How to Avoid the Next STUXNET In Your Control Systems

•

0 recomendaciones•458 vistas

Presented by Patrick Miller, CEO of EnergySec, at the Metropolitan Solution Conference in San Jose, CA, November 6th, 2012.

Metropolitan Solutions Conference | Security and Reliability for Urban Infrastructures | San Jose, CA | November 6 2012

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

Metropolitan Solutions Conference | San Jose, CA | November 6 2012

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

Credits
Presentation by Patrick C Miller, President and CEO, EnergySec, patrick.miller@energysec.org
Slide 1 photo by OiMax, creative commons license http://www.flikr.com/photos/72398314@N00
Slide 2 photo by alainv4, creative commons license http://www.flikr.com/photos/12236584@N00
Slide 3 photo by _Geronimo_, creative commons license http://www.flikr.com/photos/90313537@N00
Slide 4 photo by Kitty Terwolbeck, creative commons license http://www.flikr.com/photos/59800091@N04
Slide 5 photo by ShapeThings, creative commons license http://www.flikr.com/photos/84579440@N00
Slide 6 photo by jculverhouse, creative commons license http://www.flikr.com/photos/26615819@N07
Slide 7 photo by nickwheeleroz, creative commons license http://www.flikr.com/photos/7762644@N04
Slide 8 photo by norsez, creative commons license http://www.flikr.com/photos/42918851@N00
Slide 9 photo by Muffet, creative commons license http://www.flikr.com/photos/53133240@N00
Presented at Santa Clara Convention Center, Great American Ballroom, 5001 Great America Pkwy., Santa Clara, CA 95054
Made with HaikuDeck and Microsoft PowerPoint

phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

Más contenido relacionado

Similar a How to Avoid the Next STUXNET In Your Control Systems

An Informed World - Awareness Through Social Media

An Informed World - Awareness Through Social Media

An Informed World - Awareness Through Social Media

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Nomophobia; are you addicted to your smartphone?

Nomophobia; are you addicted to your smartphone?

Nomophobia; are you addicted to your smartphone?

CIPD Cov & Warks Branch Event 22 01 2015

CIPD Cov & Warks Branch Event 22 01 2015

CIPD Cov & Warks Branch Event 22 01 2015

In this presentation, Shannon Mason, shares her understanding of core systems in the brain and their relationship to planning, reward, and fear. Shannon also discusses planning and cost fallacies in relationship to effort, flow, and investment. She shares how we utilize these practical theories in real life to build better roadmaps and work better as a team. Shannon concludes by talking about meditation, and why every Product person should look into mindfulness

How to Plan For Product Success by CA Technologies VP of Product

How to Plan For Product Success by CA Technologies VP of Product

How to Plan For Product Success by CA Technologies VP of Product

How on line savvy are you - CIPD Guernsey Event

How on line savvy are you - CIPD Guernsey Event

How on line savvy are you - CIPD Guernsey Event

Janine Lane Chartered FCIPD

An Informed World - Creating Awareness Through Social Media

An Informed World - Creating Awareness Through Social Media

An Informed World - Creating Awareness Through Social Media

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Kickstarting your creativity and how to succeed

Kickstarting your creativity and how to succeed

Kickstarting your creativity and how to succeed

Lauren Chambers

http://www.redlinehd.com/ - Here are 8 things any business can do to increase their social media marketing presence. Redline Digital is a website design and social media marketing firm. We offer the following services: -Social media marketing and design -Social media training -Graphic design -Online advertising design and management -Website design and consulting – How to get more sales from your website. -Search engine optimization (SEO) We have experience with the following brands: Mercedes-Benz, Infiniti, Toyota, Nissan, Ford, Lincoln, Chevrolet, Volvo, Dodge, Chrysler, Jeep, RAM, Kia, Hyundai, Honda, Subaru, GMC, Buick, Cadillac, Lexus. SPECIALTIES: Social media marketing, Social media training, Facebook advertising management, website design and consulting, email marketing management, and SEO.

