Spire: Intrusion-Tolerant SCADA for the Power Grid
|
|
|
- Corey Hensley
- 5 years ago
- Views:
Transcription
1 Distributed Systems and Networks Lab Spire: Intrusion-Tolerant for the Power Grid Amy Babay*, Thomas Tantillo*, Trevor Aron, Yair Amir June 25, 2017 Distributed Systems and Networks Lab Department of Computer Science Johns Hopkins University June 2017 IFIP 10.4 Working Group 1
2 is Vulnerable on Several Fronts The move to IP makes vulnerable on several fronts: HMI system compromises system-wide damage s, PLCs limited local effects HMIs Network level attacks Routing attacks that disrupt or delay communication Isolating critical components from the rest of the network Primary PLC Backup Therefore, systems must ensure continuous availability and correct operation in the presence of compromises and attacks at both the system and network level June 2017 IFIP 10.4 Working Group 2
3 Spire Overview Spire is a system that continues to work even if some critical components have been compromised Intrusion tolerance as the core design principle protecting several different layers of the system: Intrusion-tolerant network Intrusion-tolerant consistent state Intrusion-tolerant Combines proven open-source components with new system components built from scratch to provide a complete top-tobottom solution from a distributed systems perspective Open Source - June 2017 IFIP 10.4 Working Group 3
4 Spire Components Spines ( Intrusion-Tolerant Network Prime ( Intrusion-Tolerant Replication BFT with performance guarantees under attack ( PLC/ Proxy ( Pvbrowser-based HMI ( Rainer Lehrig and his group OpenPLC ( PLC Emulation (Thiago Alves, Tommy Morris) University of Alabama, Huntsville Multicompiler ( Diversity (Michael Franz group at UC Irvine, Immunant) June 2017 IFIP 10.4 Working Group 4
5 Spire Architecture: Single Control Center Internal Spines Network Prime Prime Prime Prime External Spines Network pvbrowser HMI / PLC Proxy / PLC Proxy PLC June 2017 IFIP 10.4 Working Group 5
6 pvbrowser-based HMI Pvbrowser is an open source software solution Used in real-world deployments: Romanian power distribution system covering 10,000 km 2 with 50 power switches Spire s HMIs is based on pvbrowser June 2017 IFIP 10.4 Working Group 6
7 Spire in Action Spire as used in the DoD ESTCP experiment March-April 2017 June 2017 IFIP 10.4 Working Group 7
8 DoD ESTCP Experiment DoD ESTCP project at Pacific Northwest National Labs Conducted by Resurgo 3/27/17 to 4/7/17 Comparing NISTcompliant architecture with Spire Each attacked by Sandia National Labs red team June 2017 IFIP 10.4 Working Group 8
9 NIST-compliant system completely taken over MITM attack from corporate network Direct access to PLC from operational network Spire completely unaffected Attacks in corporate and operational network Given complete access to a replica and code Red team gave up after several days DoD ESTCP Results June 2017 IFIP 10.4 Working Group 9
10 Beyond a Single Site To protect against sophisticated network attacks, Spire supports multiple control sites Since it is expensive to construct control sites, Spire is able to operate with two control sites plus additional sites that can be served by commodity data centers (that lack the ability to communicate with s and PLCs in the field) June 2017 IFIP 10.4 Working Group 10
11 Current Systems 2-2 Primary Control Center LAN Cold-Backup Control Center LAN HMI Primary Hot Standby HMI Primary Hot Standby Spines Intrusion- Tolerant Network Substation Substation June 2017 IFIP 10.4 Working Group 11
12 Intrusion Tolerance State-of-the-Art in Research 6 (progress: 4) A Single Control Center LAN HMI 3f+2k+1 total replicas 2f+k+1 connected correct replicas required to provide bounded delay Spines Intrusion- Tolerant Network Substation Substation June 2017 IFIP 10.4 Working Group 12
13 Novel Resilient Configurations (7/7) (progress: 7) Data Center 1 Data Center 2 Complete solution for 4 total sites: (2 control centers, 2 data centers) Control Center 1 HMI Spines Control Center 2 HMI Sweet-spot balancing the number of data center sites, the number of total replicas, and the communication overhead Spines Substation Substation June 2017 IFIP 10.4 Working Group 13
14 Wide Area: Update Latency Histogram 30-hour wide-area deployment of configuration Control centers at JHU and SVG, data centers at WAS and NYC 10 emulated s sending periodic updates 1.08 million updates (108K from each ) Over % of updates delivered within 100ms (56ms average) June 2017 IFIP 10.4 Working Group 14
