Industrial Automation Security Belgium 2016
LSEC organiseerde in samenwerking met 3IF.be haar jaarlijkse bijeenkomst rond beveiliging bij industriële automatisatie en industriële controlesystemen. In het Iers College in Leuven werd het belang van cybersecurity aangetoond in het kader van uitdagingen rond cyberbeveiliging, Alle bedrijven in de maakindustrie, maar ook logistiek, pharma, chemie, voeding, transport, ... beschikken over een of meerdere vormen van doorgedreven automatisering. Of ze nu zelf produceren, of productiemachines realiseren, het belang van industriële beveiliging van de systemen en de automatisatie is kritisch geworden. Bijdragen van Wurldtech (GE), ARC Web, HPE en Fox IT duidden op het belang van risicobeheer en beveiliging. De discussie onderschreef het belang van zowel bestaande traditionele "legacy" systemen, die steeds vaker verbonden worden met de buitenwereld, al dan niet met medeweten van de organisatie, als van nieuwe vormen van automatisering voor smart industrie op basis van IoT en internettechnologie. Suggesties werden gemaakt voor het beter beheersen van de uitdaging op basis van Capability Assurance en procesbeheer, alsook het verder uitdiepen van het gebruiken van Security Frameworks zoals dat van het IIC. Het belang van de interne sensibilisering werd bediscussieerd, hoe dat die kan afgedwongen worden bij de interne ontwikkelingen. Suggesties werden gemaakt waarbij de governance van de organisatie mede verantwoordelijk zou worden gemaakt, zodat een interne doorstroming beter zou functioneren. Verschillende cases werden toegelicht, ook in het licht van de recente incidenten in Ukraine en de MIRAI DDOS IoT aanval.
Alle presentaties kunnen worden gedownload van deze pagina, mits u bent geregistreert op de website. Indien u nog niet geregistreerd bent, volgt u de instructies die u ontvangt na het clicken op de links hieronder. Zodra u bevestiging van registratie heeft ontvangen, heeft u toegang tot de presentaties, en ook tot de 3IF Kennisbank.
Agenda & Presentations for Download (English):
Introduction, Ulrich Seldeslachts, LSEC - 3IF
Download Presentation Materials
Keynote: Major Threats in Industrial Control Systems, 2016 & beyond - Erik de Jong, FOX-IT (Netherlands)
Modern multi-staged attacks hop from one network to the next by any means, both by network and by storage device. Every connected system risks being compromised. At the same time, business requires increased levels of integration with industrial automation. Industrial Control Systems are targeted by well-funded adversaries that want to cripple society. Often, attacks remain active and undetected for months or even years, as the Stuxnet attack clearly illustrates. About Erik de Jong: Erik is a security professional with very diverse experience in the field. In his current position, Erik is responsible for FoxCERT. Previously, Erik has held positions as incident handler and security advisor for the Dutch National Cyber Security Center (previously Govcert.nl)
Download Presentation Materials
Scott Christensen, security leader at Wurldtech - a GE Company (US)
Scott joined Wurldtech in March 2012 specializing in the Oil and Gas market. Scott currently leads Wurldtech’s business development efforts for O&G, Utilities, Manufacturing and Healthcare verticals. He also focuses on expanding and educating Wurldtech’s partners and customers on the threat landscape facing OT. Over the last 20 years Scott has worked as a lead in the Cyber for OT businesses units with a focus on the Oil and Gas market and Utility spaces. Scott has previously worked for Dexa Systems, a former division of Schlumberger Technology Services as a Subject Matter Expert on Cyber in OT. He has also held positions at CSI Software, NETIQ, Bindview, and PSINet. Scott received his diploma from the University of Houston
Download Presentation Materials
Valentijn de Leeuw, Vice President at ARC Advisory Group - Cyber Security in Manufacturing
Valentijn has extensive experience in best management practices in process industries. These include chemical, polymer, metals, energy, utilities, food, pharmaceutical and petroleum manufacturing. Experience includes knowledge of unit processes, simulation and modeling and business practices utilizing application software designed for manufacturing operations. Experience in aligning organizations, strategy, business processes and technical architectures. At ARC, responsibilities include research and consulting in process industries. Technology focus is on manufacturing operations management, performance management, knowledge management and the role of the knowledge worker in manufacturing. Valentijn is focal point for the ARC Benchmarking Consortium in EMEA. Valentijn holds a PhD of technical sciences from Delft University of Technology (NL) in cooperation with Ecole Nationale Supérieure des Mines de Paris and IFP and also holds a Masters in Chemistry from Utrecht State University located in The Netherlands. Valentijn acts as independent expert-evaluator of research projects for the European Commission in the Information Technologies and Communication, and Social Sustainability in Manufacturing domains
Download Presentation Materials
Jan van der Sluis, Principal Consultant, Security of Hewlett Packard Enterprise (EU)
Jan has over 20 year experience in IT and business related Security affairs, and working within the Hewlett Enterprise Security Services Division or ESS. Having worked for large payment providers, government assignments and system integrators, he is now responsible for Government and Health in the Nordics, and by such, not only interested in the aspects that are of concern for ICS exploration (Governance, Risk and Compliance – Safety – Financial risk – Critical Infrastructure) but also in what it means for the society – think about consumer spending, market evolution and privacy. Jan will provide the latest insights in “The Security Point of View of ICS”, Time to Market drivers, pitfalls in security operations and some best practices that are current in the market. In the back of this, HPE will also announce their Cyber Security Framework, that incorporates ICS Blueprints and Artefacts.
Download Presentation Materials
SMART & SECURE INDUSTRY - Ulrich Seldeslachts, CEO of LSEC and Managing Director of 3IF (Belgium)
The introduction of new technologies has affected customer expectations in the area of time-to-market, performance of products and production, mass - customization and the evolution to co-creation. Also, the continuous automation of the industry has introduced new challenges with regards to industrial espionage, sabotage, fraud, cyber security and even privacy. SMART & SECURE innovation opens new opportunities for Manufacturers, technology companies active in Industrial automation; and IT Security companies that are increasingly confronted with the challenges of protecting industrial control systems, production systems and production networks.
Download Presentation Materials
Panel Discussion: The evolution of Security Services - Security Operating Centers for Industrial Environments (Chair: Ulrich Seldeslachts, CEO LSEC)
-Scott Christensen, Security Leader at Wurldtech | Cyber Security for Operational Technology - a GE Company (Canada)
-Valentijn de Leeuw, ARC Web
-Ulrich Seldeslachts, 3IF