Davide Fauri

Automation engineer, cyber-physical security researcher, PhD in training, and I can prepare a good tiramisù :D

[Davide Fauri @davidefauri]

Unforeseen, yet absolutely unavoidable #Klimaatmars

[Davide Fauri @davidefauri]

Oh, come on, I can jump higher than tha... Okay nevermind https://t.co/1puWbxJlFm

[alex medina @mrmedina]

we dead

[Davide Fauri @davidefauri]

... I should become a Lego. https://t.co/qKxAkMthWa

[Davide Fauri @davidefauri]

I knew it! Being a scientist isn't enough 😅 https://t.co/4AgKrmqmRl

[SCADAhacker @SCADAhacker]

I foundation in engineering is critical to securing infrastructure. #NICE isn't enough! #ICSsec https://t.co/PJMGstp2T5

[Davide Fauri @davidefauri]

@SCADAhacker From an academic point of view I very much agree, it's quite difficult to hit the right multidisciplinarity AND field experience that is needed to do research on this kind of security. Maybe the coming of IoT will motivate unis to create a cyber physical security track...

[𝙶𝚊𝚕𝚕𝚊𝚐𝚑𝚎𝚛 🌻 @DanielGallagher]

This is hanging in my office and I think accurately sums up what I do each day... ¯\_(ツ)_/¯

[Dale Peterson @digitalbond]

Any University teams want to compete in the S4x18 ICS CTF? Free tickets to 4 teams of 2 people, if qualified https://t.co/UD0YsRDLBW

[Shit Jokes @ShitJokes]

What's the difference between a Hippo and a Zippo?

Ones really heavy, the others a little lighter.

[NASA Goddard @NASAGoddard]

🌟 . * . 🌙
*
* . 🛰️ . ✨ *
. *
Thanks @Twitter, we can
always use more space 🚀
. . .
. * 🌏 *
🌞
* ☄️
#280characters

[Davide Fauri @davidefauri]

Specification-based anomaly detection:
"First thou pullest the Holy Pin. Then thou must count to three. [...] Four shalt thou not count, neither shalt thou count two, excepting that thou then proceedeth to three. Five is right out."
King Arthur: "Right. One... two... five."

[Davide Fauri @davidefauri]

@mcclure111 Agree on all fronts. Although I come from a country that tried to blame scientists for earthquakes, so having a gov is not the same as the gov listening to the experts... 😅 but I see your point.

[Davide Fauri @davidefauri]

So, liability is the primary factor when deciding how an AI will make decisions: not "is it good" but "will I get the blame?" 😂 https://t.co/8s4SGTM81M

[@[email protected] @lworonowicz]

I feel like I killed a family dog - had to decommison an old #Solaris server with uptime of 6519 days.

[Davide Fauri @davidefauri]

@jfslowik Yes, I agree. Right now I believe the grid is still too "old school" to fall for that. But the smarter it gets...

[Davide Fauri @davidefauri]

@jfslowik Solar% will be a reality anyway, let's see about vulns. Thanks for keeping my paranoia down, btw, I still fall to FUD from time to time. :D

[Davide Fauri @davidefauri]

@jfslowik And most importantly, it doesn't need to be standalone, coordination can be used to magnify a short term attack, like a blown up substation

[Davide Fauri @davidefauri]

@jfslowik It doesn't take much 2 destabilize the frequency in the energy grid. Change the firmware, set an activation condition, and all act in unison

[Davide Fauri @davidefauri]

@jfslowik I dunno, looking at stuff like https://t.co/4qsqW68YQq (esp. vendor response) makes me think otherwise: hope 4 the best, prepare 4 the worst

[Davide Fauri @davidefauri]

I'm thinking that access to low level data means almost nothing to potential attackers without high level knowledge... Can we secure that? https://t.co/Xg1aDDT8tn

[International Society of Automation @ISA_Interchange]

PID terminology causing confusion? Definitions evolve as control technology advances & proprietary algorithms merge https://t.co/ZJFTRqdr0H