15 The Spire Forum Forum focused on Open Source Intrusiontolerant control systems for the power grid Please join the Spire forum if interested Distributed Systems and Networks Lab June 2017 IFIP 10.4 Working Group 15
Spire: Intrusion-Tolerant SCADA for the Power Grid
Distributed Systems and Networks Lab Spire: Intrusion-Tolerant for the Power Grid Amy Babay*, Thomas Tantillo*, Trevor Aron, Yair Amir June 25, 2017 Distributed Systems and Networks Lab Department of Computer
Network-Attack-Resilient Intrusion- Tolerant SCADA for the Power Grid
Network-Attack-Resilient Intrusion- Tolerant SCADA for the Power Grid Amy Babay, Thomas Tantillo, Trevor Aron, Marco Platania, and Yair Amir Johns Hopkins University, AT&T Labs, Spread Concepts LLC Distributed
Evaluating BFT Protocols for Spire
Evaluating BFT Protocols for Spire Henry Schuh & Sam Beckley 600.667 Advanced Distributed Systems & Networks SCADA & Spire Overview High-Performance, Scalable Spire Trusted Platform Module Known Network
Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid
Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid Amy Babay, Thomas Tantillo, Trevor Aron, Marco Platania, and Yair Amir Johns Hopkins University {babay, tantillo, taron1, yairamir}@cs.jhu.edu
Research Statement. Amy Babay December 2018
Research Statement Amy Babay December 2018 My research focuses on distributed systems and networks, with core goals spanning two domains: enabling new Internet services and building dependable infrastructure.
Amy Babay April 2018
Amy Babay www.dsn.jhu.edu/~babay 814-528-4205 babay@cs.jhu.edu Education PhD in Computer Science April 2018 PhD Research: Structured overlay networks for a new generation of Internet services, dependable
Toward Open Source Intrusion Tolerant SCADA. Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania
Toward Open Source Intrusion Tolerant SCADA Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania Outline What is SCADA? SCADA Vulnerabilities What is Intrusion Tolerance? Prime PvBrowser Our
Amy Babay November Doctor of Philosophy in Computer Science September 2018
Amy Babay www.dsn.jhu.edu/~babay 814-528-4205 babay@cs.jhu.edu Education November 2018 Doctor of Philosophy in Computer Science September 2018 Thesis: Timely, Reliable, and Cost-Effective Internet Transport
Toward Intrusion Tolerant Clouds
Toward Intrusion Tolerant Clouds Prof. Yair Amir, Prof. Vladimir Braverman Daniel Obenshain, Tom Tantillo Department of Computer Science Johns Hopkins University Prof. Cristina Nita-Rotaru, Prof. Jennifer
Toward Intrusion Tolerant Cloud Infrastructure
Toward Intrusion Tolerant Cloud Infrastructure Daniel Obenshain, Tom Tantillo, Yair Amir Department of Computer Science Johns Hopkins University Andrew Newell, Cristina Nita-Rotaru Department of Computer
Reducing the Costs of Large-Scale BFT Replication
Reducing the Costs of Large-Scale BFT Replication Marco Serafini & Neeraj Suri TU Darmstadt, Germany Neeraj Suri EU-NSF ICT March 2006 Dependable Embedded Systems & SW Group www.deeds.informatik.tu-darmstadt.de
Virtualizing Industrial Control Systems Testbeds for Cybersecurity Research
Virtualizing Industrial Control Systems Testbeds for Cybersecurity Research CAE Tech Talk 2016 Thiago Alves Faculty: Dr. Tommy Morris Overview Problems: Industrial Control Systems are too big to fit in
Timely, Reliable, and Cost-Effective Internet Transport. Service using Structured Overlay Networks. Amy Babay
Timely, Reliable, and Cost-Effective Internet Transport Service using Structured Overlay Networks by Amy Babay A dissertation submitted to The Johns Hopkins University in conformity with the requirements
A FAULT- AND INTRUSION-TOLERANT ARCHITECTURE FOR THE PORTUGUESE POWER DISTRIBUTION SCADA
A FAULT- AND INTRUSION-TOLERANT ARCHITECTURE FOR THE PORTUGUESE POWER DISTRIBUTION SCADA Nuno Medeiros Alysson Bessani 1 Context: EDP Distribuição EDP Distribuição is the utility responsible for the distribution
Towards a Practical Survivable Intrusion Tolerant Replication System
Towards a Practical Survivable Intrusion Tolerant Replication System Marco Platania, Daniel Obenshain, Thomas Tantillo, Ricky Sharma, Yair Amir Department of Computer Science at Johns Hopkins University
M&Ms: CS Freshmen Experience Networks. Department of Computer Science The Johns Hopkins University. Yair Amir Spring 2017 / Week 3 1.