10 Ways Your Business Can Boost Social Media

10 Ways Your Business Can Boost Social Media

10 Ways Your Business Can Boost Social Media

Publishing: the challenge of delivering exceptional digital user experience

Publishing: the challenge of delivering exceptional digital user experience

Publishing: the challenge of delivering exceptional digital user experience

Social Stigma in the Online Dating World

Social Stigma in the Online Dating World

Social Stigma in the Online Dating World

DotNetNuke - An Excellent Platform For Your Online Presence

DotNetNuke - An Excellent Platform For Your Online Presence

DotNetNuke - An Excellent Platform For Your Online Presence

Social Media Use and Fulfilling the Need to Belong

Social Media Use and Fulfilling the Need to Belong

Social Media Use and Fulfilling the Need to Belong

Presentación ITgallery en Summa14

Presentación ITgallery en Summa14

Presentación ITgallery en Summa14

ITgallery Software

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

Sutton Group Executive Search

Sutton Group Executive Search

Sutton Group Executive Search

Similar a How to Avoid the Next STUXNET In Your Control Systems (20)

An Informed World - Awareness Through Social Media

An Informed World - Awareness Through Social Media

An Informed World - Awareness Through Social Media

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Nomophobia; are you addicted to your smartphone?

Nomophobia; are you addicted to your smartphone?

Nomophobia; are you addicted to your smartphone?

CIPD Cov & Warks Branch Event 22 01 2015

CIPD Cov & Warks Branch Event 22 01 2015

CIPD Cov & Warks Branch Event 22 01 2015

How to Plan For Product Success by CA Technologies VP of Product

How to Plan For Product Success by CA Technologies VP of Product

How to Plan For Product Success by CA Technologies VP of Product

How on line savvy are you - CIPD Guernsey Event

How on line savvy are you - CIPD Guernsey Event

How on line savvy are you - CIPD Guernsey Event

An Informed World - Creating Awareness Through Social Media

An Informed World - Creating Awareness Through Social Media

An Informed World - Creating Awareness Through Social Media

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Investing Goes Personal: A Look at Crowdfunding in the Digital Age

Sacrificed Privacy

Sacrificed Privacy

Sacrificed Privacy

Kickstarting your creativity and how to succeed

Kickstarting your creativity and how to succeed

Kickstarting your creativity and how to succeed

10 Ways Your Business Can Boost Social Media

10 Ways Your Business Can Boost Social Media

10 Ways Your Business Can Boost Social Media

Publishing: the challenge of delivering exceptional digital user experience

Publishing: the challenge of delivering exceptional digital user experience

Publishing: the challenge of delivering exceptional digital user experience

Social Stigma in the Online Dating World

Social Stigma in the Online Dating World

Social Stigma in the Online Dating World

DotNetNuke - An Excellent Platform For Your Online Presence

DotNetNuke - An Excellent Platform For Your Online Presence

DotNetNuke - An Excellent Platform For Your Online Presence

Social Media Use and Fulfilling the Need to Belong

Social Media Use and Fulfilling the Need to Belong

Social Media Use and Fulfilling the Need to Belong

Presentación ITgallery en Summa14

Presentación ITgallery en Summa14

Presentación ITgallery en Summa14

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

Like, Favourite, Retweeet: Social Media's Impact On Our Relationships

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

The Top 5 Problems with IR Websites and the Best Practices to Solve Them

Sutton Group Executive Search

Sutton Group Executive Search

Sutton Group Executive Search

Más de EnergySec

When we talk about cyber security, we recognize that it is part of a holistic approach to security and critical infrastructure protection. Tools and technology are not enough to ensure that mission critical systems provide capabilities needed for the military, continuity of government and commercial enterprises to continue operations in the face of emerging threats. Recognizing the unique nature of our location on the Hawaiian Islands in the middle of the Pacific, we also understand the importance of collaboration and alignment of critical infrastructure protection among the military, state government, commercial and public stakeholders. A comprehensive approach needs to include innovative capabilities, a thorough analysis of operational dependencies, and the organizational collaboration required to protect critical capabilities. In this session, we will discuss our innovate approach to developing a holistic cyber security approach for critical infrastructure and share a case study to help you think differently about your own approaches for security.

