On Our Worst Day: Whole-of-Nation Industrial Incident Response in the USA
summary
PIPEDREAM is a newly observed, general‑purpose industrial attack framework that targets Modbus TCP, OPC UA and CODESYS and can deny, degrade and destroy devices nationwide; CHERNOVITE is credited with building it. The US has roughly 13,368 power generation sites but only 923 ICS incident response certificate holders (94 practicing full time, 11 in leadership), so detection, data and responder scale break quickly. Useful efforts include OTEC curriculum, DOE grant‑backed visibility programs, CyberYankee exercises, ICS4ICS and Dragos OTCERT.
AI-written summary · about
chapters (11)
- 0:00Introduction and background
- 3:58Assessing national cyber resilience
- 7:13PIPEDREAM threat landscape
- 10:58Current assumptions and reality
- 13:54Workforce and resource gaps
- 16:24Data and detection challenges
- 18:34Intelligence sharing limitations
- 18:54What is working well
- 21:28Actionable recommendations
- 24:41What not to do and next steps
- 26:09Q&A and closing remarks
related talks
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
34mIs the Power Grid a Huge Cybersecurity Risk?
50mJoin the Mission to Strengthen the Industrial Ecosystem
33mCHERNOVITE and PIPEDREAM: Understanding the Latest Evolution of ICS Malware
53mThe Evolution of Industrial Cyberthreats: Year in Review Report
33mIndustroyer: biggest threat to industrial control systems since Stuxnet
32mIntelligence Sharing for Critical Infrastructure Resiliency