M&Ms: CS Freshmen Experience 600.105 Networks Department of Computer Science The Johns Hopkins University 1 Networks Reading: https://en.wikipedia.org/wiki/history_of_the_internet https://en.wikipedia.org/wiki/routing
Towards a Practical Survivable Intrusion Tolerant Replication System
Towards a Practical Survivable Intrusion Tolerant Replication System Marco Platania, Daniel Obenshain, Thomas Tantillo, Ricky Sharma, Yair Amir Department of Computer Science at Johns Hopkins University
Cyber Security of Industrial Control Systems (ICSs)
Cyber Security of Industrial Control Systems (ICSs) February 23, 2016 Joe Weiss PE, CISM, CRISC, ISA Fellow Managing Partner Applied Control Solutions, LLC (408) 253-7934 joe.weiss@realtimeacs.com Applied
Detection and Analysis of Threats to the Energy Sector (DATES)
Detection and Analysis of Threats to the Energy Sector (DATES) Sponsored by the Department of Energy National SCADA Test Bed Program Managed by the National Energy Technology Laboratory The views herein
Distributed Systems Intrusion-Tolerant Networks. First, Some Context
Distributed Systems 600.437 Intrusion-Tolerant Networks Department of Computer Science The Johns Hopkins University 1 First, Some Context You ve just heard about Intrusion-Tolerant State Machine Replication
Securing the Smart Grid. Understanding the BIG Picture 11/1/2011. Proprietary Information of Corporate Risk Solutions, Inc. 1.
Securing the Smart Grid Understanding the BIG Picture The Power Grid The electric power system is the most capital-intensive infrastructure in North America. The system is undergoing tremendous change
Technical Report: Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes
Purdue University Purdue e-pubs Department of Computer Science Technical Reports Department of Computer Science 2013 Technical Report: Increasing Network Resiliency by Optimally Assigning Diverse Variants
Communication Pattern Anomaly Detection in Process Control Systems
Communication Pattern Anomaly Detection in Process Control Systems Sponsored by the Department of Energy National SCADA Test Bed Program Managed by the National Energy Technology Laboratory The views herein
Seamless Overlays for Application Use
1. Overview Seamless Overlays for Application Use Graduate Independent Study, 600.810.12 Edmund Duhaime Advisors: Dr. Yair Amir, Amy Babay May 18, 2017 This project focuses on methods for allowing unmodified
Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes
Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes Andrew Newell 1, Daniel Obenshain 2, Thomas Tantillo 2, Cristina Nita-Rotaru 1, and Yair Amir 2 1 Department of Computer
Secure Mission-Centric Operations in Cloud Computing
Secure Mission-Centric Operations in Cloud Computing Massimiliano Albanese, Sushil Jajodia, Ravi Jhawar, Vincenzo Piuri George Mason University, USA Università degli Studi di Milano, Italy ARO Workshop
VMware vsphere Clusters in Security Zones
SOLUTION OVERVIEW VMware vsan VMware vsphere Clusters in Security Zones A security zone, also referred to as a DMZ," is a sub-network that is designed to provide tightly controlled connectivity to an organization
Panelists. Moderator: Dr. John H. Saunders, MITRE Corporation
SCADA/IOT Panel This panel will focus on innovative & emerging solutions and remaining challenges in the cybersecurity of industrial control systems ICS/SCADA. Representatives from government and infrastructure
Scaling Byzantine Fault-tolerant Replication to Wide Area Networks
Scaling Byzantine Fault-tolerant Replication to Wide Area Networks Cristina Nita-Rotaru Dependable and Secure Distributed Systems Lab Department of Computer Science and CERIAS Purdue University Department
vsan Security Zone Deployment First Published On: Last Updated On:
First Published On: 06-14-2017 Last Updated On: 11-20-2017 1 1. vsan Security Zone Deployment 1.1.Solution Overview Table of Contents 2 1. vsan Security Zone Deployment 3 1.1 Solution Overview VMware vsphere
Methods for Reducing Cybersecurity Vulnerabilities of Power Substations Using Multi-Vendor Smart Devices in a Smart Grid Environment
S&L Logo Methods for Reducing Cybersecurity Vulnerabilities of Power Substations Using Multi-Vendor Smart Devices in a Smart Grid Environment Date: October 24, 2017 Authors/Presenters: J. Matt Cole, PE
An Introduction to the Waratek Application Security Platform
Product Analysis January 2017 An Introduction to the Waratek Application Security Platform The Transformational Application Security Technology that Improves Protection and Operations Highly accurate.
