Javier Calatrava

Orbisperiplo Lda. (Spain)

Safety and Cybersecurity in the Age of LLMs: Bridging the Gap Between Physical and Digital Protection

In today’s interconnected world, safety and cybersecurity are no longer separate disciplines but deeply linked domains that demand a unified approach. This presentation explores how Large Language Models (LLMs) can transform five critical areas where safety and cybersecurity converge: proactive threat detection, automated vulnerability management, simulation of attacks and failures, incident response, and education and awareness. By leveraging the unique capabilities of LLMs to process vast amounts of structured and unstructured data, organizations can achieve faster, more accurate, and context-aware solutions to modern challenges in both physical and digital realms. The first area we will examine is proactive threat detection. Traditional tools like SIEMs (Security Information and Event Management) are effective at identifying known patterns but often lack the contextual understanding required to detect sophisticated or emerging threats. LLMs, on the other hand, can analyze unstructured data such as emails, logs, and network traffic to identify anomalies that might otherwise go unnoticed. For example, an LLM can interpret the tone and content of a phishing email, flagging it as suspicious even if its metadata appears legitimate. In industrial settings, this capability extends to detecting unusual vibrations in machinery logs and correlating them with cybersecurity alerts, identifying potential sabotage before it causes harm. Next, we’ll explore how LLMs can revolutionize vulnerability management. Managing vulnerabilities is a constant challenge for security teams, who must sift through mountains of reports to prioritize risks and apply patches. LLMs can streamline this process by analyzing technical descriptions of vulnerabilities, correlating them with organizational assets, and generating actionable mitigation plans. Imagine receiving a CVE report and having your LLM assistant immediately tell you which systems are affected, how to patch them, and the associated risk level. This not only saves time but also reduces the likelihood of human error. In high-stakes environments like healthcare, an LLM could prioritize software patches that affect life-support systems over less critical updates, ensuring patient safety isn’t compromised. The third area of focus is simulating attacks and failures. While traditional tools rely on predefined exploits, LLMs can create dynamic payloads tailored to specific environments. They can also simulate advanced behaviors, such as social engineering attacks or equipment malfunctions, providing a more realistic assessment of an organization’s defenses. For instance, an LLM could simulate a scenario where a cyberattack disables fire suppression systems in a building, testing both the organization’s cybersecurity defenses and its emergency response protocols. This capability allows security teams to test their readiness against sophisticated adversaries without needing extensive manual effort. Incident response is another domain where LLMs shine. During a cyberattack, every second counts. LLMs can act as intelligent assistants, analyzing events in real-time, correlating data from multiple sources, and suggesting actions to contain the threat. For example, in high-risk environments like nuclear plants, an LLM could guide operators through steps to isolate compromised systems while ensuring physical safety measures remain intact. This dual focus ensures that both digital and physical risks are addressed simultaneously. Finally, we’ll discuss the role of LLMs in education and awareness. Training employees is essential, but traditional methods can be generic and uninspiring. LLMs can create personalized, interactive learning experiences that adapt to each user’s needs. Whether it’s generating quizzes, simulating phishing scenarios, or providing continuous feedback, these models make education engaging and effective. For instance, an LLM could teach workers how to respond to both a cyberattack and a fire alarm simultaneously, preparing them for real-world scenarios. Attendees will gain insights into real-world applications of LLMs, such as automating vulnerability prioritization, simulating sophisticated cyberattacks, and providing intelligent support during incident response. The session will also address the limitations and ethical considerations of adopting these technologies, ensuring a balanced perspective on their potential benefits and risks. For example, while LLMs offer unparalleled capabilities, they also raise concerns about privacy, accuracy, and misuse. Organizations must carefully evaluate these factors when integrating LLMs into their workflows. This presentation promises to equip the audience with a clear understanding of how LLMs can complement human expertise, enhance existing safety and cybersecurity frameworks, and pave the way for innovative strategies in safeguarding digital ecosystems. Join me as we explore the intersection of language models and safety-cybersecurity—and discover what the future holds for this dynamic field. Together, we’ll uncover how LLMs are not just tools but transformative agents reshaping the landscape of safety and cybersecurity

Comprar Tickets

Born in the historic region of Castilla-La Mancha, Spain, in 1972, Javier Calatrava Valiente is a seasoned cybersecurity expert with over 25 years of experience. Rooted in "Quixote's land," he pursued his passion for technology, earning a degree in Applied Computer Science from the University of Castilla-La Mancha and later obtaining a Master’s in ICT Security from the Universitat Oberta de Catalunya (UOC) in Barcelona. As the CISO at Orbisperiplo Lda., Mr. Calatrava works with global clients to strengthen their IT and Operational Technology (OT) security, ensuring alignment with business goals and regulatory requirements. With over 25 years of experience, he specializes in designing secure architectures and implementing compliance frameworks that address both current and emerging cybersecurity challenges. Mr. Calatrava's expertise includes leading OT/IT security convergence projects, managing threats within operational technologies, and protecting critical infrastructures. His work often involves integrating international standards such as ISO 27001, IEC 62443, NIST, NIS2, and DORA into organizational practices to enhance security and business continuity. Notably, he has achieved significant success in securing manufacturing environments and aligning processes with industry-specific regulations. With a background in Applied Computer Science and an MSc in ICT Security, Mr. Calatrava continues to be a driving force in advancing cybersecurity practices across various industries.