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Over the past few years, penetration testing has gotten easier. What used to take a week of scanning, analysis, and exploit research now happens in one day on average in a common IT environment. The efficiency of compromise has increased based on several factors including increased knowledge sharing, more robust computing, and automated exploitation tools. OT environments are often utilizing the same operating systems and are prone to many of the same attacks. The main differences are the presence of custom protocols, embedded systems, and lack of formal security programs to address the gaps created by two-way data communication networks. This talk will show the most common attacks which our team currently uses to gain access and control over the networks and systems we test. More importantly, we will discuss the “top 10” things an organization can do to mitigate, remediate, and have active visibility into critical systems.

Slide Griffin - Practical Attacks and Mitigations

Slide Griffin - Practical Attacks and Mitigations

Slide Griffin - Practical Attacks and Mitigations

Innovative and disruptive technologies are enhancing and invading our traditional industrial business model. Future organizations will need more data to operate efficiently and succeed in the brave new interconnected world. The diversity of new technologies and data will fuel more diversity in business opportunity. Everyone expects more OT, more IoT, and more IT – and all of it is supposed to be highly reliable and secure. These factors (and more) lead to a landscape shift for the mission-critical cybersecurity risk profile. In this session, hear ways to recognize the problems and gain some clarity on possible solutions through historic lessons, made up words, and practical front-line experience.

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Almost 70 years since the first computer bug was discovered, there has been decades of research done on Information Security theory and practice. Yet, despite vast amounts of money being spent, innumerable academic papers, mainstream media obsession, and entire industries being formed, we are left with the impression that the risk is growing, not receding. Why? Some argue a lack of data, but data clearly exists. We’re likely generating it, in some areas, faster than humans will ever be able to process it. Perhaps, after all of this effort, we’ve managed to box ourselves into metaphors and first principles that might be inappropriately constraining how we think about “Information Security Risk”. In fact, it’s worth noting that we can’t even agree if there is a space between “Cyber” and “Security” when it’s written out. This talk will take an anecdotal look at “Information Security Risk”, “What IS Cyber Security?”, and use that perspective to suggest areas of research that are either lacking or should be made more accessible to the markets, industries, and individuals driving risk management change. In an industry filled with data, perhaps an examination of empty space might be helpful.

Jack Whitsitt - Yours, Anecdotally

Jack Whitsitt - Yours, Anecdotally

Jack Whitsitt - Yours, Anecdotally

In our modern world, we’ve learned to take for granted the universal availability of things like running water and electricity, and more recently, the Internet. As technology progresses, we are rapidly approaching a future in which nearly everything is digitally connected to nearly everything else. At the same time, we are learning to accept that all digital devices are broken from a security perspective. How we respond and adapt to this reality could well determine whether our future is utopian or dystopian. In In this interactive session, we will explore novel avenues of attack using digital “soft-targets”, and discuss how we might hold things together in the face of persistent vulnerability.

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

The NERC CIPv5 deadline is fast approaching, and it’s not too late to be prepared. Join Mark Prince, Manager Operational Technology Fossil, from Entergy, Karl Perman, VP Member Services from EnergySec and Tim Erlin, Director from Tripwire to discuss achieving and maintaining NERC CIPv5 compliance in a fossil generation plant. We’ll cover some of the challenges that Entergy has experienced in their NERC CIPv5 compliance journey. Specifically, we will discuss configuration change management and how to leverage technologies for these requirements and consider what life would be without them.

