Spire: Intrusion-Tolerant SCADA for the Power Grid
|
|
|
- Pierce May
- 5 years ago
- Views:
Transcription
1 Distributed Systems and Networks Lab Spire: Intrusion-Tolerant for the Power Grid Amy Babay*, Thomas Tantillo*, Trevor Aron, Yair Amir June 25, 2017 Distributed Systems and Networks Lab Department of Computer Science Johns Hopkins University
2 is Vulnerable on Several Fronts The move to IP makes vulnerable on several fronts: HMI system compromises system-wide damage s, HMIs limited local effects Network level attacks Routing attacks that disrupt or delay communication Isolating critical components from the rest of the network Primary PLC Backup Therefore, systems must ensure continuous availability and correct operation in the presence of compromises and attacks at both the system and network level June 2017 Yair Amir 2
3 Spire Overview Spire is a system that continues to work even if some critical components have been compromised Intrusion tolerance as the core design principle protecting several different layers of the system: Intrusion-tolerant network Intrusion-tolerant consistent state Intrusion-tolerant Combines proven open-source components with new system components built from scratch to provide a complete top-tobottom solution Open Source - June 2017 Yair Amir 3
4 Spire Components Spines ( Intrusion-Tolerant Network Prime ( Intrusion-Tolerant Replication BFT with performance guarantees under attack ( PLC/ Proxy ( Pvbrowser-based HMI ( Rainer Lehrig and his group OpenPLC ( PLC Emulation (Thiago Alves, Tommy Morris) University of Alabama, Huntsville Multicompiler ( Diversity (Michael Franz group at UC Irvine, Immunant) June 2017 Yair Amir 4
5 Spire Architecture: Single Control Center Internal Spines Network Prime Prime Prime Prime External Spines Network pvbrowser HMI / PLC Proxy / PLC Proxy PLC June 2017 Yair Amir 5
6 pvbrowser-based HMI Pvbrowser is an open source software solution Used in real-world deployments: Romanian power distribution system covering 10,000 km 2 with 50 power switches June 2017 Yair Amir 6
7 Spire in Action Spire as used in the DoD ESTCP experiment March-April 2017 June 2017 Yair Amir 7
8 DoD ESTCP Experiment DoD ESTCP project at Pacific Northwest National Labs Conducted by Resurgo 3/27/17 to 4/7/17 Comparing NISTcompliant architecture with Spire Each attacked by Sandia National Labs red team June 2017 Yair Amir 8
9 NIST-compliant system completely taken over MITM attack from corporate network Direct access to PLC from operational network Spire completely unaffected Attacks in corporate and operational network Given complete access to a replica and code Red team gave up after several days DoD ESTCP Results June 2017 Yair Amir 9
10 Current Systems 2-2 Primary Control Center LAN Cold-Backup Control Center LAN HMI Primary Hot Standby HMI Primary Hot Standby Spines Intrusion- Tolerant Network Substation Substation June 2017 Yair Amir 10
11 Intrusion Tolerance State-of-the-Art in Research 6 (progress: 4) A Single Control Center LAN HMI 3f+2k+1 total replicas 2f+k+1 connected correct replicas required to provide bounded delay Spines Intrusion- Tolerant Network Substation Substation June 2017 Yair Amir 11
12 Novel Resilient Configurations (7/7) (progress: 7) Data Center 1 Data Center 2 Complete solution for 4 total sites: (2 control centers, 2 data centers) Control Center 1 HMI Spines Control Center 2 HMI Sweet-spot balancing the number of data center sites, the number of total replicas, and the communication overhead Spines Substation Substation June 2017 Yair Amir 12
13 Wide Area: Update Latency Histogram 30-hour wide-areadeployment of configuration Control centers at JHU and SVG, data centers at WAS and NYC 10 emulated s sending periodic updates 1.08 million updates (108K from each ) Over % of updates delivered within 100ms (56ms average) June 2017 Yair Amir 13
14 The Spire Forum Forum focused on Open Source Intrusiontolerant control systems for the power grid Please join the Spire forum if interested Distributed Systems and Networks Lab June 2017 Yair Amir 14
Spire: Intrusion-Tolerant SCADA for the Power Grid
Distributed Systems and Networks Lab Spire: Intrusion-Tolerant for the Power Grid Amy Babay*, Thomas Tantillo*, Trevor Aron, Yair Amir June 25, 2017 Distributed Systems and Networks Lab Department of Computer
Network-Attack-Resilient Intrusion- Tolerant SCADA for the Power Grid
Network-Attack-Resilient Intrusion- Tolerant SCADA for the Power Grid Amy Babay, Thomas Tantillo, Trevor Aron, Marco Platania, and Yair Amir Johns Hopkins University, AT&T Labs, Spread Concepts LLC Distributed
Evaluating BFT Protocols for Spire
Evaluating BFT Protocols for Spire Henry Schuh & Sam Beckley 600.667 Advanced Distributed Systems & Networks SCADA & Spire Overview High-Performance, Scalable Spire Trusted Platform Module Known Network
Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid
Network-Attack-Resilient Intrusion-Tolerant SCADA for the Power Grid Amy Babay, Thomas Tantillo, Trevor Aron, Marco Platania, and Yair Amir Johns Hopkins University {babay, tantillo, taron1, yairamir}@cs.jhu.edu
Research Statement. Amy Babay December 2018
Research Statement Amy Babay December 2018 My research focuses on distributed systems and networks, with core goals spanning two domains: enabling new Internet services and building dependable infrastructure.
