The Birds, the Bees, and the CVEs: Understanding the Novel Vulnerabilities in Critical Infrastructure

Presented at BSidesLV 2023, Aug. 9, 2023, 10:30 a.m. (Unknown duration)

During this talk, Iain Deason will describe the difficulties and the techniques used to understand the impact of product vulnerabilities to different sectors to critical infrastructure. When new and novel vulnerabilities are disclosed, especially in control systems and medical devices, it can be difficult for asset owners to understand the potential impacts to the larger ecosystem or the affected critical infrastructure sector. The audience can learn of different strategies that have been utilized to understand the risk with new and novel vulnerabilities and potentially a new perspective on when vulnerabilities enter the ecosystem and coordinated vulnerability disclosure.

Presenters:

• Iain Deason

Links:

• https://www.bsideslv.org/talks#PCHKRS

Similar Presentations:

• Black Hat Europe 2021 / From Coordinated Disclosure to Cooperative Vulnerability Research When Dealing with Critical Software Stacks
• Diana Initiative 2019 / Hacking Humans: Addressing Vulnerabilities in the Advancing Medical Device Landscape
• Black Hat USA 2021 / A Hole in the Tube: Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities