Read any good books lately?

A few months ago, I submitted the final chapters of “Industrial Network Security, 3rd Edition” to my publisher, and the emotions are hard to describe.? The process of updating a book that was last updated in 2015 reconnected me to this industry in a way I hadn’t expected.? I haven’t said anything publicly until now, because I wanted to wait until the process was a bit further on.? Well, I’ve started receiving layout proofs for review, so … I guess it’s time.

Thinking back to the previous editions, it’s shocking how much has changed.? When the first edition was published in 2011, there were no books about industrial cyber security on the market at all really.? When the second edition was published, the industry had already grown and matured.? I had contributed more of my own research to the growing pool of knowledge, and welcomed Joel Langill as a co-author to provide a new perspective and a wealth of industrial control knowledge.? But that was in early 2015.? Back then Stuxnet was still the only real industrial cyber attack to speak of — certainly the only one with cyber-physical consequences.? Later that same year, things changed when an attack on Ukraine’s power grid began what came to be a regular drumbeat of cyber-physical attacks that have been reverberating around the world ever since, like drums echoing from deep within the mines of Moria.

My, how the world has changed.

Anyone who has written a book while working full time knows how much time and effort that takes away from your personal life.? While that burden hasn’t been completely lifted (there are still rounds of editing ahead), it is still a relief to have the bulk of the work done. ? I feel that this is an important enough milestone to 1) tell everyone about it, and 2) start preemptively thanking everyone who helped (whether they realized it or not).

I’ll start by thanking everyone who has contributed to the betterment of industrial cybersecurity in the past decade.? Sinclair Koelemij , Bradford Hegrat , Clint Bodungen , Robert M. Lee , Anton Chuvakin , Don C. Weber , Jason Larsen , Ralph Langner , and so many more from organizations such as Mandiant, ESET, Booze Allen, and of course Honeywell ?— your books, essays, presentations, and videos provided a wealth of material to draw upon.? Awareness of industrial cyber security has skyrocketed.? Can you believe that a topic that litterally got laughed at as recently as 2010 now has an entire track devoted to it at Black Hat?? I want to thank you all.? Some of your work is likely cited within this new edition.

Of course I want to especially thank 霍尼韦尔 , who allowed me to pursue this undertaking.? I’ve been with them for almost 10 years now, and a lot of the research I've been able to contribute to the protection of our industrial operators and critical infrastructure during that time is because of their dedication to the same cause.

Finally, to my fellow authors of industrial cybersecurity books, I want thank you especially for putting in the work to help the cause.? I view you as colleagues (and some of you as friends) but never as competitors.? The industry needs awareness and it needs broad perspectives.? I recommend your books almost as much as my own, and I've bought them all. I hope to encourage new authors to continue the trend.? There’s so much to talk about … I implore you to open up a laptop and start writing.

The third edition of Industrial Network Security will begin shipping on the Ides of April, 2024. Preorders are available now at amazon.?