Toward Open Source Intrusion Tolerant SCADA. Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania
Toward Open Source Intrusion Tolerant SCADA Trevor Aron JR Charles Akshay Srivatsan Mentor: Marco Platania Outline What is SCADA? SCADA Vulnerabilities What is Intrusion Tolerance? Prime PvBrowser Our
Amy Babay April 2018
Amy Babay www.dsn.jhu.edu/~babay 814-528-4205 babay@cs.jhu.edu Education PhD in Computer Science April 2018 PhD Research: Structured overlay networks for a new generation of Internet services, dependable
Amy Babay November Doctor of Philosophy in Computer Science September 2018
Amy Babay www.dsn.jhu.edu/~babay 814-528-4205 babay@cs.jhu.edu Education November 2018 Doctor of Philosophy in Computer Science September 2018 Thesis: Timely, Reliable, and Cost-Effective Internet Transport
Toward Intrusion Tolerant Clouds
Toward Intrusion Tolerant Clouds Prof. Yair Amir, Prof. Vladimir Braverman Daniel Obenshain, Tom Tantillo Department of Computer Science Johns Hopkins University Prof. Cristina Nita-Rotaru, Prof. Jennifer
Toward Intrusion Tolerant Cloud Infrastructure
Toward Intrusion Tolerant Cloud Infrastructure Daniel Obenshain, Tom Tantillo, Yair Amir Department of Computer Science Johns Hopkins University Andrew Newell, Cristina Nita-Rotaru Department of Computer
Virtualizing Industrial Control Systems Testbeds for Cybersecurity Research
Virtualizing Industrial Control Systems Testbeds for Cybersecurity Research CAE Tech Talk 2016 Thiago Alves Faculty: Dr. Tommy Morris Overview Problems: Industrial Control Systems are too big to fit in
Reducing the Costs of Large-Scale BFT Replication
Reducing the Costs of Large-Scale BFT Replication Marco Serafini & Neeraj Suri TU Darmstadt, Germany Neeraj Suri EU-NSF ICT March 2006 Dependable Embedded Systems & SW Group www.deeds.informatik.tu-darmstadt.de
Towards a Practical Survivable Intrusion Tolerant Replication System
Towards a Practical Survivable Intrusion Tolerant Replication System Marco Platania, Daniel Obenshain, Thomas Tantillo, Ricky Sharma, Yair Amir Department of Computer Science at Johns Hopkins University
A FAULT- AND INTRUSION-TOLERANT ARCHITECTURE FOR THE PORTUGUESE POWER DISTRIBUTION SCADA
A FAULT- AND INTRUSION-TOLERANT ARCHITECTURE FOR THE PORTUGUESE POWER DISTRIBUTION SCADA Nuno Medeiros Alysson Bessani 1 Context: EDP Distribuição EDP Distribuição is the utility responsible for the distribution
Towards a Practical Survivable Intrusion Tolerant Replication System
Towards a Practical Survivable Intrusion Tolerant Replication System Marco Platania, Daniel Obenshain, Thomas Tantillo, Ricky Sharma, Yair Amir Department of Computer Science at Johns Hopkins University
Timely, Reliable, and Cost-Effective Internet Transport. Service using Structured Overlay Networks. Amy Babay
Timely, Reliable, and Cost-Effective Internet Transport Service using Structured Overlay Networks by Amy Babay A dissertation submitted to The Johns Hopkins University in conformity with the requirements
M&Ms: CS Freshmen Experience Networks. Department of Computer Science The Johns Hopkins University. Yair Amir Spring 2017 / Week 3 1.
