Moving away from large projects

[relemedf5w023]

Elman Beibutov was supported by Denis Batrankov, who spoke about the need for automated information security monitoring tools. He gave an example of vulnerability monitoring via an image (browser exploitation), but was surprised by the market behavior of customers: when everyone talks about DLP, they buy DLP, when they talk about SIEM, they buy SIEM, similarly for SOC, etc.

Aand returning to the topic of information security trends, Vadim Podolny, switzerland whatsapp data technical director of Rusatom-ASU, expressed doubts about the reality of the publicly disclosed external attacks on APCS (including the notorious Stuxnet, which, according to the speaker, was simply a "scapegoat" due to the crooked hands of the operators of uranium enrichment centrifuges), and also expressed approval of the media support for the topic of cybersecurity, because

it is media attention that helps many enterprises implement the principles of secure by design, SDLC (software development lifecycle) and improving the quality of software. The expert mentioned two non-public attacks - an artificial head-on collision of two trains through hacking Bombardier controllers ( perhaps this is why Bombardier Transportation (Signal) later became one of the first public cases of APCS protection in Russia. - author's note ) and the shutdown of a nuclear reactor at one of the NPPs due to a DoS attack.