An Attack-Resilient Architecture for Large-Scale Intrusion-Tolerant Replication
An Attack-Resilient Architecture for Large-Scale Intrusion-Tolerant Replication Yair Amir 1, Brian Coan 2, Jonathan Kirsch 1, John Lane 1 1 Johns Hopkins University, Baltimore, MD. {yairamir, jak, johnlane}@cs.jhu.edu
Financial CISM. Certified Information Security Manager (CISM) Download Full Version :
Financial CISM Certified Information Security Manager (CISM) Download Full Version : http://killexams.com/pass4sure/exam-detail/cism required based on preliminary forensic investigation, but doing so as
CprE 458/558: Real-Time Systems. Lecture 17 Fault-tolerant design techniques
: Real-Time Systems Lecture 17 Fault-tolerant design techniques Fault Tolerant Strategies Fault tolerance in computer system is achieved through redundancy in hardware, software, information, and/or computations.
Tolerating Latency in Replicated State Machines through Client Speculation
Tolerating Latency in Replicated State Machines through Client Speculation April 22, 2009 1, James Cowling 2, Edmund B. Nightingale 3, Peter M. Chen 1, Jason Flinn 1, Barbara Liskov 2 University of Michigan
Fast Handoff for Seamless Wireless Mesh Networks
Fast Handoff for Seamless Wireless Mesh Networks Yair Amir, Claudiu Danilov, Michael Hilsdale, Raluca Musaloiu-Elefteri, Nilo Rivera Distributed Systems and Networks Lab Johns Hopkins University MobiSys
ABB Communication Networks Latest News FOX615 / References with TROPOS Mesh
Christian Köhler, Network Management Forum, 09. October 2013 ABB Communication Networks Latest News FOX615 / References with TROPOS Mesh October 14, 2013 Slide 1 Why ABB for Utility Communication solutions
Achieving End-to-End Security in the Internet of Things (IoT)
Achieving End-to-End Security in the Internet of Things (IoT) Optimize Your IoT Services with Carrier-Grade Cellular IoT June 2016 Achieving End-to-End Security in the Internet of Things (IoT) Table of
Riverbed Xirrus Cloud Processes and Data Privacy June 19, 2018
Riverbed Xirrus Cloud Processes and Data Privacy June 19, 2018 PURPOSE OF THIS DOCUMENT... 2 DATA CENTER PROCESSES... 2 Physical and Environmental Security... 2 Resiliency and Redundancy... 2 Network Security...
Intermediate Programming Section 03 Introduction. Department of Computer Science Johns Hopkins University. Course Overview.
