I3P Sponsored Workshops

2007 Workshop on the Economics of Information Security
June 7- 8, 2007
The Heinz School and CyLab at Carnegie Mellon University
Pittsburgh, PA (USA

 

Critical Infrastructure Protection Workshop (IFIP)
(Program and Presentations)
Hanover, NH March 19-21, 2007

I3P Control Systems Security Workshop
Houston, TX, February 15-16, 2007

Building on the success of our previous events, this I3P workshop provided an opportunity to learn about cutting-edge research results and solutions specifically developed for securing oil and gas control systems against cyber attacks. The I3P research team walked participants through an attack scenario, explained various risk factors and interdependencies, and showed how I3P security tools, technologies and metrics can help ano rganization prevent, detect and respond to an attack. 

Workshop on the Economics of Securing the Information Infrastructure
Washington DC, October 23, 2006
Please note, you leave the I3P website when you access information about this workshop. 

2nd I3P Process Control Systems Security Workshop
La Jolla, CA. June 8, 2006

As part of its major control systems security research initiative, the Institute for Information Infrastructure Protection (I3P) held its second security workshop on June 8, 2006 in conjunction with the PCSF spring meeting in La Jolla, California. The workshop was  used to showcase research results generated as part of the project and to demonstrate new tools and technologies that can be used by industry to help secure control systems in the oil and gas and other infrastructures. 

First I3P Process Control Systems Security Workshop
June 2-3, 2005

The I3P team held a PCS security workshop for control system operators, PCS and SCADA vendors and other government and industry experts at the Westin Gallery & Westin Oaks in Houston, Texas, on June 2-3, 2005.

The workshop brought together about 80 industry experts, including almost two dozen from oil and gas asset owner or operator companies, over a dozen PCS and IT vendors, as well as participants from the government, industry associations and other technical experts. Participants shared their perspectives on the most critical security challenges facing the oil and gas industry.

The input provided at the workshop helped the I3P team focus its research tasks and build strong collaborations with representatives from the oil and gas sector. Some of the results of the workshop were summarized in National Cyber Infrastructure Bulletin (link bulletin) and I3P Research Report no. 6  (link report)

Second I3P Workshop on the Economics of Information Security
March 1, 2006

The I3P team held a workshop on information security risk management and decision-making for the private sector in Raleigh-Durham, North Carolina, on March 1, 2006.

The workshop brought together almost 40 cyber security experts, primarily CISOs (chief information security officers) and senior security executives from Fortune 500 companies, to discuss enterprise-level issues surrounding the topic of embedding information security risk management into the extended enterprise.

The event was highly interactive and consisted of an executive panel discussion and moderated roundtable and breakout sessions. Participants discussed current security drivers, existing security structures and funding models, and laid out security imperatives for the next 12-18 months. For additional information about the workshop see: Embedding Information Security Risk Management into the Extended Enterprise : A Workshop on Developing a  Secure Organization

First I3P Workshop on the Economics of Information Security
December 8, 2005

The I3P held a workshop on decision-making in the private sector with regards to cyber security investments at George Mason University Law School in Arlington, Virginia, on December 8, 2005.

The event brought together about two dozen leaders in security risk and decision-making. The participants represented a wide variety of private sector companies (including software and IT firms), government agencies, associations that work closely with the private sector and the research academic community.

The workshop agenda included two keynote addresses, a presentation on the risks of intellectual property attacks, a group discussion, and a decision-making simulation exercise focused on intellectual property security risks. This decision-making game allowed players to choose between two investment alternatives, revenue enhancement or cyber security enhancement, while letting them track the consequences of their decisions. Its purpose was to generate further insight into the decision-making process. Some of the results of the workshop were captured in I3P Research Report; no. 5 (Jan. 2006) (link report)