Home » News » Cyber Security

Tag: Cyber Security

European Rail Cyber Security Working Group announced

On September 12th the Cyber Senate will be hosting the European Rail Cyber Security Working Group in a roundtable format with discussion groups in the morning and outcomes presented in the afternoon. Capped at 70 participants, this face to face knowledge sharing exercise is specifically designed to assist all stakeholders in the rail ecosystem with an opportunity to assess their security posture, and collaborate with their industry counterparts.
Already confirmed table leaders include the Rail Delivery Group, Deutsche Bahn, and the ERTMS Users Group. More announcements will be made shortly.

The Cyber Senate announce ICS ISAC Alliance

ICS-ISAC Chair Chris Blask noted that Cyber Senate is an example of an information sharing organization which spans key demographics. “The mission of information sharing involves many stakeholders groups across the entire global community. Cyber Senate captures key thought leaders and works to share information among them and with critical communities. We see Cyber Senate as a highly valuable organization and are pleased to support the good work they are doing.”

Cyber security for the digital railway

Join the Cyber Senate on March 16th in London for an in-depth discussion on the current and future threat, how the industry is responding, the absolute importance of “Security by Design,” the challenges that bridging IT and OT bring in deploying enterprise facing architecture and how to further develop a culture of awareness. Cyber threats are growing in frequency and capability across every industry, but none carry more consequences than those carried out against critical national infrastructure. The global rail industry is where the Smart Grid industry was 10 years ago, now realising that through advanced connectivity and digitisation that greater levels of efficiency and optimisation can be achieved, reduction of carbon footprints and greater value can be provided to both asset owners and operators, passengers and shareholders. The rush to next generation infrastructure however is not with out its vulnerabilities. The proliferation of machine to machine sensors, the Internet of Things and the convergence of IT and OT – two very different disciplines, has extended the attack surface dramatically for an industry historically isolated from modern day cyber threats. Join the Cyber Senate on March 16th in Londonfor an in-depth discussion on the advancing threat, the reality of security of our future rail networks, the absolute importance of “Security by Design,” the challenges that bridging IT and OT bring in deploying enterprise facing architecture and more. This is a unique opportunity to address key cyber issues in the design stage within the rail industry, so let us begin. A strong cyber security strategy saves lives. All stakeholders have a responsibility in ensuring the safety, reliability and stability of our Critical National Infrastructure. Information sharing is paramount in educating ourselves and the industry

 

 

 

Anti-IS group’ claims BBC website attack

Reports state the BBC was subject to a DDoS attack by group calling itself “New World Hacking,” targeting IS affiliated web activity. They are reported to have stated “We are based in the US, but we strive to take down Isis [IS] affiliated websites, also Isis members. The reason we really targeted the BBC is because we wanted to see our actual server power. It was a test.”

Source: BBC news

Read more here 

IAEA join the ICS Nuclear conference as Key Note speakers

The Cyber Senate are pleased to announce the IAEA will be joining us as Key Note presenters on the Industrial Control Cyber Security Nuclear conference we will be hosting in Warrington UK, May 24-25th 2016.

For further information see www.industrialcontrolsecuritynuclear.com

New Trojan based campaign, apparently focused on the Middle East, targeting energy companies and specifically trade secrets.

According to Symantec, “A new information stealer, Trojan.Laziok, acts as a reconnaissance tool allowing attackers to gather information and tailor their attack methods for each compromised computer.”

More information can be found on Symantecs blog and we highly suggested familiarising your firm with this latest threat as although it is focused on the Middle East, it started as a “Multi staged attack campaign against energy companies around the world.”

http://www.symantec.com/connect/blogs/new-reconnaissance-threat-trojanlaziok-targets-energy-sector

the Industrial Control Systems Cyber Emergency Response Team received and responded to 245 incidents reported by asset owners and industry partners.

“The Energy Sector led all others again in 2014 with the most reported incidents” Please find the report here https://ics-cert.us-cert.gov/sites/default/files/Monitors/ICS-CERT_Monitor_Sep2014-Feb2015.pdf
“Of the total number of incidents reported to ICS-CERT, roughly 55 percent involved advanced persistent threats (APT) or sophisticated actors. Other actor types included hacktivists, insider threats, and criminals. In many cases, the threat actors were unknown due to a lack of attributional data.”
Those involved in the security sector however are quoting numbers for higher than this, as many incidents go unreported.

The Department of Homeland Security join as Key Note Speakers

The Cyber Senate are pleased to announce Mr Marty Edwards, Director ICS CERT, Department of Homeland Security will be joining us as the Key Note speaker on October 13th and 14th in Sacramento California for the 2nd annual Industrial Control Cyber Security USA conference. 

Marty Edwards Photo (1)

Assistant Deputy Director, National Cybersecurity and Communications Integration Center (NCCIC) Director, Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) Department of Homeland Security Marty Edwards is the Director of the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), an operational division of the department’s National Cybersecurity and Communications Integration Center (NCCIC) and the DHS Office of Cybersecurity and Communications (CS&C) ICS-CERT works to reduce industrial control system risks within and across all critical infrastructure and key resource sectors by coordinating efforts among federal, state, local and tribal governments, as well as industrial control systems owners, operators and vendors. In collaboration with the other NCCIC components the ICS-CERT responds to and analyzes control systems related incidents, conducts vulnerability and malware analysis, and shares and coordinates vulnerability information and threat analysis through products and alerts.

