I3P Security Forum

I3P Security Forum
November 10, 2008
Omni Houston Hotel
Houston, Texas
12:00 PM - 5:00 PM *

* Followed by the 3rd Annual IT Security Conference

I3P, the Institute for Information Infrastructure Protection and API are pleased to present the I3P Security Forum. The I3P is a consortium of experts identifying and mitigating threats against the US information infrastructure.

This optional free half day forum is limited to 40 people. To register, you must also register for the 3rd Annual IT Security Conference, November 11-12, 2008. You may register for the 3rd Annual IT Security Conference here.

About the I3P Security Forum:

The I3P Control System Security Awareness and Education Course:
"Connecting the Business and Control Systems Networks"

The I3P will again kick off the API IT Security Conference with a training session on process control systems security. The topic of this year’s training session, Connecting Business and Control Systems Networks, will address the challenges, realities and business and operational needs associated with interfacing these two architectures.

The session—presented by I3P and Sandia National Laboratories—includes presentations, discussion groups and hands-on test bed explorations.

Who Should Attend?

Anyone registered for the API IT Security Conference, including control system engineers, managers, IT staff auditors, operational and financial staff.

Topics include:

An Overview of the Challenge: what makes this a hard problem?
Strategies for Linking Networks without Compromising Security
Useful Technologies for When an Air Gap Just Isn't Possible
Possible Solutions: Why a Comprehensive Approach Is the Best Option

Why Attend?

This session will be an important opportunity to learn more about connected networks: why they are increasingly necessary, why they pose difficult security challenges and what can be done to improve their security.

Attendees will learn both technical and applied strategies for securely linking their networks and be introduced to such resources as the latest version of API standard 1164, which includes diagrams of secure architectures. Attendees will also participate in a hands-on activity, involving Sandia’s test bed, that will let them execute an attack on a process control system via a connected business network and then test some mitigative strategies.

Registration will open at 11:30 am. Lunch will be provided.

Useful Links:
www.sandia.gov
www.thei3p.org