Critical Infrastructure Security 10 Years After Stuxnet

In 2010, the discovery of Stuxnet, the sophisticated virus used to sabotage Iran's nuclear program, ushered in a new era of warfare — in the digital realm. It placed critical infrastructure around the world in the cross hairs by demonstrating how a remote digital attack could be done anonymously, and have as much destructive capability as a physical attack. As we approach the ten-year anniversary of this discovery, what have we learned? Since Stuxnet, there have been subsequent attacks against critical infrastructure that show us where the threat landscape is headed. In this talk, attendees will learn: · What Stuxnet showed us about the ways in which critical infrastructure systems that manage electric grids, water treatment plants, traffic systems and more, are vulnerable to cyber attacks · The kinds of attacks we’ve seen since then, such as the assault on Ukraine’s power grid and the attack that targeted a Saudi Arabian chemical plant · Lessons learned from Stuxnet and these subsequent attacks that show the mistakes that made them possible — plus best practices for winning against them