That Pesky Critical Infrastructure

Speaker: Jason Larsen

Very little incident data surrounding cyber attacks of control systems is public and the little that is public is pretty much boring or uninformative. This presentation will focus on public research available on hacking control systems. It will take a technical look at the new exploits and techniques being applied and what their consequences are. For example, a number of recent exploits have been published that allow the attacker to recover the encryption keys used in ZigBee meshes. What does that actually mean to the critical infrastructure?

The presentation will examine hardware hacking techniques and secure key storage as it applies to the new generation wireless devices that are entering the market. It will also try to take a crystal ball approach to security when vendor solutions that attach iPhone and Window Mobile devices to control systems come out later this year.

The presentation focus will be on the technical security measures and will largely ignore policy and best practices. It will attempt to be high level enough that it’s accessible to most audiences.