Session 3.7b Update: Beyond the Perimeter: Proximal Attack Surfaces in Defence Communications, Wireless and OT
Tracks
ㅤ
| Thursday, November 19, 2026 |
| 2:30 PM - 3:30 PM |
| Bradman Theatre |
Presentation Outline
Defence cyber discussions often focus on enterprise systems, compliance baselines and known vulnerabilities, but many operational risks sit closer to the edge: wireless systems, IoT devices, OT environments, building systems, medical devices, maritime systems and other “proximal” technologies that are frequently present, poorly understood, and difficult to govern through conventional enterprise assurance models. This presentation draws on recent research, penetration testing experience and operational technology training work to examine how these attack surfaces emerge, how they are discovered, and why they matter to Defence and national security environments. It will discuss practical approaches to scoping, discovery, threat modelling and risk framing across wireless and cyber-physical systems, with a focus on realistic avenues of approach rather than speculative threat narratives. The session will provide a practitioner’s view of how to move from broad critical infrastructure rhetoric to practical, evidence-based attack surface qualification.
Speaker
Mr Edward Farrell
CEO
Mercury Information Security Services Pty Ltd
ㅤ
Biography
Edward Farrell is the Director and Principal Consultant of Mercury Information Security Services, an Australian-owned cyber security consultancy delivering services across government, Defence, critical infrastructure and regulated industries. He has more than 16 years of experience in cyber security and over 20 years in the broader IT industry, having overseen and delivered more than 1,600 independent cyber security assessments, assurance activities and incident response engagements.
Edward is an accredited IRAP Assessor, a member of the Australian Army Reserve, and has served as an Industry Fellow at UNSW Canberra at the Australian Defence Force Academy, where he has developed and delivered training in wireless security, network defence and computer network operations. He is a regular researcher, educator and conference presenter, having delivered presentations across Australia and internationally on cyber security, wireless technologies, offensive security and risk management.
Edward is an accredited IRAP Assessor, a member of the Australian Army Reserve, and has served as an Industry Fellow at UNSW Canberra at the Australian Defence Force Academy, where he has developed and delivered training in wireless security, network defence and computer network operations. He is a regular researcher, educator and conference presenter, having delivered presentations across Australia and internationally on cyber security, wireless technologies, offensive security and risk management.
