BY INVITATION ONLY

 

2023 North American
Critical Infrastructure Transportation
Cybersecurity Consortium
October 30 - 31, 2023
2 Broadway, New York City

About

 

Collaborate

Knowledge Sharing

Standards


This two-day event is where cybersecurity industry leaders and experts from the transportation sector come together to share insights, knowledge, and experiences.  Our participants include the following:

  • Critical infrastructure partners
  • Public transportation entities
  • US Regulating Entities
  • Law Enforcement
  • Policy Makers

This year’s theme is to discuss solutions and case studies to complex rail infrastructure problems within the operational technologies area, such as:

  • Tools, Technologies, and Processes to improve Visibility and Threat Detection in the OT environment
  • Zero Trust in the Public Transportation Sector
  • Implementing two-factor authentication on operational systems
  • Securing rail and bus systems: Frameworks for hardening OT systems and OT assets
  • Anatomy of a cyber-attack:  Hacking demos exposing weaknesses in OT assets
  • Building an Identity and Privilege Access Program in OT

Agenda

 

Banner

Day One: Monday, October 30

8:00 am - 9:00 am Check-in and Breakfast
9:00 am - 9:15 am Welcome and Opening Remarks
9:15 am - 10:00 am Opening Keynote - Sonya Proctor, TSA Assistant Administrator for Surface Operations
10:00 am - 10:30 am Threat Briefing - Brian Kaiser and Gabrielle Ma, FBI
10:30 am - 11:00 am Guest Keynote - Joseph P. DeLorenzo, FTA Associate Administrator for Transit Safety and Oversight and Chief Safety Officer
11:00 am - 11:10 am MORNING BREAK
11:10 am - 11:50 am Zero Trust in the Public Transportation Sector - Matthew Rogers, CISA
11:50 am - 12:30 pm Case Study: Enhancing OT Security and Examples of Security Controls - British Columbia Rapid Transit Company (BCRTC)
12:30 pm - 1:30 pm LUNCH
1:30 pm - 2:00 pm Guest Speaker - Carolyn Hayward-Williams, FRA Director Office of Railroad Systems and Technology
2:00 pm - 2:45 pm Panel Discussion: Maturing Cybersecurity in Legacy Infrastructure for Rail and Transit Sector
2:45 pm - 3:30 pm From Failures to Fortification: Threat-Informed Approach for Protecting Railroad Systems - MITRE
3:30 pm - 3:40 pm AFTERNOON BREAK
3:40 pm - 4:20 pm Case Study: Securing a Legacy Positive Train Control (PTC) System - Systra
4:20 pm - 5:00 pm Case Study: Utilizing Configuration Management for Securing Rail Transit Systems - AECOM
5:00 pm Day One Closing Remarks
Banner

Day Two: Tuesday, October 31

8:00 am - 9:00 am Check-in and Breakfast
9:00 am - 9:30 am Day Two Opening Remarks
9:30 am - 10:15 am Opening Keynote - Eric Goldstein, CISA Executive Assistant Director
10:15 am - 11:00 am Recount of BART's Defenses Against Advanced Persistent Threats - BART
11:00 am - 11:10 am MORNING BREAK
11:10 am - 11:55 am Case Study: Cyberattacks on Radio Communications - Jacobs
11:55 am - 12:45 pm Case Study: Legacy Infrastructure Protection for OT Assets and Safety Equipment - Alstom
12:45 pm - 1:30 pm LUNCH
1:30 pm - 1:45 pm CTO and CIO concerns and approach to Operational Technology Management, Raf Portnoy, CTO
1:45 pm - 2:30 pm Case Study: Hardening Solutions for Legacy OT Systems - Thales
2:30 pm - 2:40 pm AFTERNOON BREAK
2:40 pm - 3:20 pm Case Study: Administering OT Cybersecurity in Large Critical Infrastructure Organization - Port Authority of NY and NJ (PANYNJ)
3:20 pm - 4:00 pm Case Study: OT Threat Assessment for Bus Technologies - New Flyer
4:00 pm Day Two Closing Remarks

Speakers

 

