Home > Utilities > UK

European Smart Grid Cyber and SCADA Security

11th March to 12th March 2013, London, United Kingdom

Buy Now

Conference Buy Now ProgrammeRelated Events

Overview

Open/Close

SAVE THE DATE: EUROPEAN SMART GRID CYBER AND SCADA SECURITY LONDON MARCH 10th and 11th 2014 Rebooking now

SMi's 3rd annual European Smart Grid Cyber and SCADA Security forum will address the current threat landscape of Smart Grid, Advanced Metering Infrastructure, Industrial Control Systems and SCADA vulnerabilities. Building on the success of the past two years, we will bring Government, Industry, top research and solution providers back to London for a formal interactive two day conference and workshop.

We will be highlight critical developments, case studies, advanced persistent threats and vulnerabilities during the course of the two day conference. The forum will address not only risk management asset strategy, but also dive deeper into technical threats, current attack profiles on the rise and currently, potentially, in circulation.

NEWS AND DOWNLOADS:
Infrastructure Security Labs will be joining us from the United States, discussing Security issues of Control Systems in Water Utilities.
They offer the following information free to you:
Vulnerabilities in Wireless Water Meters
Chemical and Biological Threats against Public Water Systems

Benefits of Attending

Open/Close

Featured Speakers

Open/Close

Who Should Attend

Open/Close

Buy Now

Conference Documentation

Qty.	Details
	Single User License	£499
	Site License	£1497

Programme

Expand all Timeslots

Collapse all Timeslots

8.30		Registration & Coffee
9.00		Chairman's Opening Remarks Edward Hamilton, Senior Manager, PwC View Bio
9.10		KEYNOTE PRESENTATION: SECURING TOMORROW'S GRID - CAN IT BE DONE? Patrick Miller, President and CEO , EnergySec View Bio Technology's impact on the modern grid Threat actors: research, crime and warfare Standards, regulations and best practices The human side of the equation The road ahead
9.40		ENHANCING THE SECURITY OF SMART GRIDS – ENISA’S CONTRIBUTION Evangelos Ouzounis , Senior Expert, Network Security Policy, ENISA - European Network and Information Security Agency View Bio Recommendations on Smart Grids Security Minimum Security Measures Risks Assessment and Management of Smart Grids Certification of Smart Grids products EU US co-operation on Smart Grids
10.10		NEW FOR 2013: DEPLOYING WORLDWIDE CYBERSECURITY ON THERMAL POWER GENERATION CONTROL SYSTEMS Miguel Chavero, IT Manager in the Monitoring Diagnostic and Simulation Center, Iberdrola View Bio Iberdrola overview Iberdrola & Thermal Stations Strategy CyberSecurity’s Goal and Vision AURA Project (Cybersecurity projects examples) Conclusions
10.40		Morning Coffee
11.10		CRITICAL INFRASTRUCTURE PROTECTION IS AT THE FOREFRONT OF THE PUBLIC AND PRIVATE SECTORS Sean McGurk, Managing Principal Industrial Control Systems Cybersecurity, Verizon Business View Bio With Interdependencies of the national critical infrastructure sectors many companies are focusing on risk mitigation to prevent a cascading event Subsequently industry leaders are addressing challenges in policy, technology and procedures to reduce risk and provide a secure operational environment How technology is evolving with the use of intelligence reporting in order to enhance security As the threat landscape develops so must the capabilities of solution providers in order to counter the malicious activity
11.40		RISK MANAGEMENT FOR CRITICAL INFRASTRUCTURE Hans Baars, Senior Consultant Management and Operations Consulting , DNV Kema View Bio Making security a priority Lack of standards and the effect on investment Cyber Security and Electricity pricing- cause and effect Fostering a culture of awareness Measuring resiliency Incident response and countermeasures Technical, cultural, and political cooperation for success
12.10		PROTECTING CRITICAL NETWORKING INFRASTRUCTURE FROM CYBER ATTACKS USING UNI-DIRECTIONAL GATEWAYS Wouter Teepe, Product Manager, Fox IT View Bio What kind of CNI are we talking about and what are we trying to protect? Standardization efforts Threat Scenarios Migrating from IT defense to Industrial defense, the need for Defense in depth Implementations of cyber protection in Transport and Nuclear (Power) CNI
