Infosec 2024: My Experience as an Operational Technology Security Expert

Infosecurity Europe 2024 was a captivating exploration into the cutting-edge of cybersecurity, where the most recent advancements, particularly in artificial intelligence, took centre stage. Along with three other members of CGI Netherlands, I attended the event over three days from 4-6 June 2024.

As an Operational Technology (OT) Security expert, I was keen to explore how the current technologies and trends are transforming the industry for both IT and OT.

The event, held at ExCeL London, felt like stepping into a future-tech arena where technology, security, and innovation all came together. It was a first-time experience for me at such a large-scale cybersecurity event, featuring roughly 250 expert speakers and nearly 400 exhibitors.

We connected with professionals from various industries, tech aficionados and cybersecurity gurus, all impatient to discover the latest innovations. The event's organisation was near flawless with clear signage and well-marked zones for diversified cybersecurity domains, such as Innovation Showcase, Strategy Talks, Insight Stage and a comprehensive area for interactive Security Workshops.

We split up to attend sessions of our choosing, reconvening at intervals to exchange ideas and, of course, grab a bite to eat from the food trucks on the show floor!

Although there wasn’t a specific zone for OT, I was delighted to find exhibitors showcasing solutions designed to safeguard industrial control systems and critical infrastructure against cyber attacks. One such solution was a lightweight backup device for OT endpoints, which this vendor claimed could fully restore systems in 30 seconds after an attack.

Another exhibitor developed network taps and data diodes that could enhance existing OT network monitoring systems, providing maximised network visibility. As this vendor has teamed up with one of our network monitoring partners, I've invited them to give us a demo on their products and solutions in our Bi-Weekly OT Dream Call – something I’m really looking forward to.

The potential of AI to overhaul the cybersecurity landscape was evident, with many companies showcasing their AI-driven cybersecurity solutions.

Some significant innovations include AI-driven endpoint protection with proactive cybersecurity and predictive threat hunting. All four of us attended an intriguing keynote session titled “Wading through AI Overload” where a Senior Security Risk Analyst, a Generative AI and Deepfake Expert, and a CEO explored the opportunities and threats of AI and how to cope with the FOMO haste.

I absorbed this information and have already dissected it with my own team over a ‘Lunch & Learn’ session, sparking insightful discussions.

In OT security, industrial AI is slowly but surely transforming the landscape by enabling real-time anomaly detection and predictive maintenance. This could significantly bolster the protection of critical infrastructures like power grids and manufacturing plants by identifying and addressing threats before they escalate. Perhaps I'll dedicate another blog post to this topic for OT enthusiasts in the future!

Infosecurity Europe 2024 offered a wide range of panel discussions and actionable workshops, diving deep into various aspects of cybersecurity. Some more sessions that particularly inspired me with invaluable insights are:

        1. Moving to a Threat Focused Investment Strategy: How to leverage MITRE ATT&CK and Adversary Threat Intelligence to Optimise Your Spend

How leveraging adversary based frameworks such as MITRE ATT&CK can help enterprises understand how the attackers are trying to find gaps in their defences.

        2. Innovations in Biometric Security: The Future of Digital Protection

A deep dive into the latest technologies shaping the future of identity verification and data protection, highlighting their applications and benefits.

        3. Good AI Gone Bad

Breaking down some key examples of techniques and capabilities that can be enabled by AI – even for malicious use in malware and ransomware.

ADVERTISEMENT

With large screens flashing everywhere, all sorts of entertaining games and challenges, massage chairs, a networking bar and a plethora of goodies and snacks to tempt participants (even cocktails and cotton candy), the event sometimes felt like a high-tech funfair. I must confess, it did raise the excitement level and contributed positively to the overall experience. After all, in our field, some diversion from the constant vigilance required is always welcome!

The entire event highlighted the significance of collaboration and knowledge sharing across different sectors, disciplines, industries and teams. Not least between IT and OT, collective efforts are paramount for advancing cybersecurity and creating solid defence mechanisms in the age of AI. Leaving the event, I felt genuinely inspired and eager to educate myself and others more on the perpetually evolving cybersecurity landscape.

Enjoyed this article? Make sure to share it!

Looking for something else?