M&Ms: CS Freshmen Experience 600.105 Networks Department of Computer Science The Johns Hopkins University 1 Networks Reading: https://en.wikipedia.org/wiki/history_of_the_internet https://en.wikipedia.org/wiki/routing
Technical Report: Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes
Purdue University Purdue e-pubs Department of Computer Science Technical Reports Department of Computer Science 2013 Technical Report: Increasing Network Resiliency by Optimally Assigning Diverse Variants
Securing the Smart Grid. Understanding the BIG Picture 11/1/2011. Proprietary Information of Corporate Risk Solutions, Inc. 1.
Securing the Smart Grid Understanding the BIG Picture The Power Grid The electric power system is the most capital-intensive infrastructure in North America. The system is undergoing tremendous change
Distributed Systems Intrusion-Tolerant Networks. First, Some Context
Distributed Systems 600.437 Intrusion-Tolerant Networks Department of Computer Science The Johns Hopkins University 1 First, Some Context You ve just heard about Intrusion-Tolerant State Machine Replication
Seamless Overlays for Application Use
1. Overview Seamless Overlays for Application Use Graduate Independent Study, 600.810.12 Edmund Duhaime Advisors: Dr. Yair Amir, Amy Babay May 18, 2017 This project focuses on methods for allowing unmodified
Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes
Increasing Network Resiliency by Optimally Assigning Diverse Variants to Routing Nodes Andrew Newell 1, Daniel Obenshain 2, Thomas Tantillo 2, Cristina Nita-Rotaru 1, and Yair Amir 2 1 Department of Computer
An Attack-Resilient Architecture for Large-Scale Intrusion-Tolerant Replication
An Attack-Resilient Architecture for Large-Scale Intrusion-Tolerant Replication Yair Amir 1, Brian Coan 2, Jonathan Kirsch 1, John Lane 1 1 Johns Hopkins University, Baltimore, MD. {yairamir, jak, johnlane}@cs.jhu.edu
Cyber Security of Industrial Control Systems (ICSs)
Cyber Security of Industrial Control Systems (ICSs) February 23, 2016 Joe Weiss PE, CISM, CRISC, ISA Fellow Managing Partner Applied Control Solutions, LLC (408) 253-7934 joe.weiss@realtimeacs.com Applied
Fast Handoff for Seamless Wireless Mesh Networks
Fast Handoff for Seamless Wireless Mesh Networks Yair Amir, Claudiu Danilov, Michael Hilsdale, Raluca Musaloiu-Elefteri, Nilo Rivera Distributed Systems and Networks Lab Johns Hopkins University MobiSys
Scaling Byzantine Fault-tolerant Replication to Wide Area Networks
Scaling Byzantine Fault-tolerant Replication to Wide Area Networks Cristina Nita-Rotaru Dependable and Secure Distributed Systems Lab Department of Computer Science and CERIAS Purdue University Department
Financial CISM. Certified Information Security Manager (CISM) Download Full Version :
Financial CISM Certified Information Security Manager (CISM) Download Full Version : http://killexams.com/pass4sure/exam-detail/cism required based on preliminary forensic investigation, but doing so as
Tolerating Latency in Replicated State Machines through Client Speculation
Tolerating Latency in Replicated State Machines through Client Speculation April 22, 2009 1, James Cowling 2, Edmund B. Nightingale 3, Peter M. Chen 1, Jason Flinn 1, Barbara Liskov 2 University of Michigan
Secure Mission-Centric Operations in Cloud Computing
Secure Mission-Centric Operations in Cloud Computing Massimiliano Albanese, Sushil Jajodia, Ravi Jhawar, Vincenzo Piuri George Mason University, USA Università degli Studi di Milano, Italy ARO Workshop
Detection and Analysis of Threats to the Energy Sector (DATES)
Detection and Analysis of Threats to the Energy Sector (DATES) Sponsored by the Department of Energy National SCADA Test Bed Program Managed by the National Energy Technology Laboratory The views herein
Riverbed Xirrus Cloud Processes and Data Privacy June 19, 2018
Riverbed Xirrus Cloud Processes and Data Privacy June 19, 2018 PURPOSE OF THIS DOCUMENT... 2 DATA CENTER PROCESSES... 2 Physical and Environmental Security... 2 Resiliency and Redundancy... 2 Network Security...