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Regulated entities should consider the RSAW templates when preparing evidence of compliance with the NERC CIP Standards. There are a number of implicit requirements in CIP v5 which an entity needs to fulfill to be compliant, which are not specifically identified in the actual requirements. In this webinar, our experts will discuss such implicit requirements. Key learning's from this session would be: RSAW format Implicit requirements of CIP RSAWs Leveraging technology for RSAW management

Explore the Implicit Requirements of the NERC CIP RSAWs

Explore the Implicit Requirements of the NERC CIP RSAWs

Explore the Implicit Requirements of the NERC CIP RSAWs

Presenter: Mikael Vingaard, EnergiNet.dk The goal of having a Honeypot (a fake ‘vulnerable’ IT-system/ service) is to learn more about your attackers and the methods they will use to breach your ICS/SCADA systems – but how can the Energy Sector actual benefit from using a Honeypot? The Danish information security researcher, Mikael Vingaard has taken various free open source software to deploy ICS/SCADA Honeypot systems, and will share his experiences from the research and present interesting findings from the collected informations. The talk will be discuss the pros and cons of honeypots, how to use honeypots as an early-warning system and add some interesting points seen from the energy sector of using Honeypot systems. The presentation will showcase that gaining access to actual ICS threat intelligence can be done – even in budget constrained organizations.

Please, Come and Hack my SCADA System!

Please, Come and Hack my SCADA System!

Please, Come and Hack my SCADA System!

Presenter: Mike Firstenberg, Waterfall Security Solutions NIST, NERC CIP, the ISA/IEC and other authorities are adjusting their advice for secure industrial networks to include at least one layer of hardware-enforced unidirectional communications. Many security practitioners are familiar with specific applications of Unidirectional Security Gateway technology, but fewer have seen how widely the technology is being deployed throughout the electric sector. Join us to review comprehensive unidirectional network architectures for generation, transmission, distribution, high-voltage substations, and control centers/TSO’s/balancing authorities. In each vertical we review use cases, examine NERC CIP compliance implications and cost savings, and compare the strength of each architecture with legacy firewall-based designs.

Unidirectional Network Architectures

Unidirectional Network Architectures

Unidirectional Network Architectures

Presenter: Joseph Loomis, Southwest Research Institute (SwRI) Asset Owners face challenges as they strive towards implementing the NERC-CIP V5 requirements. Meeting the requirements often require documentation and technical knowledge of how an asset operates that can only be provided by a Vendor. Vendors, likewise, may be unclear about how the NERC-CIP requirements affect them, and are unsure about how to meet the technical requirements. In this presentation we detail the lessons learned from a recent project where SwRI worked with a Vendor to determine how the requirements apply to them and what the Vendor needs to have to help support an Asset Owner in an audit.

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

Presenter: Patrick Miller, EnergySec (President Emeritis) Innovative and disruptive technologies are enhancing and invading our traditional industrial business model. Future infrastructure organizations will need more data to operate efficiently and succeed in the brave new interconnected world. The diversity of new technologies and data will fuel more diversity in business opportunity. Everyone expects more OT, more IOT, and more IT – and all of it is supposed to be highly reliable and secure. These factors (and more) lead to a landscape shift for the industrial cybersecurity risk profile. In this session, hear ways to recognize the problems and gain some clarity on possible solutions through historic lessons, made up words, and practical front-line experience.

Industrial Technology Trajectory: Running With Scissors

Industrial Technology Trajectory: Running With Scissors

Industrial Technology Trajectory: Running With Scissors

Presenters: Robert Landavazo, PNM Resources and Katherine Brocklehurst, Tripwire With countless hours of work to go, PNM was far from ready for its coming audit in just 18 months. Confidence levels in its existing manual, and incomplete security controls, were at an all-time low; and the visibility into control center environments for quantifying its status and progress towards compliance was immeasurable. With Tripwire, PNM’s preparation of the looming CIPv3 audit noticeably improved. With efficient reporting and automation, PNM’s now positioned to hold itself accountable for CIP auditable compliance of more than 3,500 explicit and supporting control points, satisfying CIP-002-3, CIP-004-3, CIP-005-3, CIP-007-3 and CIP-009-3. In addition, enhanced visibility and better control gave PNM the ability to effectively communicate meaningful and measurable initiatives to executive teams – resulting in increased support for their funding needs. In this session, PNM – New Mexico’s largest electricity provider – will share a case study on its journey towards achieving continuous NERC CIP compliance despite a highly limited headcount, how it saved countless hours of labor-intensive manual effort, and the essential role that automation played in its success.