Intermediate Programming 601.220 Section 03 Introduction Department of Computer Science Johns Hopkins University 1 Course Overview Week 1 http://www.dsn.jhu.edu/courses/cs220/ cs220-help@dsn.jhu.edu 2
The Design and Implementation of a Next Generation Name Service for the Internet (CoDoNS) Presented By: Kamalakar Kambhatla
The Design and Implementation of a Next Generation Name Service for the Internet (CoDoNS) Venugopalan Ramasubramanian Emin Gün Sirer Presented By: Kamalakar Kambhatla * Slides adapted from the paper -
Sachin Shetty Old Dominion University April 10, Cyber Risk Scoring and Mitigation(CRISM)
Sachin Shetty Old Dominion University sshetty@odu.edu April 10, 2019 Cyber Risk Scoring and Mitigation(CRISM) Customer Need - Life in the Security Operation Center Intrusion Detection System alerts Prioritized
Identity-Based Cyber Defense. March 2017
Identity-Based Cyber Defense March 2017 Attackers Continue to Have Success Current security products are necessary but not sufficient Assumption is you are or will be breached Focus on monitoring, detecting
OL Connect Backup licenses
OL Connect Backup licenses Contents 2 Introduction 3 What you need to know about application downtime 5 What are my options? 5 Reinstall, reactivate, and rebuild 5 Create a Virtual Machine 5 Run two servers
Arista 7500E DWDM Solution and Use Cases
ARISTA WHITE PAPER Arista DWDM Solution and Use Cases The introduction of the Arista 7500E Series DWDM solution expands the capabilities of the Arista 7000 Series with a new, high-density, high-performance,
EMP and the U.S. Power Grid
EMP and the U.S. Power Grid An EPRI Update April 26, 2017 Rob Manning VP Transmission and Distribution EPRI Electric Power Research Institute 2 Historical Perspective U.S. government (and others) known
BYZANTINE FAULT TOLERANT SOFTWARE- DEFINED NETWORKING (SDN) CONTROLLERS
BYZANTINE FAULT TOLERANT SOFTWARE- DEFINED NETWORKING (SDN) CONTROLLERS KARIM ELDEFRAWY* AND TYLER KACZMAREK** * INFORMATION AND SYSTEMS SCIENCES LAB (ISSL), HRL LABORATORIES ** UNIVERSITY OF CALIFORNIA
Rethinking Security: The Need For A Security Delivery Platform
Rethinking Security: The Need For A Security Delivery Platform Cybercrime In Asia: A Changing Environment & Shifting Focus Asia, more vulnerable to cybercrime because of diversity and breadth of countries
Firewalls (IDS and IPS) MIS 5214 Week 6
Firewalls (IDS and IPS) MIS 5214 Week 6 Agenda Defense in Depth Evolution of IT risk in automated control systems Security Domains Where to put firewalls in an N-Tier Architecture? In-class exercise Part
Adaptive System Infrastructure for Ultra-Large. Large-Scale Systems. SMART Conference, Thursday, March 6 th, 2008
Adaptive System Infrastructure for Ultra-Large Large-Scale Systems SMART Conference, Thursday, March 6 th, 2008 Dr. Douglas C. Schmidt d.schmidt@vanderbilt.edu www.dre.vanderbilt.edu/~schmidt Institute
Take Back Lost Revenue by Activating Virtuozzo Storage Today
Take Back Lost Revenue by Activating Virtuozzo Storage Today JUNE, 2017 2017 Virtuozzo. All rights reserved. 1 Introduction New software-defined storage (SDS) solutions are enabling hosting companies to
Practical Byzantine Fault Tolerance (The Byzantine Generals Problem)
Practical Byzantine Fault Tolerance (The Byzantine Generals Problem) Introduction Malicious attacks and software errors that can cause arbitrary behaviors of faulty nodes are increasingly common Previous
Zyzzyva. Speculative Byzantine Fault Tolerance. Ramakrishna Kotla. L. Alvisi, M. Dahlin, A. Clement, E. Wong University of Texas at Austin
Zyzzyva Speculative Byzantine Fault Tolerance Ramakrishna Kotla L. Alvisi, M. Dahlin, A. Clement, E. Wong University of Texas at Austin The Goal Transform high-performance service into high-performance
PREEMPTIVE PREventivE Methodology and Tools to protect utilities
PREEMPTIVE PREventivE Methodology and Tools to protect utilities 2014 2017 1 With the financial support of FP7 Seventh Framework Programme Grant agreement no: 607093 Preemptive goal The main goal of PREEMPTIVE
Department of Defense Installation Energy Resilience
Department of Defense Installation Energy Resilience Dr. Ariel Castillo Senior Energy Resilience Program Manager OASD (Energy, Installations & Environment) June 8, 2017 DISTRIBUTION STATEMENT A. Approved
Distributed Filesystem
Distributed Filesystem 1 How do we get data to the workers? NAS Compute Nodes SAN 2 Distributing Code! Don t move data to workers move workers to the data! - Store data on the local disks of nodes in the
Copyright 2012 EMC Corporation. All rights reserved. Obrigado
