Eric Byres

  /    /  About Eric Byres
About The Author

CTO and Board Member

Eric Byres is widely recognized as one of the world’s top experts in the field of SCADA security. As the inventor of the Tofino Security technology, Eric and his partner Joann guided the product through its evolution from academic research project and startup to successful acquisition by Belden Inc (NYSE: BDC). Tofino received numerous industry awards and was licensed by industry giants such as Honeywell, Schneider Electric and Caterpillar. Today it is probably the most widely deployed ICS-specific firewall in the world.

Eric is also known for his leadership in international standards and research for ICS/SCADA security. As the founder of the BCIT Critical Infrastructure Security Centre, he shaped it into one of North America's leading academic facilities in ICS security, culminating in a SANS Institute Security Leadership Award in 2006. At the same time, he provided guidance to government security agencies, and major energy companies on protection for critical infrastructures. He was the chair of the ISA SP-99 Security Technologies Working Group, and the Canadian representative for the IEC TC65/WG10 standards effort.

Some of Eric’s achievements include testifying to the US Congress on the “Security of Industrial Control Systems in National Critical Infrastructures” as well as receiving awards from international organizations. These include the IEEE Outstanding Industry Applications Article Prize in 2000, the 2004 “Donald P. Eckman Award” and the 2005 “Keith Otto Award” presented by the International Society of Automation (ISA). Eric was made an ISA Fellow in 2009 and given ISA’s highest honor, “Excellence in Leadership”, in 2013. Eric was also the inventor of the Achilles Test Platform (now owned by GE) and was the founder of Byres Research Inc. and Artemis Systems Engineering. Today Eric provides technology and market guidance to companies entering the ICS market, as well as policy guidance for companies involved in the operation of critical infrastructures.


Executive Order 14028 on Improving the Nation's Cybersecurity was issued in May of 2021 and provided a roadmap for a series of regulatory initiatives that government agencies (and anyone doing business with them) should prepare for. Recently we’ve seen the


Recently, the Russia-based hacking group REvil, attacked the Florida-based software company Kaseya Ltd. If you’re not familiar with Kaseya, they provide network and security management services for small to medium-sized businesses (SMBs), not unlike what SolarWinds offers for large businesses.


An Executive Order (EO) issued by a U.S. President is usually a pretty straightforward document. Most are just two or three pages long with a handful of directives. This is definitely not the case with President Biden’s latest EO, Executive


A SolarWinds-style cyberattack happened back in in 2013-14 that affected big government agencies and thousands of companies. What should we have learned from the Dragonfly/HAVEX attack? Software Infiltration A cyberattack group called Dragonfly attacked power plants and industrial sites, employing a very


Supply chain attacks like the recent SolarWinds hack are now front-page news, and cybersecurity steps must be taken to reduce the risk these attacks pose to critical systems. A platform that enables end users to manage the security of their