[SCADASEC] FW: 2008 Applied Control Solutions Control System

[Bob Radvanovsky]

Joe wanted to know if this was appropriate for the mailing list.  To answer his question, for conferences and meetings involving exchanging of ideas and information, this is what this list is all about, even if it is for commercial purposes.  Why?  Because some of you may find what Joe has to say (if this case) useful and informative.  I encourage education and discussion with your industry peers and colleagues -- there's nothing more better than BOF (birds of feather) sessions, which I feel, are the best kinds...esp. over a beer.  ;)

Read the footer below and contact Joe if interested.  ;)

-rad

----- Original Message -----
From: Joe Weiss [mailto:joe.weiss at realtimeacs.com]
To: rsradvan at unixworks.net
Subject: FW: 2008 Applied Control Solutions Control System Cyber Security Conference - U of O


> Bob - would you be willing to put this on the listserver - I didn't want
> to do it directly if you thought it was too commercial
> 
> Thanks,
> 
> Joe
> 
>  
> 
> Joe Weiss PE, CISM
> 
> Applied Control Solutions, LLC
> 
> Cupertino, CA
> 
> (408) 253-7934
> 
> (408) 253-7974 Fax
> 
> (408) 832-5396 Cell
> 
> joe.weiss at realtimeacs.com
> 
>  
> 
> ________________________________
> 
> I am pleased to announce the 2008 Applied Control Solutions Control
> System Cyber Security Conference will be held August 4-7, 2008 in Burr
> Ridge, IL (Chicago area). Argonne National Laboratory, one of the
> national laboratories working on critical infrastructure protection,
> will co-host this year's event with a focus on interdependencies. The
> Marriott Burr Ridge, the host hotel, is located approximately 19 miles
> from Chicago's O'Hare International Airport, 13 miles from Chicago's
> Midway Airport, and five miles from the Argonne National Laboratory.
> 
>  
> 
> There have been a number of plusses and minuses since last year's
> conference in Knoxville. On the plus side, testing continues at INL,
> PNNL, and selected end-user sites; vulnerabilities are being identified
> and rectified (though not always publicized); procurement standards are
> being established for the HMI (Windows and Linux interface); more people
> are talking about "SCADA security", and standards are being written. On
> the minus side, there continue to be control system cyber incidents
> including some with very significant impacts; vendors are continuing to
> build new instrumentation and control systems with built-in cyber
> vulnerabilities; there is a lack of procurement specifications for
> control system field devices; there is a lack of security test
> specifications for control systems; local and state governments are
> specifying cyber vulnerable systems (AMI and programmable thermostats);
> there continues to be a need for an "open" test bed where information
> would be shared with all participants, not just the vendors; and there
> continues to be a glaring lack of understanding of control system cyber
> security. 
> 
>  
> 
> Consequently, a sampling of subjects that should be of great interest
> includes:
> 
> -          Technical issues affecting Intelligent Electronic Device
> (smart breakers and relays) security
> 
> -          Procurement specifications for a secure DCS retrofit
> 
> -          Control system and IT organizational interactions including
> network engineering
> 
> -          Field testing results from control system cyber security
> technologies
> 
> -          Control system network intrusion detection data analysis
> 
> -          Evidence gathering and potential impacts on control system
> restart
> 
> -          Nuclear power plant control system cyber security licensing
> issues
> 
> -          Interdependencies including impacts on security
> 
>  
> 
> As with the previous conferences, there will be demonstrations of
> hacking control systems. There will also be presentations and
> demonstrations of security technology being installed in actual control
> system networks.
> 
>  
> 
> Details on hotel, registration, and agenda will be forthcoming. As in
> Knoxville last year, there will be a full-day devoted to NIST-sponsored
> efforts on control system cyber security standards including NIST
> SP800-53 and NIST SP800-82 following the Applied Control Solutions
> Conference, Thursday afternoon to Friday noon. 
> 
>  
> 
> Sponsorship opportunities are available and specific details will be
> forthcoming.
> 
>  
> 
> Please call if you have any questions. I hope to see you in Burr Ridge.
> 
> Joe
> 
>  
> 
> Joe Weiss PE, CISM
> 
> Applied Control Solutions, LLC
> 
> Cupertino, CA
> 
> (408) 253-7934
> 
> (408) 253-7974 Fax
> 
> (408) 832-5396 Cell
> 
> joe.weiss at realtimeacs.com <mailto:joe.weiss at realtimeacs.com> 
> 
>  
> 
>  
> 
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Mark Your Calendar 2008.doc
Type: application/msword
Size: 818688 bytes
Desc: not available
Url : http://news.infracritical.com/pipermail/scadasec/attachments/20080207/9605c932/attachment.doc