The third annual SCADA Security Scientific Symposium [S4] will be held on January 21 - 22, 2009 in Miami Beach, Florida. So those of you looking for an event that gets into the bits / bytes / exploits / code / protocols / statistics / mathematics and other technical detail save the date. After two years of experience and published proceedings papers, it should be clear that we are not blowing smoke on the technical rigor at S4. It was strong in 2007, even stronger in 2008, and we expect the bar to be raised further for 2009 papers.

The + relates to the addition of a one-day highly technical control system offensive security course on January 20th. This was the most frequent request from this years event. So our offensive team is developing a course that will focus on how to identify new vulns in control systems. Unlike S4, there will be some restrictions on attendance for this course and it will be limited to physical attendees. Much more detail will be forthcoming in the fall, for now just save the date if you are interested in something that goes well beyond using scanners like Nessus and exploit frameworks like Metasploit.