Exploiting Modern C++ is a thinking engineer’s training class on writing secure code for an insecure world. This class takes a practical approach to software security. We’ll go beyond the conventional wisdom of letting the…Continue Reading
Posts
Regulatory Futures: How Standards Bodies Are Responding to AI in Critical Infrastructure
This is the fifth article in the Securing the Future of Industrial Energy Production series. If you’re the CEO of an industrial production or critical infrastructure company, there’s a question you should be asking: Who, exactly,…Continue Reading
The Convergence of Physical and Cyber Security in Energy Facilities: Why Your Badge Reader Now Matters as Much as Your Firewall
This is the fourth article in the Securing the Future of Industrial Energy Production series. The breach didn’t begin with a firewall. It wasn’t a zero-day exploit or a brute-force login attempt that triggered the…Continue Reading
I Will Be Speaking At Cyber Cheyenne 2025
On October 3rd, 2025 Cyber Cheyenne will be holding its annual security conference sponsored by The Wyoming and Northern Colorado chapters of The Information Systems Security Association (ISSA). I will be giving my talk: Trust,…Continue Reading
AI vs. Air Gaps: How Secure Is “Offline” Infrastructure in the Age of Intelligence?
This is the third article in the Securing the Future of Industrial Energy Production series. “You can’t hack what you can’t reach.” Air gaps have long been the gold standard in critical infrastructure defense. A principle…Continue Reading
Resilience Engineering in the Age of AI: Designing for Fail-Safe and Fail-Secure Outcomes
This is the second article in the Securing the Future of Industrial Energy Production series. Not every failure leads to catastrophe. But every system must be built as if it could. In industrial operations, where lives,…Continue Reading
AI in Industrial Safety: The Next Frontier or a New Risk?
This is the first article in the Securing the Future of Industrial Energy Production series. Industrial facilities do not suffer from a shortage of complexity. They suffer from a shortage of visibility: of knowing when something…Continue Reading
I Will Be Speaking At Cyber Cheyenne 2024
On October 4th, 2024 Cyber Cheyenne will be holding its annual security conference sponsored by The Wyoming and Northern Colorado chapters of The Information Systems Security Association (ISSA). I will be giving two talks: Forgotten…Continue Reading
Exploiting Modern C++ YouTube Channel
I have started a new YouTube channel called Exploiting Modern C++ and have added my talks and interviews for easy access. I’m also starting a new video series by the same name. In it I’ll…Continue Reading
C++23 Gets Voted Into The Standard
This morning in Issaquah, WA the C++ ISO Standards Committee voted C++23 into the standard. This is now the 5th standard since 2011 with a new standard coming every three years. Our trains really do…Continue Reading
