Tenable Network Security Podcast - Episode 188




Tenable Network Security Podcast show

Summary: "Upgrading is Hard To Do" - It can be a really tough thing to leave your current revision of given software, operating system or hardware. However, sometimes vendors bundle features, bug fixes, and security fixes into a major upgrade. I'm a bit torn on this issue. On one hand, its great that vendors are fixing security related issues. On the other hand, its not good that we as the end user do not have a choice between features and security updates. There is likely software compatability issues that are keeping you tied to a particular operating system release. Believe me, as an OS X user I get that. I use many different software applications on OS X for video/audi editing, screen capture movie creation, still image screen capture, blog editing; this list goes on. An operating system upgrade could render any number of those applications useless, leaving me stuck not able to do my job. What can we do to help fix this problem? SCADA "Security" - I recently led a panel discussion with 4 SCADA security experts. It was a really interesting conversation. Very troubling as well. It seems that both the vendors and the consumers in the majority of cases are not incentivised by security. Cost is a major factor, even more so than other industries due to the Governmental nature of the businesses in this industry. We discussed topics such as regulations, "air gapped security", proper testing of control systems, what are your thoughts on these issues? How can Tenable products help with the assessment portion?