Assessing the Perception and Comprehension of Adversarial Cyber Activity in Operational Technology Environments Using Bayesian Networks.
Abstract not provided.
Maccarone, Lee↗
SEARCH · Engineering Papers
Results for “NETWORK TECHNOLOGY”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Assessing Ransomware Activity in Operational Technology Environments Using Bayesian Networks.
Abstract not provided.
Maccarone, Lee↗
Enhancing Cybersecurity Incident Response for Operational Technology Systems Using Bayesian Networks
Explore the source record for details and available documents.
Maccarone, Lee [Sandia National Laboratories (SNL-↗
Optimal Desalination Technologies for Produced Water Networks
The purpose of the presentation is to disseminate research updates to the broader produced water community.
Naik, Sakshi↗
A Probabilistic Risk Mitigation Model for Cyber-Attacks to PMU Networks
The power grid is becoming more dependent on information and communication technologies. Complex networks of advanced sensors such as phasor measurement units (PMUs) are used to collect real time data to improve the observability of the power system. Recent studies have shown that the power grid has significant cyber vulnerabilities which could increase when PMUs are used extensively. Therefore, recognizing and responding to vulnerabilities are critical to the security of the power grid. This paper proposes a risk mitigation model for optimal response to cyber-attacks to PMU networks. We model the optimal response action as a mixed integer linear programming (MILP) problem to prevent propagation of the cyber-attacks and maintain the observability of the power system.
Cyber-attack↗
Opportunistic Hybrid Communications Systems for Distributed PV Coordination
A full-scale, operational implementation of the opportunistic hybrid communications systems for distributed photovoltaic (PV) coordination was successfully developed, simulated, and validated in this 3-year project. The system is considered hybrid because it uses different communications pathways from the scale of residential PV inverters to a transmission network; primary technologies harnessed include Low-Power Wireless Personal Area Network (LoWPAN), Power Line Communication (PLC), WiFi mesh, Worldwide Interoperability for Microwave Access (WiMAX), Ethernet cable, and Optical Ethernet systems. It is opportunistic in that it chooses to route messages through each of these systems based on recent data about latency and availability to ensure reliable message passing.
14 SOLAR ENERGY↗
Precursor Analysis Report: Cyber Attack on Thyssenkrupp Blast Furnace 2014
The Cyber Attack on Thyssenkrupp Blast Furnace 2014 Precursor Analysis Report leverages publicly available information about the Thyssenkrupp Steel Mill cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. In December 2014, the German Government’s Federal Office for Information Security (BSI) released a report detailing a cyber attack on a German steel mill that occurred earlier that year, though exact dates and details of the attack were not revealed. While the report did not specify the name of the company, multiple sources identified the victim as one of Europe’s largest steel manufacturers, Thyssenkrupp AG. Further, Thyssenkrupp announced on 16 May of that year that Europe’s largest blast furnace, “Schwelgern 2,” located at its facility in Duisburg, Germany, would be offline for several weeks for repairs and upgrades, suggesting Schwelgern 2 was likely the target of the attack. The attack began in early 2014, when adversaries infiltrated the victim steel mill’s Information Technology (IT) network via a spearphishing campaign, then worked their way into the Operational Technology (OT) environment, where they executed software that caused denial of service, denial of control, and eventually a loss of control. This led to the blast furnace shutting down without proper safety procedures, resulting in catastrophic physical damage. No lives were lost in the incident, but ThyssenKrupp suffered $4 million in damage to the blast furnace and an additional $6 million in lost revenue. The adversaries required specialized knowledge and expertise in steel production, which enabled them to compromise a variety of internal systems and components across both IT and OT networks. The attack also demonstrated detailed knowledge of the industrial control systems (ICS) and production processes being used. This combination resulted in one of the earliest known publicly reported cybersecurity incidents resulting in physical damage to ICS equipment. Researchers and analysts identified 19 unique techniques (used in a sequence of 20 steps) utilized during the attack with a total of 454 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the Thyssenkrupp cyber attack were precursors to the triggering event. Analysis identified 369 observables associated with these precursor techniques, 316 of which were assessed to have an increased likelihood of being perceived in the 120 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
PoE Lighting System Energy Reporting Study, Part 1
The replacement of today’s lighting infrastructure with LED products offers the potential for future connected lighting systems (CLS) that could become a data-collection platform that enables greater energy savings in buildings and cities. Such connected lighting systems can not only drastically improve the energy performance of lighting and other building systems, but also enable a wide array of services, benefits, and revenue streams that would enhance the value of lighting systems. As LED technology matures, maximizing the energy savings from connected LED lighting systems will become increasingly dependent on successful integration into the built environment. That’s why the DOE SSL Program is working closely with industry to identify and collaboratively address the technology development needs of CLS. For several years now, a growing number of wired and wireless network communication technologies have been integrated into commercially available lighting devices. While most commercially available lighting devices continue to require line-voltage AC power, a few new low-voltage DC technologies have also been introduced into the market as options for powering LED devices. More recently, a technology that has long supported non-lighting applications has become increasingly viable for LED lighting. This approach, whereby a single Ethernet cable is used to both provide low-voltage DC power and enable network communication, is generally referred to as Power over Ethernet (PoE). Whereas wireless solutions offer reduced control system installation cost relative to traditional low-voltage alternatives, PoE technology can offer additional cost savings by transmitting power and communications over the same low-voltage cable, while also reducing demand for wireless bandwidth. Although PoE technology was introduced at the start of this century, it was initially of limited applicability to lighting systems to power transmission limits for available Ethernet cabling. However, PoE