Great episode, thanks. Defense in depth, layered security, heterogenous systems working on open standards, are all really important as the electric system continues to become more and more distributed. Security through obscurity only gets you so far.
Would love to see a follow-up episode on how this topic overlaps with a move toward layered grids like Lorenzo Kristov's work. Lots of microgrids connecting to a wider, nested network is a great way to not only define how value is delivered but also to enforce good behavior (in both directions) and limit cascading problems that might come from a security incident.
The US Grid. The United States grid. Nearly every pod for months has been all-American; nearly all American-politics. The silicon-anode story was a brief relief, at least about technology that might go outside US borders, if the American company in early stages goes somewhere.
I'm still re-upping every month, but it's on faith that you'll get back to global stories about a global problem.
Magic UDP packets exist for so many industrial devices. Sing this packet out on a network and all the devices on that network reveal themselves like pheasant driven by dogs. Ethernet/IP a common protocol has zero security by default.
Patrick is one of my favorite former regulators. He also has a reach in industry that is unmatched. Anytime you can mention Emma Stewart from INL, a bar fights, a marching band, and cyber informed engineering, you have succeeded. CI-FORTIFY from CISA is well explained at a high level, but I don’t recommend you do your own extended research on that and NERC-CIP. Well done David and Patrick.
Great episode, thanks. Defense in depth, layered security, heterogenous systems working on open standards, are all really important as the electric system continues to become more and more distributed. Security through obscurity only gets you so far.
Would love to see a follow-up episode on how this topic overlaps with a move toward layered grids like Lorenzo Kristov's work. Lots of microgrids connecting to a wider, nested network is a great way to not only define how value is delivered but also to enforce good behavior (in both directions) and limit cascading problems that might come from a security incident.
The US Grid. The United States grid. Nearly every pod for months has been all-American; nearly all American-politics. The silicon-anode story was a brief relief, at least about technology that might go outside US borders, if the American company in early stages goes somewhere.
I'm still re-upping every month, but it's on faith that you'll get back to global stories about a global problem.
Magic UDP packets exist for so many industrial devices. Sing this packet out on a network and all the devices on that network reveal themselves like pheasant driven by dogs. Ethernet/IP a common protocol has zero security by default.
Back to physics should be a requirement.
Patrick is one of my favorite former regulators. He also has a reach in industry that is unmatched. Anytime you can mention Emma Stewart from INL, a bar fights, a marching band, and cyber informed engineering, you have succeeded. CI-FORTIFY from CISA is well explained at a high level, but I don’t recommend you do your own extended research on that and NERC-CIP. Well done David and Patrick.