estimating risks with threat models.pptVIP

Estimating Risks with Threat Models Comparing Physical vs Cyber Threats to Control Systems Is the Sky Falling? Opinions diverge on hostile infrastructure risk Defenders (operators) – All is well A presenter at another conference asserted that their infrastructure was buried, ∴ safe Security experts – Bronze age is our future Physical experts blame cyber Cyber experts blame physical Lofty Goals Objectives: Hostile Risk Models Reality is too complex to understand Effective models Simplify things to a point we can understand Are complex enough to capture the key drivers Make useful predictions He