has become increasingly viable for lighting applications in recent years as Ethernet cabling technology has evolved and relevant standards and specifications have adapted. These gains have been compounded by ongoing improvements to the luminous efficacy of LED technologies, increasing the number of LED luminaires suitable for use with Ethernet switches capable of sourcing PoE. As a result, a growing number of manufacturers have introduced PoE lighting systems in recent years. Connected lighting systems that can report their own energy consumption can deliver increased energy savings over conventional lighting solutions by facilitating data-driven energy management. PoE technology has the potential to be key in bringing this capability to mainstream lighting applications. This study is the first of a multi-part effort to explore the energy reporting capability of commercially-marketed PoE connected lighting systems. It first provides a brief background on the development of the various PoE technologies, ranging from standards-based to proprietary, and illustrates the convergence of PoE power sourcing capabilities and LED luminaire power requirements. It then classifies PoE system devices in relationship to how they are used in systems—introducing new terminology as needed—and briefly describes different PoE system architectures implemented by various lighting manufacturers. A discussion of existing standards and specifications that address energy reporting is provided, and existing test setups and methods germane to characterizing PoE system energy reporting performance are reviewed.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Ambassador Project (Final Report)
SEL, in collaboration with its partners, performed research, development and demonstration of a trust, data, and resource management software layer enabling multiple software applications from different suppliers to operate in a Software Defined Infrastructure. The Energy sector has successfully deployed Software Defined Networking (SDN) technology and is rapidly scaling deployments. One major benefit of SDN is the abstracted centralized nature of the orchestration and management of the network. This architecture enables end users to deploy new technology and capabilities as quickly as they perform firmware upgrades to field devices. When an end user needs to roll trucks to install new equipment, they simply deploy new software to run on top of this SD-Infrastructure. This has attracted many software companies to develop value added features and introduce new capabilities, which is all good for the industry but has also introduced new challenges, including how to manage trust between these software applications, how to manage the data integrity and access, and how to manage access to the network resources each of these software applications are demanding. Completion of this project developed and demonstrated a safe and reliable resource scheduler and cybersecurity trust management communication platform allowing multiple software applications to operate in a SD-Infrastructure resulting in the commercialization of a software eco-system and architecture that maintains interoperability, cybersecurity, and reliability where the end user can safely scale out their software to leverage the powerful benefits of SDN.
97 MATHEMATICS AND COMPUTING↗
Networked Microgrid Cybersecurity Architecture Design Guide: A New Jersey TRANSITGRID Use Case
Microgrids require reliable communication systems for equipment control, power delivery optimization, and operational visibility. To maintain secure communications, Microgrid Operational Technology (OT) networks must be defensible and cyber-resilient. The communication network must be carefully architected with appropriate cyber-hardening technologies to provide security defenders the data, analytics, and response capabilities to quickly mitigate malicious and accidental cyberattacks. In this work, we outline several best practices and technologies that can support microgrid operations (e.g., intrusion detection and monitoring systems, response tools, etc.). Then we apply these recommendations to the New Jersey TRANSITGRID use case to demonstrate how they would be deployed in practice.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Simulation-Based Parameter Optimization Framework for Large-Scale Hybrid Smart Grid Communications Systems Design
The design of reliable, dynamic, fault-tolerant hybrid smart grid communication networks is a challenge to achieve for autonomous power grids. Hybrid networks use different communications technologies for different area networks. A simulation-based parameter optimization framework is proposed to tune parameters of hybrid communication technologies to achieve the optimal network performance. It consists of three main components: a parallel executor used to speedup a list of simulations; a sampler running simulations using the parallel executor at each generation; and a hybrid stochastic optimization algorithm for tuning configurable parameters of hybrid designs and applications. The proposed hybrid metaheuristic optimization algorithm combines an evolutionary algorithm with a gradient method to quickly achieve an approximately global optimum solution. Three optimization test functions are employed to train the adjustable parameters of the hybrid algorithm. Results show the proposed parameter optimization framework can help the designer choose the right hybrid architecture with an optimal parameter set for a large-scale broadband PLC-WiMAX hybrid smart grid communication network.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Alkali-Metal-Intercalated Percolation Network Regulates Self-Assembled Electronic Aromatic Molecules
In the continuously growing field of correlated electronic molecular crystals, there is significant interest in addressing alkali-metal-intercalated aromatic hydrocarbons, in which the possibility of high-temperature superconductivity emerges. However, searching for superconducting aromatic molecular crystals remains elusive due to their small shielding fraction volume. To exploit this potential, a design principle for percolation networks of technologically important film geometry is indispensable. Here the effect of potassium-intercalation is shown on the percolation network in self-assembled aromatic molecular crystals. It is demonstrated that one-dimensional (1D) dipole pairs, induced by dipole interaction, regulate the conductivity, as well as the electronic and optical transitions, in alkalimetal-intercalated molecular electronic crystals. A solid-solution growth methodology of aromatic molecular films with a broad range of stability is developed to uncover electronic and optical transitions of technological importance. The light-induced electron interactions enhance the charge-carrier itinerancy, leading to a switchable metal-to-insulator transition. This discovery opens a route for the development of aromatic molecular electronic solids and long-term modulation of electronic efficacy in nano-technologically important thin films.