Mr. Edwards has over 20 years of experience and brings a strong industrial control system industry focus to DHS. Before coming to the ICS-CERT, Mr. Edwards was a program manager focused on control systems security work at Idaho National Laboratory. Prior to his work at the laboratory, Mr. Edwards held a wide variety of roles in the instrumentation and automation fields, including field service, instrument engineering, control systems engineering and project management. Mr. Edwards has also held various positions in nonprofit organizations, including Chairman of the Board for one of the automation communities’ largest user group conferences. Mr. Edwards holds a diploma of technology in Process Control and Industrial Automation (Magna cum Laude) from the British Columbia Institute of Technology.

Common Cyber Attacks: Reducing The Impact – CERT UK

“In GCHQ we continue to see real threats to the UK on a daily basis, and I’m afraid the scale and rate of these attacks shows little sign of abating.”
Robert Hannigan
Director GCHQ
http://goo.gl/2RaCGD

Cyber Security for Communications Based Train Control

We launched our CBTC conference for Engineering Directors in 2014, having noticed and appreciated the vision these leaders possessed in relation to upgrading legacy systems, outdated rolling stock and replacing control systems communication. What really caught my attention, is like Smart Grids, in the name of efficiency ( and in this case increasing capacity infrastructure for growing populations) the communications systems being utilised to create the new efficient control systems from track to train are wireless. The rail sector globally are upgrading their assets with two way embedded communications infrastructure that is vulnerable to all of the attacks we read about daily in other industries.

Whilst this is not a cyber security event, it represents the core of the cybersecurity discussion in that, these are the leaders of implementation connecting and facilitating the design of our transport sector, and the vendors are.. well the same ones providing SCADA and Wireless networks all over the world for industrial control systems.

If Transport Cybersecurity is of interest to you, you wont want to miss this conversation. And again, this is an implementation and engineering driven CBTC conference, we are not discussing security. And that is why, you as a cyber professional need to be here.

Operation Dragonfly Imperils Industrial Protocol

By  ,  on Jul 02, 2014
Reblogged with permission orginal article here http://blogs.mcafee.com/mcafee-labs/operation-dragonfly-imperils-industrial-protocol

Recent headlines (here and here) may have struck fear into those living near major energy installations due to references about the Stuxnet malware. In 2009, this particular strain of malware caused significant damage to the Nantanz nuclear facility, reportedly destroying a fifth of Iran’s nuclear centrifuges. Recent reports about Operation Dragonfly, however, appear to be focused on espionage (at least for now), and the scope of the attack appears to be considerably broader than that of Stuxnet. Read more

The Cyber Senate announces two international Industrial Control Cyber Security meetings to address Critical National Infrastructure threats

industrial control cyber security USA  industrial control cyber security europeKey Government, Oil and Gas, Electric and Water Utilities have agreed to share  professional and collective insight at two conferences, being held back to back in London,  Kingdom and Sacramento California, to address security threats surrounding industrial  and process automation systems, the backbone of our global energy infrastructure.

A highly anticipated “Heartbleed” demonstration will be provided by the Finnish security firm responsible for  and “outing” the Heartbleed Bug, Codenomicon. The presentation will focus on “The impact and what you need to know.”

The National Institute of Standards and Technology (NIST), Chief Cyber Security Advisor, recently confirmed  both conference locations and will be presenting on “The development and standardization of cyber security  and processes,” as well as hosting a roundtable discussion on current developments.

Further authorities on both sides of the Atlantic have been confirmed in their respective regions, in London, United Kingdom, this  Scottish and Southern Energy, Electrilivi, Alliander, Security Working Group ETSI-CEN-CENELEC, United Utilities, Stedin and Laborelec GDF Suez. In Sacramento California, contributions include NERC, , Abu Dhabi Marine Operating Company, EPRI, NCI Security, New York University, and Pacific Gas Electric.

The Industrial Control Cyber Security Conference in Europe will take place on September 29th and 30th
Further information can be found at www.industrialcontrolsecurityeurope.com

 

The Industrial Control Cyber Security USA conference in Sacramento California will be held on October 6th and 7th. Further information can be found at www.industrialcontrolsecurityusa.com

 

The Cyber Senate is an exclusive community of global Cyber Security leaders with unparalleled knowledge and , creating a common voice for the Cyber Security industry. We host events and information sharing forums to address key topics across industry sectors such as Energy, Transport, Healthcare and Medical Devices.

Contact Information

James Nesbitt

james@sagacity-media.com

http://www.industrialcontrolsecurityeurope.com

2070961754

James Nesbitt

The Cyber Senate, a Divison of Sagacity Media

http://www.sagacity-media.com

442070961754

We are pleased to announce the launch of the Cyber Senate

Abstract futuristic backgroundThe Cyber Senate is an exclusive steering group advising on global cyber security initiatives for Sagacity Media’s cyber security events and media portfolio, ranging from Healthcare to Energy, Telecoms, Transport and Finance.

Senate members have exclusive access to our select events, and in many cases, be available at these shows to help facilitate information sharing to create a common voice for the industry.

 

The membership is growing and we look forward to making several more announcements shortly.