12.40		Networking Lunch
13.40		SCADA AND ICS SECURITY EXPERIENCES Gitte Bergknut, MU Nordic Information Security Manager, EON Sverige AB View Bio • Experiences of how to run a Cyber Security program • Business Awareness and Societal Responsibility -Compliance & Review -Training • Use of technical mitigations such as IDS in -cogeneration -hydro -heating • Results and lessons learned
14.10		CASE STUDY: Systems Engineering: A practical approach to improving reliability and security in a typical utility Steve Brunasso , Manager of Security Services, California Water and Power California Water and Power - A typical metropolitan Utility with all the same challenges - Legacy Systems - Vendor Solutions - Turn key packaged system that cant be modified Management supports a Systems Engineering approach - Providing relaible systems with high security - Focus on integrity and availability Benefits -Allows the development of a security architecture engineered into utility best solutions in a cost effective and repoducible way
14.40		NEW FOR 2013: FP7 EARLY WARNING DETECTION Corrado Leita, Project Coordinator, CRISALIS View Bio FP7 project funded by DG Enterprise called CRISALIS, CRitical Infrastructure Security AnaLysIS Project focuses: Creation of practical, short-term solutions for the protection of critical infrastructure environment from targeted attacks- primarily power grid Consortium members- Enel, Symantec, Security Matters and Alliander First deliverables of the project: Requirement study, in which we will study in depth the characteristics of the power generation and smart metering environments Identify risks and possible threat scenarios Feedback on our activity
15.10		NEW FOR 2013: ICS CYBER SECURITY IN POWER GENERATION AND FUTURE SCENARIO Daniela Pestonesi, IT and Security Systems, Enel Engineering and Research Spa View Bio Electric grid and power generation scenario in Italy Power Generation: Architecture and Frameworks Risk Analysis: Threats and impacts CI owner requirements for ICS protection Enel Cyber Security ICS Laboratory CRISALIS project participation
15.40		Afternoon Tea
16.10		ENHANCING NETWORK MONITORING AND SITUATIONAL AWARENESS IN CRITICAL INFRASTRUCTURE Damiano Bolzoni, COO, Security Matters View Bio Current approaches to network monitoring and situational awareness Strengths and shortcomings of current approaches Non-signature based approaches for improved monitoring and situational awareness Discussion of 2 use cases Damiano on behalf of the University Twente will also be our host and leader for a Post Conference workshop on March 13th on Approaches to network monitoring and situational awareness for Critical Infrastructure, not to be missed
16.40		CHALLENGES IN POWER-NETWORK SECURITY AND IT Rudolf Baumann , Chairman of the Transmission Security Cooperation, Senior Advisor Operations , swissgrid AG View Bio Updates and improvements in power-network and IT Common processes, systems and collaboration procedures Integration of system planning, operations and IT Future developments and sharing knowledge
17.10		HOW TO PROTECT YOUR CONTROL SYSTEMS AGAINST MALWARE Geir Mork, Director of Core Technology & SDK, Norman View Bio -Malware can be inserted in your control systems from many sources, ranging from USB thumb drives to your network -By using Windows based HMI or operator and engineer stations your threat surface has grown exponentially from the proprietary devices used earlier -Protection at device level and network level is necessary to maintain stability and uptime for your control system networks -Easy and simple solutions are hard to find...or are they?
17.40		PRODUCT AND SOLUTION SECURITY IN INDUSTRIAL AUTOMATION SYSTEMS Stefan Woronka, Director Industrial Security Services, Siemens AG View Bio Key elements that need to be revisited when setting up a security architecture for the industrial automation environment Best practice example based on the concept of Defense in Depth and ISA 99/IEC 62443 Measures that have been implemented within Siemens
18.10		Chairman’s Closing Remarks and Close of Day One
18.15		SMi Sponsored Drinks Reception