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

Presenter: David Zahn, PAS Industrial control systems represent the brass ring for hackers who want to disrupt plant operations and negatively impact safety and productivity. The problem for cybersecurity professionals is that plants have highly vulnerable proprietary control systems where configuration data is not visible via standard WMI or SNMP calls. Yet, it is this same configuration data, such as I/O cards, firmware, installed software, and more, that hackers work hard to attain as it aids them in gaining control over industrial systems within plants. As the saying goes, “you can’t manage what you can’t measure.” Taking inventory of this hidden configuration data and doing so for all control assets is difficult. Plants as a result fall short of achieving centralized, automated inventory – a cybersecurity best practice and a necessary precursor to effective change management. So how do you address change management when important security data is kept locked within each vendor’s distributed control systems, programmable logic controllers, and remote terminal units? In this session, we’ll explore the types of inventory data that comprise a best practices cyber security plan. Next, we will dive into cost effective, accurate automation opportunities for inventory discovery and maintenance of heterogeneous proprietary and non-proprietary control assets. Finally, we’ll present a case study for implementing best practices for hardening ICS cyber security and automating management of change. Agenda: Building and Maintaining an Accurate ICS Inventory Best Practices in Inventory Automation Case Study

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

Presenter: Damiano Bolzoni, SecurityMatters What if cyber attacks were not the most prominent threat to industrial networks and systems? Although malware is still a major point of interest, the sword of Damocles for industrial networks is represented by insider threats such as system misuse performed by disgruntled employees, contractors and vendors, unintentional operator mistakes, as well as network and system misconfiguration and uncontrolled configuration changes; all this could lead to the divergence or failure of critical processes. In this talk we reshape the concept of ICS security and demonstrate through case studies in different critical infrastructure sectors that the real value of industrial network monitoring goes beyond the detection of cyber attacks, but includes above all the need to maintain awareness about network and process operations, and obtain actionable intelligence that allows to preserve their overall health. We will show how the use of innovative network monitoring approaches can support security, operations, and network managers to: Gain IT visibility of OT networks and full situational awareness of the network and process Detect complex and advanced cyber attacks against industrial networks Mitigate operational mistakes and misconfiguration

Where Cyber Security Meets Operational Value

Where Cyber Security Meets Operational Value

Where Cyber Security Meets Operational Value

Presenter: Chris Sistrunk Why haven’t we seen more ICS-focused attacks? Perhaps it’s because we’re not looking for them. The current state of security in Industrial Control Systems is a widely publicized issue, but fixes to ICS security issues are long cycle, with some systems and devices that will unfortunately never have patches available. In this environment, visibility into security threats to ICS is critical, and almost all of ICS monitoring has been focused on compliance, rather than looking for indicators/evidence of compromise. The non-intrusive nature of Network Security Monitoring (NSM) is a perfect fit for ICS. This presentation looks at using NSM as part of an incident response strategy in ICS, various options for implementing NSM, and some of the capabilities that NSM can bring to an ICS cyber security program.

Where Are All The ICS Attacks?

Where Are All The ICS Attacks?

Where Are All The ICS Attacks?

After a brief introduction by Mr. Humphreys, Henry Bailey will talk a few minutes about SAP’s roadmap for utilities. This will be followed by a discussion led by Chris Humphreys about the evolutionary transition from disparate point solutions to enterprise-wide, end-to-end, Regulation Management where controls are consolidated and leveraged such that compliance is a byproduct of industry best practices. Finally, Mr. Rice and Chris Humphreys will end the hour with a presentation expanding on the concept of controls consolidation and compliance as a byproduct focused on NERC CIP Ver 3-5 and NIST transitional capabilities of Regulation Management.

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

It’s never too early to start thinking about where the standards are going and where your program should be heading. This presentation will discuss how energy organizations should consider furthering alignment to NIST 800-53 Rev 4; focusing on security maturity opportunities such as threat management; addressing third parties and vendors and developing processes to help satisfy control-based security objectives.

