DCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow
Source: YouTube · DEFCONConference · published Sep 30, 2026 · 19:13
[BLUF]
Aaron Crow argues that while adversaries leverage AI to exploit vulnerabilities in Operational Technology (OT), defenders can win by focusing on fundamental security principles like strict network segmentation and asset visibility, which remain critical regardless of AI advancements 2:59. He emphasizes that understanding the physical impact of IT decisions on OT processes is essential for effective defense.
Key Takeaways:
• AI acts as a force multiplier for both attackers and defenders, enabling faster reconnaissance and vulnerability analysis without requiring deep, specialized expertise 1:52.
• Strict network segmentation is vital; OT environments must be isolated from corporate networks and the internet to create a boundary that allows time for monitoring and response 3:01.
• Many organizations lack accurate asset inventory, leaving them vulnerable because they do not know what devices are present, their firmware versions, or their specific business functions 4:47.
• Incident response plans often fail because they exclude OT teams, leading to IT-driven remediation steps that could inadvertently disrupt critical physical processes or safety systems 5:41.
• Defenders can use AI to enhance their own defensive capabilities, such as identifying exposure via tools like Shodan, turning a threat into a proactive intelligence tool 4:22.
[Closing statement]
Ultimately, while AI changes the speed and sophistication of cyber threats, it does not eliminate the need for foundational OT security. By prioritizing segmentation, inventory accuracy, and cross-functional collaboration, organizations can effectively mitigate risks even with limited resources.
Sources:
- 0:00 Introduction of speaker Aaron Crow and the talk title.
- 1:45 Discussion on AI changing the landscape for both attackers and defenders.
- 2:59 The importance of network segmentation and isolation in OT.
- 4:47 The critical issue of unknown assets and lack of inventory in OT environments.
- 5:41 The failure of incident response plans due to lack of OT team involvement.
- 6:35 Conclusion on AI being a tool that does not invent new physical entry points.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Please join me in welcoming Aaron Crow. Today, they'll be delivering the talk titled "Adversaries Have AI, You Have Zero. Here's How You Win Anyway." So, without further ado, let's welcome Aaron and >> Thank you. Uh thank you everybody for coming today. Uh my name is Aaron Crow. Um I'm going to be talking a little bit about different things. So, I'm I'm here with ICS Village. I'm from the United States. Um I've been uh in what we call OT, critical infrastructure. So, I came up in working in power plants and and securing those things. I worked at a power company and I I had 40 power plants that I I did the OT, the technology side of of those things that made the power plants run so that electricity works, right? Um I'm also a podcast host. I I do podcast, talk about cybersecurity uh across …