Interview with Gene Spafford
• S4x25 Feedback & Review
• S4x25 Training Course: Threat, Vulnerability, and Risk Assessments For ICS
• S4x26 POC Pavilion
• S4x26 Ticket Sales Open On Monday, Sept 15th
• S4x26 Welcome Keynote: Connect
• S4x27 Call For Presentations - Tips For Getting Your Session Selected
• S4x27 Call For Presentations Update
• S4x27 Ticket Sales and Hotel Booking Advice
• Safety in Process Control
• Safety Needs To Learn From Security ... And Security From Business
• Salvador Technologies' Session In The S4x26 POC Pavilion
• SAST Tools For Secure PLC Programming
• SBOM & CycloneDX with Steve Springett
• SBOM... Who Pays For It?
• Secure Coding Practices for PLC's
• Secure Forensics Port For ICS Embedded Devices
• Secure ModBus (TCP/802)
• Securely Exporting ICS Data
• Securing California's Distributed Energy Resources (DER)
• Securing ICS in an IIoT World ... The Simple Solution
• Securing The Diversity In Universal Theme Park's Ride & Show Network
• Securing The Manufacturing Edge
• Securing Vehicle To Everything (V2X) and Accelerating Its Adoption
• Security Added To CIP / EtherNet/IP Protocol
• Security By Design Decision
• Security Controls & Vulnerabilities in Embedded System OS
• Security Dashboards for Plant Managers
• Security Guards vs. Motion Detectors: Depth or Breadth in ICS Security Monitoring
• Security Issues In Compiled PLC Logic (CoDeSys & ProConOs)
• Security of Medical Devices - First Vulns Identified at S4x13
• Semi-Quantitative Cyber-Physical Risk Assessments
• Sensors and Sensibility
• Sentryo: Lessons Learned Through Our OT Security Journey
• Serial Killers: Ethernet/Serial Gateways Exposed
• ServiceNow's New OT Management Product
• ServiceNow's Session In The S4x26 POC Pavilion
• Shell's Approach To ICS Security
• Shiny Object Syndrome ... Is OT Anomaly Detection Worth It?
• Small Pox, Armor and ICS Security
• SOAR In ICS
• Software Identity And The Naming Of Things
• Special Access Features - A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs
• SSP-21: Secure SCADA Protocol for the 21st Century
• State Of NERC CIP, European Update, and OT Security Community
• STIX and Your Security Controls
• Strategies And Lessons Learned From Internal Network Security Monitoring At Scale
• Supply Chain Chipping Attacks: When Should I Worry?
• Survey of ICS Firmware Security
• Systemic Security Issues In "SoftPLCs"
• Test Effect Payloads for Tuning ICS Incident Response
• Testing (And Results) Of Level 1 Device Protocol Stacks
• The Antikernel
• The Biological Internet of Things (BIoT)
• The Bowtie ATT&CK
• The Case For Vertical Specific (Rail) OT Security Training Materials
• The Closing Panel In Prime Time
• The Decisions and Uncertainty in OT Recovery
• The Drone Threat To ICS
• The Easy Button for Cyber/Physical ICS Attacks
• The Future of ICS Security
• The Future of ICS Security Products (from ICSJWG event)
• The Future of ICS Security Products ... What You Need To Know
• The Future of OT Security, An Alternative Point Of View
• The Future Of The SBOM Market
• The Future With ISO 22373 for Trustworthy OT Supply Chains
• The Great Debate: Anti Virus and Monthly Security Patching Should Be Abandoned In ICS
• The Great Debate: Anti Virus and Monthly Security Patching Should Be Abandoned In ICS
• The Impact Of Regulation On Multinational Companies
• The Industrial Radio Project - Hacking Cranes Using SDR
• The Information Harm Triangle
• The Key Role of EPC's in Industrial Cybersecurity
• The Loop
• The Next Generation Secure PLC
• The OT Cybersecurity / Climate Nexus with Andy Bochman
• The Power of Collaboration to Secure Critical Infrastructure
• The Pragmatic Pwn of ICS
• The Purdue Model in a Private LTE & 5G World
• The Road To Solar Energy Cybersecurity
