Apropos of the ongoing discussion on the SCADA list about the need to have domain expertise when you are working in cybersecurity, here's a press release from MU Security...
Mu Security Grows Advisory Board Expertise in Critical Infrastructure and Enterprise Security Architectures
Addition of Byres Security CTO Eric Byres and Neohapsis CTO Greg Shipley Complements Existing Board's Military, Web Application and Software Development Experience
Sunnyvale, Calif. - December 4, 2007 - Mu Security, a pioneer in the new security analyzer market, today expands its Advisory Board with the appointment of Byres Security CTO Eric Byres and Neohapsis CTO Greg Shipley. Byres and Shipley are experts in their respective markets"”critical infrastructure safety and enterprise security architectures. The addition of Byres and Shipley complements current Advisory Board members: four-star retired Army Gen. Anthony Charles Zinni, College of William and Mary; Dug Song, vice president engineering at Zattoo and former chief security architect at Arbor; and Sri Reddy, vice president of engineering for edge router software development, Alcatel.
"The growing interconnected nature of existing enterprise, service provider and even vertically-specific gas, oil or manufacturing control networks presents unique problems to a widespread user base," said Ajit Sancheti, co-founder and vice president of business development at Mu Security. "Byres Security and Neohapsis are established security analysis solution providers familiar with preventing many safety, downtime or service robustness problems from occurring and causing revenue impact. Additionally, both Eric and Greg personally have established industry and customer track records of identifying customer problems proactively, developing best-practice customer installations and offering unique industry-specific insight not available anywhere else at any price."
Critical Infrastructure, Extreme Safety Requirements
Byres is recognized as one of the world's leading experts in the field of Critical Infrastructure Security. He led numerous standards including ISA SP-99 WG1, best practices and innovations for data communications/controls systems security in industrial environments. Byres Security Inc. builds on his earlier founding of the BCIT Critical Infrastructure Security Centre. His team subsequently built the center into North America's leading academic SCADA cyber-security facility. From these efforts, Byres was awarded the SANS Institute Security Leadership Award and is also the chair of the Instrumentation, Systems, and Automation Society (ISA) ISA SP-99 Security Technologies Working Group.
Byres is also the Canadian representative for IEC TC65/WG13, a standards effort focusing on an international framework for the protection of process facilities from cyber attack. He has provided testimony to the US Congress on the "Security of Industrial Control Systems in National Critical Infrastructures" and received industry recognition with an IEEE Outstanding Industry Applications Article prize and "Donald P. Eckman Education Award" as well as ISA "Keith Otto Award."
Shipley is an award-winning technologist respected for his insight into technology and product trends. He is a prolific author and contributing editor for Network Computing and frequent speaker at conferences such as the Institute for Applied Network Security, and Interop. Shipley received the prestigious Neal Award from the American Business Media for "Best Single Article." His research and writings cover evaluating, testing, and documentation of the evolution of information protection technology. Shipley's top trend coverage areas include Public Key Infrastructure (PKI), Intrusion Detection and Prevention Technology (IDS/IPS), network access control, vulnerability assessment, malware prevention, and security information management (SIM). Shipley offers Neohapsis' customers a hands-on, real-world approach and reputation for accurately predicting what will work, and what won't.
