Experiences of Securing Critical Infrastructures

This talk will summarize the conclusions from several years of working with expert groups, operators and vendors for securing critical infrastructures on technical, organizational, and educational level. We will illustrate the basic issues with case studies; in addition, mitigation measures will be discussed (covering risk assessment, security hygiene, dependency analysis and procurement), as well as looking into technical security measures and security architectures in the context of critical infrastructures. In the end, we will briefly touch on upcoming security questions including 5G, blockchains, and quantum computing.