Methods for Reducing Cybersecurity Vulnerabilities of Power Substations Using Multi-Vendor Smart Devices in a Smart Grid Environment
S&L Logo Methods for Reducing Cybersecurity Vulnerabilities of Power Substations Using Multi-Vendor Smart Devices in a Smart Grid Environment Date: October 24, 2017 Authors/Presenters: J. Matt Cole, PE
Identity-Based Cyber Defense. March 2017
Identity-Based Cyber Defense March 2017 Attackers Continue to Have Success Current security products are necessary but not sufficient Assumption is you are or will be breached Focus on monitoring, detecting
Intermediate Programming Section 03 Introduction. Department of Computer Science Johns Hopkins University. Course Overview.
Intermediate Programming 601.220 Section 03 Introduction Department of Computer Science Johns Hopkins University 1 Course Overview Week 1 http://www.dsn.jhu.edu/courses/cs220/ cs220-help@dsn.jhu.edu 2
BYZANTINE FAULT TOLERANT SOFTWARE- DEFINED NETWORKING (SDN) CONTROLLERS
BYZANTINE FAULT TOLERANT SOFTWARE- DEFINED NETWORKING (SDN) CONTROLLERS KARIM ELDEFRAWY* AND TYLER KACZMAREK** * INFORMATION AND SYSTEMS SCIENCES LAB (ISSL), HRL LABORATORIES ** UNIVERSITY OF CALIFORNIA
Rethinking Security: The Need For A Security Delivery Platform
Rethinking Security: The Need For A Security Delivery Platform Cybercrime In Asia: A Changing Environment & Shifting Focus Asia, more vulnerable to cybercrime because of diversity and breadth of countries
Communication Pattern Anomaly Detection in Process Control Systems
Communication Pattern Anomaly Detection in Process Control Systems Sponsored by the Department of Energy National SCADA Test Bed Program Managed by the National Energy Technology Laboratory The views herein
Zyzzyva. Speculative Byzantine Fault Tolerance. Ramakrishna Kotla. L. Alvisi, M. Dahlin, A. Clement, E. Wong University of Texas at Austin
Zyzzyva Speculative Byzantine Fault Tolerance Ramakrishna Kotla L. Alvisi, M. Dahlin, A. Clement, E. Wong University of Texas at Austin The Goal Transform high-performance service into high-performance
VMware vsphere Clusters in Security Zones
SOLUTION OVERVIEW VMware vsan VMware vsphere Clusters in Security Zones A security zone, also referred to as a DMZ," is a sub-network that is designed to provide tightly controlled connectivity to an organization
Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System
Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System Dave Dolezilek International Technical Director Schweitzer Engineering Laboratories SEL
Wide-area Dissemina-on under Strict Timeliness, Reliability, and Cost Constraints
Wide-area Dissemina-on under Strict Timeliness, Reliability, and Cost Constraints Amy Babay, Emily Wagner, Yasamin Nazari, Michael Dinitz, and Yair Amir Distributed Systems and Networks Lab www.dsn.jhu.edu
vsan Security Zone Deployment First Published On: Last Updated On:
First Published On: 06-14-2017 Last Updated On: 11-20-2017 1 1. vsan Security Zone Deployment 1.1.Solution Overview Table of Contents 2 1. vsan Security Zone Deployment 3 1.1 Solution Overview VMware vsphere
Sachin Shetty Old Dominion University April 10, Cyber Risk Scoring and Mitigation(CRISM)
Sachin Shetty Old Dominion University sshetty@odu.edu April 10, 2019 Cyber Risk Scoring and Mitigation(CRISM) Customer Need - Life in the Security Operation Center Intrusion Detection System alerts Prioritized
The Design and Implementation of a Next Generation Name Service for the Internet (CoDoNS) Presented By: Kamalakar Kambhatla
The Design and Implementation of a Next Generation Name Service for the Internet (CoDoNS) Venugopalan Ramasubramanian Emin Gün Sirer Presented By: Kamalakar Kambhatla * Slides adapted from the paper -
CprE 458/558: Real-Time Systems. Lecture 17 Fault-tolerant design techniques
: Real-Time Systems Lecture 17 Fault-tolerant design techniques Fault Tolerant Strategies Fault tolerance in computer system is achieved through redundancy in hardware, software, information, and/or computations.
