Deep Dive: Case Study Responding to Intrusions into the US Electric Sector

No ratings

Presented at FirstConferenceKualaLumpur 2018 by

Mark Bristow

Jermaine Roebuck

Mark Bristow is the Deputy Division Director for Hunt and Incident Response Team (HIRT) at the National Cybersecurity and Communications Integration Center (NCCIC) within the Department of Homeland Security. Mark has been with DHS since 2008 and worked as an Incident Responder and then Chief of Incident Response and Management for Industrial Control Systems incidents under the Industrial Control Systems Cyber Emergency Response team (ICS-CERT). Mark has worked previously conducting assessments and penetration tests of industrial control systems equipment in multiple sectors with a focus on electric power generation, transmission and distribution and found his first vulnerability in ICS systems at the age of 10. Mark has a bachelor’s degree in Computer Engineering from The Pennsylvania State University.Deep dive into the details of the intrusions into US energy and other sectors in the summer of 2017. This presentation will discuss some of the key tactics techniques and procedures and insights used by threat actors against us critical infrastructure. DHS will highlight the lessons learned and how they can apply to the broader community. This presentation will also demonstrate how DHS leveraged a tool called a Tactical Threat Map to better understand this intrusion campaign.