8.30		Registration & Coffee
9.00		Chairman's Opening Remarks Edward Hamilton, Senior Manager, PwC View Bio
9.10		SMART GRID INTEGRATES LEGACY AND NEW ICS (SCADA, DCS, PLC) SYSTEMS, DEVICES, AND APPLICATIONS Patricia Robison, Professor of Cyber Security, New York University View Bio • Smart Grid Cyber Security – Integrating legacy and new ICS enhances the grid and simultaneously increases complexity and vulnerability • Cyber Security – needs to address ICS at all levels: field devices, the device systems, the applications supporting the devices and systems, the communications/network interfacing to the devices and systems, etc. • ICS Cyber Security Controls: Technical, Physical, Administrative Risk Management – Smart Grid More challenging with increased complexity and extended systems and communications • Leverage existing ICS standards and frameworks: IEC, NIST, DOE, ISA, ISO, NERC • Smart Grid Architecture and Frameworks with ICS • Threats and Vulnerabilities • Examples of ICS systems utilized for Smart Grid : transformers, switches, inverters, DG
9.40		PROTECTING THE PRIVILEGED John Worrall , Chief Marketing Officer, Cyber Ark View Bio The challenges of energy utilities in dealing with management of their privileged administrator and shared accounts across their ICS/SCADA and smart-grid networks Securing remote interactive access into critical infrastructure and smart grids Considerations and best practices for how to secure critical infrastructure with an inside-out security approach. The ENISA (European Network and Information Security Agency) standard for Appropriate security measures for smart grids and its implication on securing privileged accounts and remote access
10.10		ENEXIS CRYPTO SERVER PROJECT Philip Westbroek, Project Manager, Enexis View Bio Enexis is a DSO with 2.6M E and 2M G customers We currently have 120k E-meters and 100k G-meters (plus an additional 25k meters from pilots) To protect the meter keys, we have implemented a cryptoserver solution The solution consists of an ATOS (Utimaco) hardware security module with software components in our EnergyICT headend system Phase 1 of this solution is live since September 22, phase 2 (completely compliant to Dutch privacy&security directives) in June 2013
10.40		Morning Coffee
11.10		LESSONS LEARNED FROM THE NEW SMART METER/GRID RISK ASSESSMENT METHODOLOGY IN THE NETHERLANDS Johan Rambi, Alliance Manager Privacy & Security, Alliander View Bio Introduction Explanation IS1 Risk Assessment methodology on Smart Meter/Grid in NL Practice on case “sector Privacy & Security AMI requirements v2.0” Lessons learned Status European standard on Smart Grid Cyber Security Next steps
11.40		THE CHALLENGES OF SECURING AND DELIVERING SMART GRID TECHNOLOGIES AND SCADA SECURITY Tapio Savunen , Director Business Development , Cassidian View Bio David Alexander, Capability Lead of ICS security , Cassidian View Bio Alternative technologies and delivering smart grids in difficult terrains (using case study examples) SecUring smart grids and SCADA systems to defend the transmission of data and communications to manage infrastructures of utilities The requirement for fully integrated, holistic and secure smart grids solutions Smart grid applications Alternative technologies and delivering smart grids in difficult terrains (using case study examples) SecUring smart grids and SCADA systems to defend the transmission of data and communications to manage infrastructures of utilities The requirement for fully integrated, holistic and secure smart grids solutions Smart grid applications
12.10		NEW FOR 2013: SECURITY ISSUES OF CONTROL SYSTEMS & WIRELESS METERS AT DRINKING WATER UTILITIES John McNabb, Principal, Infrastructure Security Labs View Bio • How do they differ from Smart energy meters? Communications infrastructure vulnerabilities of fixed and wireless • Lack of encryption • Theft • Data collection privacy • Billing
12.40		Networking Lunch