Eric Goldstein
Eric Goldstein
Executive Assistant Director for the Cybersecurity and Infrastructure Security Agency (CISA)
Janno Lieber
Janno Lieber
Chair and CEO
Metropolitan Transportation Authority (MTA)
Sonya T. Proctor
Sonya T. Proctor
Assistant Administrator for Surface Operations of the Transportation Security Administration (TSA)
Carolyn Hayward-Williams
Carolyn Hayward-Williams
Director, Office of Railroad Systems and Technology Federal Railroad Administration (FRA)
Joseph P. DeLorenzo
Joseph P. DeLorenzo
Associate Administrator for Transit Safety and Oversight and Chief Safety Officer
Tariq Habib
Tariq Habib
Chief Cybersecurity Officer.
Metropolitan Transportation Authority (MTA)

Presenters

 

Aaron Amorim
Aaron Amorim
Cyber/IT Architect
Thales
Philippe Ayrault, PhD
Philippe Ayrault, PhD
Systems Safety/System Assurance Manager
Systra USA
George Fosu
George Fosu
AECOM Cybersecurity Project Manager

Jessie Gill
Jessie Gill
Manager of Systems Technical Services at British Columbia Rapid Transit
Adi Karisik
Adi Karisik
Global Tech Principal/Operational Technology Cybersecurity Jacobs
Scott Margolis
Scott Margolis
Chief Information Security Officer
Massachusetts Bay Transportation Authority

Mathew Rogers
Mathew Rogers, PhD, CISA
ICS Cyber Security Expert
Office of the Technical Director at CISA

Nik Urlaub
Nik Urlaub
Critical Infrastructure Resiliency and Safety Capability Area Lead
MITRE Labs
Brydon Owen
Brydon Owen
Director, Electrical Engineering
New Flyer

Mical Solomon
Mical Solomon
Acting Chief Information Security Officer at the Port Authority of NY & NJ

Eddy Thesee
Eddy Thesee
Vice President, Products & Solutions Cybersecurity
Alstom
Dennis Wong, PE
Dennis Wong, PE
Systra USA


Participants, Suppliers & Integrators

Participants

APTA (American Public Transportation Association)
Capital Metropolitan Transportation Authority
Capital Metropolitan Transportation Authority (Austin, Texas)
Central New York Regional Transportation Authority (CENTRO)
Central New York Regional Transportation Authority (CENTRO)
Chicago CTA
Chicago Transit Authority
(Chicago)
Dallas Area Rapid Transit (DART)
Dallas Area Rapid Transit (DART)

Houston Metro - MTA of Harris County
Metropolitan Transit Authority of Harris County (Houston, TX)
LA Metro (Los Angeles, CA)
Los Angeles County Metropolitan Transportation Authority
(Los Angeles CA)
Massachusetts Bay Transportation Authority (Boston, MA)
Massachusetts Bay Transportation Authority (Boston, MA)

Metropolitan Atlanta Rapid Transit Authority (Atlanta, GA)
Metropolitan Atlanta Rapid Transit Authority (Atlanta, GA)

METRA (Chicago Commuter RR)
METRA (Chicago Commuter RR)


Mitre


NJ Transit
New Jersey Transit
(New Jersey)

OCTA
Orange County Transportation Authority
(Southern CA)
Port Authority of NY NJ
Port Authority of New York and
New Jersey

Rochester-Genesee Regional Transportation Authority
Rochester-Genesee Regional Transportation Authority (New York)

Société de transport de Montréal (Canada)
Société de transport de Montréal (Canada)

Translink (British Colombia, Canada)
Translink
(British Colombia, Canada)

TriMet (Portland, OR)
Tri-County Metropolitan
(Portland, OR)

Utah Transit Authority (Ride Utah)
Utah Transit Authority (Ride Utah)


Suppliers

Alstrom
Hitachi
Hitachi
Kawasaki
Kawasaki
Mitsubishi
New Flyer
Nova Bus
Schneider Electric
Siemens
Siemens
Thales
Thales


Integrators

AECOM
Jacobs
Parsons
Systra
$(document).ready(function() { $('body').on('mouseup', function (e) { if (!$(e.target).hasClass("dropdown-menu")) { $(".dropdown-menu").each(function () { $(this).removeClass("show"); }); } }); });