Qualifying the critical infrastructure attack surface

Tuesday
 
26
 
November
1:35 pm
 - 
2:15 pm

Speakers

Edward Farrell

Edward Farrell

Ceo, Director
Mercury Information Security Services

Synopsis

All too often there is a critical infrastructure fixation in cyber security however a lot of the thought process in the domain is based on conjecture and what I have come to classify as “cyber security instagram modelling” as opposed to on the ground realities. I have, as part of a number of professional and personal activities, been cultivating a method for qualifying what is fact and what is fiction, and I wanted to share my experiences in generating more meaningful data to ensure meaningful decision-making processes can be taken.

This talk will build upon my other discussions in this domain including internet wide reconnaissance, current wartime events, exploring the digital landscape of urban littorals as well as threat modelling, and seek to present an analytical framework to better equip decision makers and alleviate the stress and hype that is not helping us address issues.

This talk will:

1. Take existing inputs and definitions of critical infrastructure to define a frame of reference.

2. Present research across the following domains:

a. Internet borne attack surfaces

b. Proximal attack surfaces

c. Human and social infrastructure

3. Present methods for threat modelling to equip decision makers in making decisions subsequent to the information generated.

During this talk, I will discuss existing attack surface considerations as well as new and novel proximal methods that we are not cognisant of in the Australian context.

Acknowledgement of Country

We acknowledge the traditional owners and custodians of country throughout Australia and acknowledge their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the elders past, present and emerging.

Acknowledgement of Country