2018 ICS Cyber Security Conference

In this collaborative session with representatives from Emerson Automation Solutions and CyberX, we'll discuss a real-world example of how security researchers uncovered a vulnerability in an ICS product and worked cooperatively with the ICS automation vendor including: how contact was made, responsible vulnerability disclosure, patch development & distribution, and finally public disclosure of the vulnerability via ICS-CERT. We'll also discuss how Emerson has implemented Secure Development Lifecycle Assurance (SLDA) to prevent such vulnerabilities in future development projects. CyberX and Emerson will discuss how asset owners can secure assets and processes through threat modeling and defense-in-depth – including with compensating controls such as continuous monitoring.