Industry Reliability and Security Standards Working Together

Industry Reliability and Security Standards Working Together

Industry Reliability and Security Standards Working Together

What the Department of Defense and Energy Sector Can Learn from Each Other

What the Department of Defense and Energy Sector Can Learn from Each Other

What the Department of Defense and Energy Sector Can Learn from Each Other

In July 2010, BC Hydro, the electric utility and grid operator of British Columbia began implementation of its AMI program, formally known as the Smart Meter & Infrastructure (SMI) program. The SMI program transformed BC Hydro from a traditional metering utility to a smart metering utility by implementing smart meters on the customer service points. It was the first step in the smart grid transformation. The SMI program required the introduction of many new devices and applications into BC Hydro’s infrastructure. Some of these had never been deployed before anywhere in the world. Many were field deployed, outside of BC Hydro’s physical security perimeter. The SMI Security Delivery Team was formed to deliver on these commitments and to take responsibility for the end to end security of the SMI program. The Team implemented a multi-pronged approach to securing SMI including security risk assessments, security penetration testing by the team, design reviews, whole project risk assessments and third party security penetration testing. A standards based approach was required to ground the test plan both in best practice and in a common set of principles that BC Hydro and its vendors could accept. The Advanced Metering Infrastructure (AMI) Risk Assessment document prepared by the Advanced Metering Infrastructure Security (AMI-SEC) Task Force was used as a basis for the test plan. This document has since been passed to the National Institute of Standards and Technology (NIST) Cyber Security Working Group and was integrated into NIST IR 7628. NIST IR 7628 contains a comprehensive list of possible threats to AMI systems. The program was highly successful. Test results informed BC Hydro’s deployment decisions and allowed the manufacturers to improve their products. Lessons were learned about how best to conduct third party security testing. A full lessons learned section is included in the presentation.

Third Party Security Testing for Advanced Metering Infrastructure Program

Third Party Security Testing for Advanced Metering Infrastructure Program

Third Party Security Testing for Advanced Metering Infrastructure Program

Más de EnergySec (20)

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Gary Leatherman - A Holistic Approach for Reimagining Cyber Defense

Slide Griffin - Practical Attacks and Mitigations

Slide Griffin - Practical Attacks and Mitigations

Slide Griffin - Practical Attacks and Mitigations

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Patrick Miller - Tackling Tomorrow's Biggest Cybersecurity Problems with Real...

Jack Whitsitt - Yours, Anecdotally

Jack Whitsitt - Yours, Anecdotally

Jack Whitsitt - Yours, Anecdotally

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Steve Parker - The Internet of Everything: Cyber-defense in an Age of Ubiquit...

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

Daniel Lance - What "You've Got Mail" Taught Me About Cyber Security

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Lessons Learned For NERC CIPv5 Compliance & Configuration Change Management

Explore the Implicit Requirements of the NERC CIP RSAWs

Explore the Implicit Requirements of the NERC CIP RSAWs

Explore the Implicit Requirements of the NERC CIP RSAWs

Please, Come and Hack my SCADA System!

Please, Come and Hack my SCADA System!

Please, Come and Hack my SCADA System!

Unidirectional Network Architectures

Unidirectional Network Architectures

Unidirectional Network Architectures

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

NERC CIP Version 5 and Beyond – Compliance and the Vendor’s Role

Industrial Technology Trajectory: Running With Scissors

Industrial Technology Trajectory: Running With Scissors

Industrial Technology Trajectory: Running With Scissors

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

The Path to Confident Compliance and the Transition to NERC CIP Version 5 – A...

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

ICS Cybersecurity: How to Protect the Proprietary Cyber Assets That Hackers C...

Where Cyber Security Meets Operational Value

Where Cyber Security Meets Operational Value

Where Cyber Security Meets Operational Value

Where Are All The ICS Attacks?

Where Are All The ICS Attacks?

Where Are All The ICS Attacks?

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

SAP’s Utilities Roadmap Overview, The Evolution of Regulatory Compliance and ...

