In this presentation, Tim Conway (a DOE contractor for Idaho National Laboratory) will share a Defense Use Case that has been constructed from an analysis of open source details available from the attack. This talk will provide attendees with actionable steps to increase the resilience and security of their infrastructure against advanced attacks. While we may not have reason to believe U.S. systems are vulnerable because we are not at war, history reveals that what begins on one level (nation state) can quickly devolve into other actors (i.e., Saudi Aramco Shamoon).

In the News:

• Inside the Cunning, Unprecedented Hack of Ukraine’s Power Grid, Wired Magazine, March 3, 2016
• Utilities Cautioned About Potential for a Cyberattack After Ukraine’s, New York Times, February 29, 2016

About the speaker: Tim Conway is the Technical Director of ICS and SCADA programs at SANS. He is responsible for developing, reviewing, and implementing technical components of the SANS ICS and SCADA product offerings. Previously, Tim served as the Director of CIP Compliance and Operations Technology at Northern Indiana Public Service Company (NIPSCO). There he was responsible for Operations Technology, NERC CIP Compliance, and the NERC training environments for the operations departments within NIPSCO Electric. Prior to that, he served as an EMS Computer Systems Engineer at NIPSCO for eight years, with responsibility over the control system servers and the supporting network infrastructure. Tim is a former Chair of the RFC CIPC, Chair of the NERC CIP Interpretation Drafting Team, member of the NESCO advisory board, current Chair of the NERC CIPC GridEx Working Group, and Chair of the NBISE Smart Grid Cyber Security panel