Copyright 20132012 EMC Corporation. EMC Corporation. All rights reserved. All rights reserved. 1 EMC FORUM 2013 2 Obrigado 3 SOFTWARE DEFINED DATA CENTER WORLD IS CHANGING RAPID CHANGE APP / INFRA INCREASED
An Empirical Study of High Availability in Stream Processing Systems
An Empirical Study of High Availability in Stream Processing Systems Yu Gu, Zhe Zhang, Fan Ye, Hao Yang, Minkyong Kim, Hui Lei, Zhen Liu Stream Processing Model software operators (PEs) Ω Unexpected machine
Disruption Tolerant Networking Across Mission Critical
Disruption Tolerant Networking Across Mission Critical Ground Networks Rashied Amini, Scott Burleigh, Joshua Schoolcraft, Jordan L. Torgerson Jet Propulsion Laboratory, California Institute of Technology
Securing Your Data ATA Spec 42. Regan Brossard - The Boeing Company June 2017
Securing Your Data ATA Spec 42 Regan Brossard - The Boeing Company June 2017 Agenda PKI - Use in the Aviation Industry and why is it necessary Guidance for Transitioning to Connected Airplanes Choosing
Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System
Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System Dave Dolezilek International Technical Director Schweitzer Engineering Laboratories SEL
How Cisco IT Is Accelerating Adoption of IPv6
Cisco IT Case Study How Cisco IT Is Accelerating Adoption of IPv6 Priority projects are IPv6-based public website and end-to-end reference implementation. Cisco IT Case Study / Borderless Networks / IPv6:
Synology High Availability (SHA)
Synology High Availability (SHA) Based on DSM 5.1 Synology Inc. Synology_SHAWP_ 20141106 Table of Contents Chapter 1: Introduction... 3 Chapter 2: High-Availability Clustering... 4 2.1 Synology High-Availability
Exercise of FERC Authority for Cybersecurity of the North American Electric Grid
Exercise of FERC Authority for Cybersecurity of the North American Electric Grid Thomas S. Popik Joseph M. Weiss George R. Cotter FERC Docket RM15-14-000 www.resilientsocieties.org Agenda Overall Concerns
Industrial Control System Cyber Security
Industrial Control System Cyber Security Disaster Recovery Information Exchange Bruce Tyson June 28, 2017 Lunch and Learn Introduction Bruce Tyson is a certified engineering technologist (CET Telecommunications
Minimum Standards for Connecting to the UCLA Network
Minimum Standards for Connecting to the UCLA Network Last April, the CSG approved a set of minimum standards for connecting to the UCLA network that were based on a policy that had been developed by Berkeley.
CATALYZING CYBER SECURITY INNOVATION THROUGH CYBER DEFENSE COMPETITIONS
erhtjhtyhy DEFENDING TOMORROW S INFRASTRUCTURE TODAY CATALYZING CYBER SECURITY INNOVATION THROUGH CYBER DEFENSE COMPETITIONS JENNIFER FOWLER Cyber Security Analyst jfowler@anl.gov 630-252-8707 AMANDA JOYCE
Business Strategy Theatre
Business Strategy Theatre Security posture in the age of mobile, social and new threats Steve Pao, GM Security Business 01 May 2014 In the midst of chaos, there is also opportunity. - Sun-Tzu Security:
GDPR Update and ENISA guidelines
GDPR Update and ENISA guidelines 2016 [Type text] There are two topics that should be uppermost in every CISO's mind, how to address the growing demand for Unified Communications (UC) and how to ensure
Regulatory Impacts on Research Topics. Jennifer T. Sterling Director, Exelon NERC Compliance Program
Regulatory Impacts on Research Topics Jennifer T. Sterling Director, Exelon NERC Compliance Program The 2003 Blackout On August 14, 2003, an electric power blackout affected large portions of the Northeast
An Introduction to Runtime Application Self-Protection (RASP)
Product Analysis June 2016 An Introduction to Runtime Application Self-Protection (RASP) The Transformational Application Security Technology that Improves Protection and Operations Highly accurate. Easy
FAA Cybersecurity Test Facility (CyTF) By: Enterprise Information Security Team ANG-B31 Patrick Hyle, William J Hughes Technical Center
FAA Cybersecurity Test Facility (CyTF) By: Enterprise Information Security Team ANG-B31 Patrick Hyle, William J Hughes Technical Center Date: 08 August, 2016 1 2 3 4 5 6 7 8 2 FAA Provides Aviation Portion
Wide-area Dissemina-on under Strict Timeliness, Reliability, and Cost Constraints
Wide-area Dissemina-on under Strict Timeliness, Reliability, and Cost Constraints Amy Babay, Emily Wagner, Yasamin Nazari, Michael Dinitz, and Yair Amir Distributed Systems and Networks Lab www.dsn.jhu.edu
Exploring the ISA100.11a Standard. Exploring the ISA100.11a Standard. William (Bill) Ayers America s OneWireless Consultant.