36 MATERIALS SCIENCE↗
Cybersecurity Anomaly Detection in SCADA-Assisted OT Networks Using Ensemble-Based State Prediction Model
The cybersecurity threats of power system gradually grow due to the increased sophisticated interactions between Information Technology (IT) and Operational Technology (OT) networks. False data injection attack (FDIA) that aims to compromise the Supervisory Control and Data Acquisition (SCADA) measurement and disturb the system operation is one of such cyber threats. Such attacks can potentially lead to significant operational issues at the control centers and substations, and hence, result in severe physical consequences. To avoid catastrophic failure across the power grid resulting from these attacks, it is essential to arm the OT network with real-time vulnerability assessment tools. To this end, this paper outlines various drawbacks of the Purdue architecture model to defend against cyberattacks in the OT network. Furthermore, a novel ensemble-based state prediction model is proposed to detect cybersecurity anomalies in SCADA assisted OT networks. The proposed model uses control center level generation and load forecasts, scheduled, and forced outages, power flow solutions, and the substation level historical data. The hypothesis of the proposed scheme relies on the fact that additional control center and substation data can hardly be accessed and compromised by attackers. One of the vital features of the proposed scheme is an hour-ahead prediction of the operational feasibility of the SCADA measurement range at the control center and substation in real time helps in detecting anomalies in measurements across both substation and the control center.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Clean Energy Cybersecurity Accelerator: Cohort 2 - runZero Public Report
The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator™ (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Clean Energy Cybersecurity Accelerator: Cohort 2 - Asimily Public Report
The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator (TM) (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Smarter Grid Solutions Demonstrates Smart Campus Power Control at NREL
Smarter Grid Solutions used the National Renewable Energy Laboratory’s (NREL’s) simulation capabilities at the Energy Systems Integration Facility to expand its Active Network Management technology for smart campus power control.
24 POWER TRANSMISSION AND DISTRIBUTION↗
PINE: Photonic Integrated Networked Energy efficient datacenters
We review the motivation, goals, and achievements of the Photonic Integrated Networked Energy efficient datacenter (PINE) project, which is part of the Advanced Research Projects Agency–Energy (ARPA-E) ENergy-efficient Light-wave Integrated Technology Enabling Networks that Enhance Dataprocessing (ENLITENED) program. Here, the PINE program leverages the unique features of photonic technologies to enable alternative mega-datacenters and high-performance computing (HPC) system architectures that deliver more substantial energy efficiency improvements than can be achieved through link energy efficiency alone. In phase 1 of the program, the PINE system architecture demonstrated an average factor of 2.2× improvement in transactions/joule across a diverse set of HPC and datacenter applications. In phase 2, PINE will demonstrate an aggressive 1.0 pJ/bit total link budget with high-bandwidth-density dense wavelength-division multiplexing (DWDM) links to enable additional 2.5× or more efficiency gains through deep resource disaggregation.
42 ENGINEERING↗
Chemiomics: Network Reconstruction and Kinetics of Port Wine Aging
Network reconstruction (NR) has proven to be useful in the detection and visualization of relationships among the compounds present in a Port wine aging data set. This view of the data provides a considerable amount of information with which to understand the kinetic contexts of the molecules represented by peaks in each chromatogram. The aim of this paper was to use NR together with the determination of kinetic parameters to extract more information about the mechanisms involved in Port wine aging. The volatile compounds present in samples of Port wines spanning 128 years in age were measured with the use of GC-MS. After chromatogram alignment, a peak matrix was created, and all peak vectors were compared to one another to determine their Pearson correlations over time. A correlation network was created and filtered on the basis of the resulting correlation values. Some nodes in the network were further studied in experiments on Port wines stored under different conditions of oxygen and temperature in order to determine their kinetic parameters. The resulting network can be divided into three main branches. The first branch is related to compounds that do not directly correlate to age, the second branch contains compounds affected by temperature, and the third branch contains compounds associated with oxygen. Compounds clustered in the same branch of the network have similar expression patterns over time as well as the same kinetic order, thus are likely to be dependent on the same technological parameters. Network construction and visualization provides more information with which to understand the probable kinetic contexts of the molecules represented by peaks in each chromatogram. Finally, the approach described here is a powerful tool for the study of mechanisms and kinetics in complex systems and should aid in the understanding and monitoring of wine quality.
37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