• The SBOM Challenge
• The Threat To ICS
• The Value of Little Data
• The VC View Of ICS Security Companies
• The Water Sector (Uniqueness, Cloud, Oldsmar, NERC CIP)
• The Witch Doctor vs The Engineer
• Threat Hunting With What You Have
• Threat Modeling Belgian Energy Producers
• Throw Out The CVSS and Replace with Never, Next, Now
• Tips For Using The S4x25 Mobile App
• Tips For Your S4x26 CFP Submissions
• Tom Pace On Firmware Security Testing
• Top 10 Security Questions for Your Vendor
• Top 20 Secure PLC Coding Practices
• Tour of the S4x25 Venue
• Training High School Students on ICS Security
• Translating Cyber Threat Intelligence Into Actionable Guidance For OT
• Triton - A Report From The Trenches
• TRITON - Mandiant Analysis at S4x18
• TRITON - Reverse Engineering the Tricon Controller
• TRITON - Schneider Electric Analysis and Disclosure
• TRITON: Ralph Langner & Zach Tudor Thoughts at the S4x18 Closing Panel
• Trust, Reputation, Data Security, and You
• Tuning ICS Security Alerts: An Alarm Management Approach
• Two Degrees from Patrick Miller
• Tying Bow Ties: Using Bow Tie Analysis to Secure ICS
• Tying Security Architecture Into Control Room Operations
• Understanding and Securing Unified Name Space (UNS)
• Understanding and Using the Cyberwar Meta
• Understanding Our Adversaries: Using Threat Intelligence To Protect Energy Infrastructure
• Understanding The (Cyber) Insurance Business
• Unsolicited Response - Heroes v. Guides
• Unsolicited Response - John Ballentine
• Unsolicited Response - Kerry Tomlinson's Annual S4 / OTSec Rap
• Unsolicited Response S4x19
• Unsolicited Response with Maggie Morganti
• Unsolicited Response: Selena Larson on Bringing New & Diverse People into the ICS Security Community
• US Dept of Defense Panel
• Use of Unidirectional Gateways in ICS (Japanese)
• USG ICS Security Initiative and Executive Order with Eric Byres
• Using BOMs to Threat Model A System
• Using Microsoft Detours For Deep System Inspection
• Using The Whova App At S4x26
• VC Panel on Investing in ICS Security
• VPNFilter Deep Dive
• Vulnerability Inheritance in PLC's
• Water Sector Cyber Risk with Gus Serino
• Water: The (Potentially) Most Cyber-Resilient CI Sector
• Waterfall - Safe OT Security Monitoring
• Weakness at the Boundaries - Cisco Sponsor Session
• WebAssembly at the IoT Edge
• What CSF Function Should Be Prioritized Now?
• What Is A Critical Service? A Hierarchy Of Needs
• What is the BEER ISAC?
• What OT Can Learn From FinTech On Product Security For SaaS
• What Risk Have You Accepted In A Company Acquisition?
• What Secure By Design Aspects Should You Prioritize?
• What To Do 1st, 2nd, 3rd
• What to Patch When in OT - A Methodology
• What We Learned From ICS Pwn2Own
• What's Your Cyber Narrative?
• What’s Happening In The Cisco S4 Prime Room
• What’s Happening In The Fortinet Prime Room
• What’s Happening In The Nozomi S4 Prime Room
• What’s Happening in the OPSWAT S4 Prime Room
• What’s Happening In The Palo Alto Networks S4 Prime Room
• What’s Happening In The SEL Prime Room
• What’s Happening In The ServiceNow Prime Room
• What’s Happening In The TX1 Prime Room
• Whit Diffie's S4x07 Keynote on the History of Cryptology
• Why A Spreadsheet Is Not An OT Asset Inventory
• Why DevOps in ICS?
• Why I'm Hacking My Own Heart?
• Why Johnny Can’t Patch Can Vulnerability Patching Work in the ICS World
• Will Your Protection System Work In A Cyber Incident?
• Wireless IIoT: The Direct Path To Your Level 0
• Women In ICS Security
• Women In ICS Security
• Xage Security's Session In The S4x26 POC Pavilion
• You are Not Special
• Your IDS Rules For ICS Stink (and how to fix them)
• Your Value As An OT Security Professional
• Zero Trust In Four Minutes
• Zones & Conduits In The Cloud