Integrated Cyber Fall 2018 Day 2, Ben Miller: How to Respond to Industrial Intrusions

This presentation will offer thoughts on how to respond to industrial intrusions. One of our biggest challenges as a community is how we are largely untested in our ability to recognize and respond to an industrial intrusion. Making matters worse, the industrial environments often lack the level of logging needed to respond and understand an attack. We must quickly move to a “protection eventually fails” mindset and understand how to “live off the land” to gain the defender’s advantage. This talk will pragmatically step through how our engagements have shaped our thoughts and our technology.