Exploring the ISA100.11a Standard March 2012 William (Bill) Ayers America s OneWireless Consultant Exploring the ISA100.11a Standard WHY Standards World Leader SolutionsFocused Greatest Flexibility International
Introducing Cyber Resiliency Concerns Into Engineering Education
Introducing Cyber Resiliency Concerns Into Engineering Education Mr. Tom McDermott Georgia Tech Research Institute Mr. Barry Horowitz University of Virginia NDIA 20 th Annual Systems Engineering Conference
Simple and secure PCI DSS compliance
Simple and secure PCI DSS compliance Get control over PCI audit scope while dramatically improving security posture Decrease IT CapEx and OpEx costs by 25% Reduce PCI compliance time by up to 30% Reduce
SECURITY ON AWS 8/3/17. AWS Security Standards MORE. By Max Ellsberry
SECURITY ON AWS By Max Ellsberry AWS Security Standards The IT infrastructure that AWS provides has been designed and managed in alignment with the best practices and meets a variety of standards. Below
Meeting the Challenges of Enhancing Power Sector Resilience
Meeting the Challenges of Enhancing Power Sector Resilience EMERGING PRACTICES Dr. Vivien Foster Global Lead, Energy Markets The World Bank Asian Clean Energy Forum Manila, the Philippines June 5, 2017
Clustering In A SAN For High Availability
Clustering In A SAN For High Availability Steve Dalton, President and CEO Gadzoox Networks September 2002 Agenda What is High Availability? The differences between High Availability, System Availability
Designing a new IEC substation architecture
Designing a new IEC 61850 substation architecture Gerrit Dogger Senior Product and Application Specialist Cooper Power Systems gerrit.dogger@cybectec.com Garry Tennese Station Integration Specialist Manitoba
Datacentre Milton Keynes Hall C Data sheet
Datacentre Milton Keynes Hall C Data sheet Data sheet Datacentre Milton Keynes Hall C Find us With 10 datacentres, over 4,500 racks and a 10Gb resilient core network between our datacentre locations, Pulsant
Automated Attack Framework for Test & Evaluation (AAFT)
Automated Attack Framework for Test & Evaluation (AAFT) 34 th International Test and Evaluation Association Symposium October 4, 2017 Mr. Andrew Shaffer The Applied Research Laboratory The Pennsylvania
Grid automation products. See the unseen from a new perspective. SDM600 functionality joins RTU560 flexibility.
Grid automation products See the unseen from a new perspective. SDM600 functionality joins RTU560 flexibility. 2 SDM600 in RTU560 housing functionality joins flexibility Intuitive data and security management.