Industry Reliability and Security Standards Working Together

Industry Reliability and Security Standards Working Together

Industry Reliability and Security Standards Working Together

What the Department of Defense and Energy Sector Can Learn from Each Other

What the Department of Defense and Energy Sector Can Learn from Each Other

What the Department of Defense and Energy Sector Can Learn from Each Other

Third Party Security Testing for Advanced Metering Infrastructure Program

Third Party Security Testing for Advanced Metering Infrastructure Program

Third Party Security Testing for Advanced Metering Infrastructure Program

Último

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Dubai, often portrayed as a shimmering oasis in the desert, faces its own set of challenges, including the occasional threat of flooding. Despite its reputation for opulence and modernity, the emirate is not immune to the forces of nature. In recent years, Dubai has experienced sporadic but significant floods, testing the resilience of its infrastructure and communities. Among the critical lifelines in this bustling metropolis is the Dubai International Airport, a bustling hub that connects the city to the world. This article explores the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

Exploring the Future Potential of AI-Enabled Smartphone Processors

Exploring the Future Potential of AI-Enabled Smartphone Processors

In the thrilling conclusion to 2023, ransomware groups had a banner year, really outdoing themselves in the "make everyone's life miserable" department. LockBit 3.0 took gold in the hacking olympics, followed by the plucky upstarts Clop and ALPHV/BlackCat. Apparently, 48% of organizations were feeling left out and decided to get in on the cyber attack action. Business services won the "most likely to get digitally mugged" award, with education and retail nipping at their heels. Hackers expanded their repertoire beyond boring old encryption to the much more exciting world of extortion. The US, UK and Canada took top honors in the "countries most likely to pay up" category. Bitcoins were the currency of choice for discerning hackers, because who doesn't love untraceable money?

Ransomware_Q4_2023. The report. [EN].pdf

Ransomware_Q4_2023. The report. [EN].pdf

Ransomware_Q4_2023. The report. [EN].pdf

Overkill Security

The action of the next cyber saga takes place in the mystical lands of the Asia-Pacific region, where the main characters began their digital activities in the middle of 2021 and qualitatively strengthened it in 2022. Corporate espionage, document theft, audio recordings, and data leaks from messaging platforms were all a matter of one day for Dark Pink. Their geographical focus may have started in the Asia-Pacific region, but their ambitions knew no bounds, targeting a European government ministry in a bold move to expand their portfolio. Their victim profile was as diverse as a UN meeting, targeting military organizations, government agencies, and even a religious organization. Because discrimination is not a fashionable agenda. In the world of cybercrime, they serve as a reminder that sometimes the most serious threats come in the most unassuming packages with a pink bow.

Cyberprint. Dark Pink Apt Group [EN].pdf

Cyberprint. Dark Pink Apt Group [EN].pdf

Cyberprint. Dark Pink Apt Group [EN].pdf

Overkill Security

Webinar Recording: https://www.panagenda.com/webinars/why-teams-call-analytics-is-critical-to-your-entire-business Nothing is as frustrating and noticeable as being in an important call and being unable to see or hear the other person. Not surprising then, that issues with Teams calls are among the most common problems users call their helpdesk for. Having in depth insight into everything relevant going on at the user’s device, local network, ISP and Microsoft itself during the call is crucial for good Microsoft Teams Call quality support. To ensure a quick and adequate solution and to ensure your users get the most out of their Microsoft 365. But did you know that ‘bad calls’ are also an excellent indicator of other problems arising? Precisely because it is so noticeable!? Like the canary in the mine, bad calls can be early indicators of problems. Problems that might otherwise not have been noticed for a while but can have a big impact on productivity and satisfaction. Join this session by Christoph Adler to learn how true Microsoft Teams call quality analytics helped other organizations troubleshoot bad calls and identify and fix problems that impacted Teams calls or the use of Microsoft365 in general. See what it can do to keep your users happy and productive! In this session we will cover - Why CQD data alone is not enough to troubleshoot call problems - The importance of attributing call problems to the right call participant - What call quality analytics can do to help you quickly find, fix-, and prevent problems - Why having retrospective detailed insights matters - Real life examples of how others have used Microsoft Teams call quality monitoring to problem shoot problems with their ISP, network, device health and more.