13.40		PROTECTING SMART GRID AND AMI WITH SECURITY CONVERGENCE FOR UNIFIED THREAT MANAGEMENT Jasvir Gill, Founder and CEO, Alert Enterprise Europe View Bio Encrypting meter data, deploying firewalls and creating security perimeters is not enough As new technology gets added to the grid, a more insidious risk needs to be addressed – insider threat Monitoring of the trusted resources within the company – people with access to control rooms, field supervisors with access to head-ends for meter networks The damage from a disgruntled employee or an insider with malicious intent can far exceed the network intruder Learn how large Utilities in the US are leveraging Security Convergence Solutions to aggregate cyber threats via security automation tools like SIEMs and Vulnerability Scanners and combine those with behavior analytics for Unified Threat Management to prevent complex security incidents that could lead to wide-spread outage.
14.10		TESTING, PART OF THE STRATEGY Marc Meulensteen, Business Development Manager, Spirent Communications Plc View Bio Complexity of Smart Grid networks Security Aspects of Smart Grid The need for testing How to secure the level of protection Testing, main part of a strategy Complexity of Smart Grid networks Security Aspects of Smart Grid The need for testing How to secure the level of protection Testing, main part of a strategy
14.40		NEW FOR 2013: CREATING AN APP CONNECTED TO A BACKEND SYSTEM Daniel Zajd, Senior R and D Engineer, Vattenfall A B View Bio Low awareness within the organisation about the effects of a connected app The least secure point in a network will be the target An app will be an extension of the company environment Data stored on the mobile device
15.10		Afternoon Tea
15.40		SECURING DEVICES FOR HOME AND CONTROL NETWORKS Robert Cragie, Chair, Security Task Group, Zigbee Alliance View Bio Home and Control Networks What is a Home network (HAN)? What is a Control Network? Topologies Devices Types of devices on home and control networks Distinguishing characteristics Security challenges Information Security Pillars Cryptography Public key cryptography Symmetric key cryptography Hybrid cryptography Protocol stack security Building blocks Frame security Authentication and key establishment Credentials ZigBee SEP 1.0 stack security description ZigBee SEP 2.0 stack security description
16.10		NEW FOR 2013: VULNERABILITIES IN CRITICAL INFRASTRUCTURE AND EMBEDDED DEVICES Justin Clarke, Security Researcher, Cylance View Bio Key roles of embedded devices in our every day lives Vulnerabilities in embedded system Findings and impact behind several recent SCADA vulnerabilities that had worldwide impact. Moving towards a resolution of existing vulnerabilities and avoidance of future vulnerabilities. -Education of manufacturers, end users, academia, government, and the general public. The process that occurs when end users or the general public identify vulnerabilities in critical infrastructure -What to expect -How to reduce your risk -How to leverage existing agencies -Processes to minimize your required effort
16.40		CLOSING KEYNOTE: CYBER RISKS AND INSURANCE Jacob Ingerslev, Technology E&O Leader, CNA Insurance View Bio Cyber Crime as an Industry Legal environment What is Cyber Insurance Industry specific exposures
17.10		Chairman’s Closing Remarks and Close of Day Two

Related Events

Oil & Gas Cyber Security

14th November to 15th November 2012, London, United Kingdom

Many major oil and gas companies are suffering increased amounts of cyber-attacks motivated by commercial and criminal intent. These attacks are posing a great risk to machinery, which can cost …

Read more
Border Security

27th February to 28th February 2013, Bucharest, Romania

Now entering its 6th year, our Border Security conference is the leading conference of its kind in Europe. Uniquely, the conference visits key areas in Europe where border security matters most. This …

Read more
Cyber Security for the Military and Defence Sector

19th June to 20th June 2013, London, United Kingdom

With a greater dependence on computer systems and a reliance on integrated networking, today’s armed forces are faced with an ever changing set of challenges in maintaining cyber security from …

Read more