High Availability for Cisco Unified Communications on the Cisco Unified Computing System (UC on UCS)
White Paper High Availability for Cisco Unified Communications on the Cisco Unified Computing System (UC on UCS) Updated January 2013 2012 Cisco and/or its affiliates. All rights reserved. This document
Hypervisors and Server Flash Satyam Vaghani
Hypervisors and Server Flash Satyam Vaghani Agenda r Case for server flash in SDDC r Technology implications of marrying hypervisors with server flash r Empirical data r Conclusion and open issues 2 Reference
Executing Legacy Applications on a Java Operating System
Executing Legacy Applications on a Java Operating System Andreas Gal, Michael Yang, Christian Probst, and Michael Franz University of California, Irvine {gal,mlyang,probst,franz}@uci.edu May 30, 2004 Abstract
Accelerate MySQL for Demanding OLAP and OLTP Use Cases with Apache Ignite. Peter Zaitsev, Denis Magda Santa Clara, California April 25th, 2017
Accelerate MySQL for Demanding OLAP and OLTP Use Cases with Apache Ignite Peter Zaitsev, Denis Magda Santa Clara, California April 25th, 2017 About the Presentation Problems Existing Solutions Denis Magda
Securing Web Applications. Architecture Alternatives. Web Application Security Roadmap. Defense in Depth. Defense in Depth
V User Terminal Key Secure Storage Personal Computers AntiVirus Certificate Mgmt Authority :::::: Multiplexor Securing Web Applications Jennifer L. Bayuk jennifer@bayuk.com www.bayuk.com 1 Mainframe Wireless
Cybersecurity Metrics: A Red Team Perspective
UNCLASSIFIED Cybersecurity Metrics: A Red Team Perspective Distribution Statement A Distribution: Approved for public release; distribution is unlimited. Bradley R. Horton CISSP-ISSMP, CEH, CISA Chief,
Timing in Cyber Physical Systems. Marc Weiss, Ph.D. NIST, Time and Frequency Division WSTS 2015
Timing in Cyber Physical Systems Marc Weiss, Ph.D. mweiss@nist.gov NIST, Time and Frequency Division WSTS 2015 Timing in Cyber Physical Systems: Outline The term Timing used here as a general term: frequency,
The Telecommunication infrastructure for the smart grid
The Telecommunication infrastructure for the smart grid Challenges for DSOs EURELECTRIC Survey intermediate results Koen Noyens, Advisor Networks Unit Brussels, 5 March 2012 1 EURELECTRIC SURVEY TELECOMMUNICATION
Rediffmail Enterprise High Availability Architecture
Rediffmail Enterprise High Availability Architecture Introduction Rediffmail Enterprise has proven track record of 99.9%+ service availability. Multifold increase in number of users and introduction of
An EMP Mitigation Perspective: Systems and Components. Resilient Grids, LLC
An EMP Mitigation Perspective: Systems and Components Alberto Ramirez Orquin Vanessa Ramirez Resilient Grids, LLC 1 Nature of Electronic Magnetic Pulse (EMP) 2 Nature of EMP EMP/E1 and E2 shock waves,
PMU Time Source Security
PMU Time Source Security Erich Heine Information Trust Institute Authors: Erich Heine, Tim Yardley, Dr. Alejandro Dominguez-Garcia, Daniel Chen 1 Overview PMU time synchronization
A Secure Architecture for the Range-Level Command and Control System of a National Cyber Range Testbed
A Secure Architecture for the Range-Level Command and Control System of a National Cyber Range Testbed Michael Rosenstein / Frank Corvese Michael Rosenstein michael.rosenstein@securedecisions.com 631.759.3910
Planning and Designing a Microsoft Lync Server 2010 Solution
Course 10534A: Planning and Designing a Microsoft Lync Server 2010 Solution Course Details Course Outline Module 1: Overview of the Lync Server 2010 Design Process This module explains all components of
The Google File System
The Google File System Sanjay Ghemawat, Howard Gobioff and Shun Tak Leung Google* Shivesh Kumar Sharma fl4164@wayne.edu Fall 2015 004395771 Overview Google file system is a scalable distributed file system
Why Should You Care About Control System Cybersecurity. Tim Conway ICS.SANS.ORG
Why Should You Care About Control System Cybersecurity Tim Conway ICS.SANS.ORG Events Example #1 Dec 23, 2015 Cyber attacks impacting Ukrainian Power Grid Targeted, synchronized, & multi faceted Three
Designing Fault-Tolerant Applications
Designing Fault-Tolerant Applications Miles Ward Enterprise Solutions Architect Building Fault-Tolerant Applications on AWS White paper published last year Sharing best practices We d like to hear your