![CWE for Zero Days - not CVE [The Industrial Security Podcast]](https://cdn-images.podbay.fm/eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1cmwiOiJodHRwczovL2Qzd281d29qdnV2N2wuY2xvdWRmcm9udC5uZXQvdF9yc3NfaXR1bmVzX3NxdWFyZV8xNDAwL2ltYWdlcy5zcHJlYWtlci5jb20vb3JpZ2luYWwvMGQzMThlZjE0YjU1ZGNlYzlmMTZkZjZjNTAyMDBlM2IuanBnIiwiZmFsbGJhY2siOiJodHRwczovL2lzMS1zc2wubXpzdGF0aWMuY29tL2ltYWdlL3RodW1iL1BvZGNhc3RzMTIzL3Y0LzQyL2YyLzBiLzQyZjIwYjc4LTRmNDctZTUxZi0wNWIwLWFkYjJjZjVjOTAxNC9temFfNTk5MzIwMTAyMzcyODc5MTYyLnBuZy82MDB4NjAwYmIuanBnIn0.hsLAurm42He48jXnw8nBAL_Jdbx_ugNFlKTEiVU3gh8.jpg?width=200&height=200)
The Mitre CWE - Common Weakness - database talks about kinds of problems that can show up in the future - future zero days - rather than CVE that talks about what vulnerabilities were discovered in the past. Susan Farrell walks us through the CWE and how both vendors and owners & operators use it.
May 8, 2024
49 min
AI is coming and industrial security is an issue. Join us as Leo Simonovich VP at Siemens Energy joins us to look at both in the context of the energy transition - burning fewer fuels to achieve the same industrial process goals.
Apr 3, 2024
46 min
How hard is it for an attacker to dig around in my network? Robin Berthier of Network Perception joins us to look at new network segmentation evaluation and visualization technology that lets us see at a glance how much trouble, or not, we're in.
Mar 12, 2024
51 min
Precision farming is heavily automated, as are the "food factories" essential to feeding the world's population. Marcus Sachs at the McCrary Institute at Auburn University joins us to look at the threats, the challenges and opportunities to secure our food supplies from cyber risk.
Feb 26, 2024
1 hr 10 min
From supply chain to Active Directory to segmentation designing security into ICS products is hard. Jake Hawkes walks us through how security gets built into AVEVA Enterprise SCADA.
Feb 12, 2024
1 hr 1 min
We have a security program, we have a risk assessment, we see gaps and we have a limited budget. How do we use that budget most effectively? Jørgen Hartig, CEO at SecuriOT joins us to look at a decision support tool to help answer the question.https://securiot.dk/securiot-irt
Jan 29, 2024
36 min
You plug in a USB drive and your laptop starts smoking - nasty. Mario Prieto Sanlés of AuthUSB joins us to look at the nastiest of USB attacks, and what we can do about them.
Jan 15, 2024
43 min
Smart meters, smart cities and the IIoT - when thousands of systems of millions of low-power devices need to talk to each other, and talk between systems, managing trust is hard. Dr. Chris Gorog of BlockFrame walks us through the problem and the work BlockFrame and the University of Colorado have been doing to solve the problem.
Jan 1, 2024
51 min
Moving from IT or engineering roles into OT security is harder than it should be. Mike Holcomb of Fluor has written eBooks & provides a newsletter to help people with that transition. In this episode, Mike reflects on his own evolution into OT security and gives advice to others looking at making the move.
Dec 12, 2023
48 min
Our enemies cooperate, and so must we. Aurelio Blanquet walks us through the activities of the European Energy ISAC, with a focus on building the trust that is essential to enabling the cooperation that we need to work together. Aurelio Blanquet - EE-ISAC Nov 21
Nov 30, 2023
45 min
Load more