Is S4x20 For You?

Optimistic … Forward Looking … Creative … Driving Change

Set free a conservative, slow moving, change resistant community to discover new ideas and come up with innovative ways to use these new ideas to deploy secure, resilient and better ICS.

I’m a big fan of Seth Godin and his line, “People like us do things like this“. It’s how we think about and plan every aspect of S4.

S4x20 is for you if:

  • you believe significant improvement in the security, robustness and value of ICS and IoT can happen in years, not decades … and you want to drive that change.
  • If you are looking for bleeding edge information and new ideas in ICS security and related fields.
  • If you want to be with the best, the top talent in the world.
  • If you are tired of being viewed as overly optimistic or crazy. Or tired of being told things will never change… Or tired of the conservative, stuck in the mud thinking that can permeate the ICS world.
  • If you want to hear things 1 to 3 years before they are heard in other events, webinars, articles.
  • If you are looking to get motivated and leave an event full of new concepts to try out.

What Is S4x20?

  • It’s 3-days on 3-stages (64 sessions) of fresh, high quality ICS security content with the best speakers
  • It’s the largest gathering of ICS security talent in the world (532 at S4x19 and growing fast)
  • It’s designed in every aspect to lead to creativity and conversations
  • It has unique and numerous social events so you have time to establish and renew connections
  • It’s Miami South Beach in January

How S4 Has Changed Over 11 Years

The “people like us” that attend S4 has changed and grown since we started the event 12 years ago at S4x07. For the first five years, “people like us” were a very small community that was deep into the technical details of attacking and defending ICS. We created S4 because one of our researchers found and disclosed an ICCP stack vulnerability, and Matt couldn’t find an event where he could present it to an audience that knew what ICS was and could understand a highly technical talk.

This first group of highly technical attendees started at about 40 in the early years and has grown to ~250 in recent years. We never want to lose this group or these sessions and continue to dedicate Stage 2: Technical Deep Dives to the most advanced technical ICS security content you will see anywhere in the world. In fact we tell speakers to go deep, don’t worry about losing part of the audience. No one will complain that a Stage 2 session got too technical.

At S4x16 we moved down to the Jackie Gleason theater, and now had room for additional stages. Many of the original S4 attendees, including myself, had grown tired of solely technical content and were looking for fresh and advanced sessions and discussions on how to move OT and ICS security forward from a strategic perspective. And what to look for and drive towards in the future. The S4 Main Stage is the venue for these important discussions that go beyond bits and bytes.

A one-word description we give to S4 is “advanced”. Partially due to the S4 legacy, but even more so due to the strong desire to avoid the tired SCADASEC 101 dogma of IT is different than OT, A-I-C vs C-I-A, … and  the same ICSsec truisms repeated over and over. Don’t get us wrong. There is a huge number of people who need to learn this, and there are many great events that focus on educating this audience. It’s just not S4.


Closing this article by coming full circle, what do and don’t I mean by “people like us attend S4”.

  • All are welcome at S4. “People like us” isn’t meant to be exclusionary. Please come if you are at all interested, and you’ll find a very welcoming community.
  • We have developed ICS Security 101 content … the OnRamp Online that is included with every ticket. Use it to get up to speed quickly yourself or give it to a colleague.
  • The Monday prior to S4x20 we will be offering our 201-Level course, The Highway. Check it out.
  • “People like us do things like this” means we give a tremendous amount of thought to what an optimistic, creative, forward looking, change the future ICSsec participant wants to learn and experience. And we try to create an event and community that caters to these people in every way.
  • There are other quality ICS security events that cater to a different, more conservative and cautious groups of “people like us”. And sometimes I’ve even recommended these events in lieu of attending S4. For example, if you want to learn about the ICS culture, standard practices and mindset are, then S4 is not the best event for you.

So I hope this helps you understand if S4x20 is for you, and if it is that we see you in Miami South Beach next January 21-23. Registration will open on September 3rd, and you can see details on the tickets on this page.