
I help security engineering grow up. CTO @admeritia, research @HSUHamburg, leader @securePLC, board member @SuK_Community, @ISA_Interchange & @KDW_NRW. Blog 👇
Germany
Joined March 2013
- Tweets1.1K
- Following733
- Followers1K
- Likes2.8K
Pinned Tweet
If we understand (ICS) security by design as integrating security into an existing engineering workflow, I expected us to end up with.....some new kind of workflow.
Well...we didn't. Here's a first intro to our security by design decisions approach.
link.medium.com/Xb2aJi5Lprb
Sarah Fluchs retweeted
The 3rd edition of the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum will be held from 22 to 23 August 2023. Stay tuned for registration details!
Sarah Fluchs retweeted
"You will always be lacking something... youre already more technical than you think, it doesn't take a dozen stickers on your laptop"
Great advice from Sarah Fluchs @admeritia
Sarah Fluchs retweeted
What is considered a 'High Consequence Event' should be a management decision, and engineers should work towards avoiding them.
- Sarah Fluchs of @admeritia at #S4x23
Sarah Fluchs retweeted
"You're a human in #ics. Don't feel like you need to be over technical to compensate, don't feel like you need you be all soft skills."
@SarahFluchs offers great advice!
@admeritia
Excellent additions for your reading lists 🤓
Sarah Fluchs retweeted
From a @SarahFluchs comment, whenever anyone asks why something is a certain way in ICS I'm just going to tap on this sticker...😂
Everyone wants #SecurityByDesign...but what does that mean? And how do you do it?
Full research paper at
ResearchGate: researchgate.net/publication…
IEEE Xplore: ieeexplore.ieee.org/document…
Sarah Fluchs retweeted
One of my fav 🎙 podcasts 🎙 of the year:
@SarahFluchs of the @securePLC coding practices list. okt.to/XcmE9n
@Claroty
Yes, so much to be thankful for in the OT community indeed!
Thanks for the shoutout @ron_fab.
Shoutz to
@INL
@andybochman & #SarahFreeman
@NRECANews
@digitalbond
@SarahFluchs / @ControlsCyber
@insaneforensics / @dan_gunter
So thankful for you and the community in 2022 and beyond!
Sarah Fluchs retweeted
hi #cybersec bubble, welche cybersec Frauen* sollte man in DE unbedingt auf dem Schirm haben? Lasst mir mal Eure Empfehlungen als reply da, mit u ohne twitter bzw mastodon handle! #followerpower
Germany removed the president of Federal Office for Information Security @BSI_Bund: Here's what you need to know. #cyberclown
More importantly, we need to talk about hype mechanisms that turn critical infrastructure security into a political battle term.
medium.com/@fluchsfriction/c…
Inhaltlich ist zu #Cyberclown alles gesagt. Aber nun, da "Security kritischer Infrastrukturen" zum politischen Kampfbegriff wird, müssen wir darüber reden, wie wir öffentlich über Cybersecurity reden:
medium.com/@fluchsfriction/c…
Sarah Fluchs retweeted
15 years ago my PhD advisor taught me One Weird Trick for editing your own writing. Edit **back to front**, paragraph by paragraph. I still use it and it still surprises me how well it works. When I get my students to do it, it often blows their minds. Try it!
Sarah Fluchs retweeted
🎙 @SarahFluchs, CTO @admeritia, joins the Aperture podcast to discuss the Top 20 Secure PLC Coding Practices list, how engineers are using it to improve PLC security, and more! @Mike_Mimoso
Listen: okt.to/XcmE9n
Download the list @securePLC: okt.to/p0EFP2
Sarah Fluchs retweeted
How Bezos makes decisions:
Is it a one-way or two-way door?
One-way = can't reverse so make them slowly and carefully
Two-way = reversible so make them fast
Most big companies die by using the slow one-way door process for a two-way decision.
(2015)
Top20 now have an interactive dashboard!🥳
You know you have an active community around @securePLC when one of its members (Dan Ricci) reaches out saying "hey, I know a better way of viewing the Top 20 than in a pdf doc" - and already has it implemented.
plc-security.com
This was fun. @Mike_Mimoso asked some tough questions so you can hear me thinking aloud 🙈
Been looking forward to publishing this podcast for a while: An excellent conversation with @SarahFluchs as we revisit the @securePLC coding practices list one year in.
Check it out here: claroty.com/resources/podcas…
Sarah Fluchs retweeted
Been looking forward to publishing this podcast for a while: An excellent conversation with @SarahFluchs as we revisit the @securePLC coding practices list one year in.
Check it out here: claroty.com/resources/podcas…





