Why Teams call analytics are critical to your entire business

Why Teams call analytics are critical to your entire business

Why Teams call analytics are critical to your entire business

Following the popularity of “Cloud Revolution: Exploring the New Wave of Serverless Spatial Data,” we’re thrilled to announce this much-anticipated encore webinar. In this sequel, we’ll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you’re building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

The microservices honeymoon is over. When starting a new project or revamping a legacy monolith, teams started looking for alternatives to microservices. The Modular Monolith, or 'Modulith', is an architecture that reaps the benefits of (vertical) functional decoupling without the high costs associated with separate deployments. This talk will delve into the advantages and challenges of this progressive architecture, beginning with exploring the concept of a 'module', its internal structure, public API, and inter-module communication patterns. Supported by spring-modulith, the talk provides practical guidance on addressing the main challenges of a Modultith Architecture: finding and guarding module boundaries, data decoupling, and integration module-testing. You should not miss this talk if you are a software architect or tech lead seeking practical, scalable solutions. About the author With two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

Accelerating FinTech Innovation: Unleashing API Economy and GenAI Vasa Krishnan, Chief Technology Officer - FinResults Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Dubai, known for its towering skyscrapers, luxurious lifestyle, and relentless pursuit of innovation, often finds itself in the global spotlight. However, amidst the glitz and glamour, the emirate faces its own set of challenges, including the occasional threat of flooding. In recent years, Dubai has experienced sporadic but significant floods, disrupting normalcy and posing unique challenges to its infrastructure. Among the critical nodes in this bustling metropolis is the Dubai International Airport, a vital hub connecting the world. This article delves into the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

The Digital Insurer

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

Último (20)

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Exploring the Future Potential of AI-Enabled Smartphone Processors

Exploring the Future Potential of AI-Enabled Smartphone Processors

Exploring the Future Potential of AI-Enabled Smartphone Processors

Ransomware_Q4_2023. The report. [EN].pdf

Ransomware_Q4_2023. The report. [EN].pdf

Ransomware_Q4_2023. The report. [EN].pdf

Cyberprint. Dark Pink Apt Group [EN].pdf

Cyberprint. Dark Pink Apt Group [EN].pdf

Cyberprint. Dark Pink Apt Group [EN].pdf

Why Teams call analytics are critical to your entire business

Why Teams call analytics are critical to your entire business

Why Teams call analytics are critical to your entire business

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays New York 2024 - The value of a flexible API Management solution for O...

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

How to Avoid the Next STUXNET In Your Control Systems

1. Metropolitan Solutions Conference | Security and Reliability for Urban Infrastructures | San Jose, CA | November 6 2012

2. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

3. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

4. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

5. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

6. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

7. Metropolitan Solutions Conference | San Jose, CA | November 6 2012

8. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

9. phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec

10. Credits Presentation by Patrick C Miller, President and CEO, EnergySec, patrick.miller@energysec.org Slide 1 photo by OiMax, creative commons license http://www.flikr.com/photos/72398314@N00 Slide 2 photo by alainv4, creative commons license http://www.flikr.com/photos/12236584@N00 Slide 3 photo by _Geronimo_, creative commons license http://www.flikr.com/photos/90313537@N00 Slide 4 photo by Kitty Terwolbeck, creative commons license http://www.flikr.com/photos/59800091@N04 Slide 5 photo by ShapeThings, creative commons license http://www.flikr.com/photos/84579440@N00 Slide 6 photo by jculverhouse, creative commons license http://www.flikr.com/photos/26615819@N07 Slide 7 photo by nickwheeleroz, creative commons license http://www.flikr.com/photos/7762644@N04 Slide 8 photo by norsez, creative commons license http://www.flikr.com/photos/42918851@N00 Slide 9 photo by Muffet, creative commons license http://www.flikr.com/photos/53133240@N00 Presented at Santa Clara Convention Center, Great American Ballroom, 5001 Great America Pkwy., Santa Clara, CA 95054 Made with HaikuDeck and Microsoft PowerPoint phone: 1-877-267-4732 | web: www.energysec.org | email: info@energysec.org | twitter: @energysec