Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Time is Running Out - Tying it All Together - What Will You Do in the Near Term?

Josh Corman

ICS / OTI Am The Cavalry53 minBeginnerOpen on YouTube ↗

Where

I Am The Cavalry
BSides Las Vegas

Duration

53 min

Makes the case for short-term steps to protect water, hospitals and emergency care from cyber disruption.

Summary

This closing session for the I Am the Cavalry track has Josh Corman recap the first year of the Undisruptible 27 pilot. He screens two short draft videos that use storytelling to show how attacks on hospitals and water systems could cut off patient care and endanger lives, not just expose records. Reactions were split: some viewers found the material too frightening, others said it was not frightening enough, which shaped how the messaging will be tailored to utility operators, city officials and emergency managers.

Corman explains what the pilot learned. Building trust with water engineers helped identify plausible physical harms, such as pressure shocks in aging pipes, and pointed toward practical fixes. A central idea is consequence-informed engineering: when a pump or ventilator fails, restoring from backups is too slow, so the priority is to prevent or absorb the hit. He gives a low-cost example, an analog pressure switch that shuts off a pump independently of networked controls. The next two-year plan targets about a dozen communities where water systems and hospitals depend on each other, with lessons meant to spread to the wider set of hospital-linked systems.

He closes by asking attendees to nominate communities, join the project's Slack, and volunteer through the cyber resilience corps. The takeaway is that concrete, near-term measures matter more than waiting for long-range policy, and that practitioners can help local leaders act before the next disruption.

Related talks