Minimum Standards for Connecting to the UCLA Network
Minimum Standards for Connecting to the UCLA Network Last April, the CSG approved a set of minimum standards for connecting to the UCLA network that were based on a policy that had been developed by Berkeley.
EMP and the U.S. Power Grid
EMP and the U.S. Power Grid An EPRI Update April 26, 2017 Rob Manning VP Transmission and Distribution EPRI Electric Power Research Institute 2 Historical Perspective U.S. government (and others) known
Introducing Cyber Resiliency Concerns Into Engineering Education
Introducing Cyber Resiliency Concerns Into Engineering Education Mr. Tom McDermott Georgia Tech Research Institute Mr. Barry Horowitz University of Virginia NDIA 20 th Annual Systems Engineering Conference
Exploring the ISA100.11a Standard. Exploring the ISA100.11a Standard. William (Bill) Ayers America s OneWireless Consultant.
Exploring the ISA100.11a Standard March 2012 William (Bill) Ayers America s OneWireless Consultant Exploring the ISA100.11a Standard WHY Standards World Leader SolutionsFocused Greatest Flexibility International
SECURITY ON AWS 8/3/17. AWS Security Standards MORE. By Max Ellsberry
SECURITY ON AWS By Max Ellsberry AWS Security Standards The IT infrastructure that AWS provides has been designed and managed in alignment with the best practices and meets a variety of standards. Below
Customizable Fault Tolerance for Wide-Area Replication
Customizable Fault Tolerance for Wide-Area Replication Yair Amir 1, Brian Coan 2, Jonathan Kirsch 1, John Lane 1 1 Johns Hopkins University, Baltimore, MD. {yairamir, jak, johnlane}@cs.jhu.edu 2 Telcordia
Datacentre Milton Keynes Hall C Data sheet
Datacentre Milton Keynes Hall C Data sheet Data sheet Datacentre Milton Keynes Hall C Find us With 10 datacentres, over 4,500 racks and a 10Gb resilient core network between our datacentre locations, Pulsant
Firewalls (IDS and IPS) MIS 5214 Week 6
Firewalls (IDS and IPS) MIS 5214 Week 6 Agenda Defense in Depth Evolution of IT risk in automated control systems Security Domains Where to put firewalls in an N-Tier Architecture? In-class exercise Part
Rediffmail Enterprise High Availability Architecture
Rediffmail Enterprise High Availability Architecture Introduction Rediffmail Enterprise has proven track record of 99.9%+ service availability. Multifold increase in number of users and introduction of
Department of Defense Installation Energy Resilience
Department of Defense Installation Energy Resilience Dr. Ariel Castillo Senior Energy Resilience Program Manager OASD (Energy, Installations & Environment) June 8, 2017 DISTRIBUTION STATEMENT A. Approved
The Telecommunication infrastructure for the smart grid
The Telecommunication infrastructure for the smart grid Challenges for DSOs EURELECTRIC Survey intermediate results Koen Noyens, Advisor Networks Unit Brussels, 5 March 2012 1 EURELECTRIC SURVEY TELECOMMUNICATION
PREEMPTIVE PREventivE Methodology and Tools to protect utilities
PREEMPTIVE PREventivE Methodology and Tools to protect utilities 2014 2017 1 With the financial support of FP7 Seventh Framework Programme Grant agreement no: 607093 Preemptive goal The main goal of PREEMPTIVE
Practical Byzantine Fault Tolerance (The Byzantine Generals Problem)
Practical Byzantine Fault Tolerance (The Byzantine Generals Problem) Introduction Malicious attacks and software errors that can cause arbitrary behaviors of faulty nodes are increasingly common Previous
The Key to Disaster Recovery
The Key to Disaster Recovery The key to a high-performing IT disaster recovery plan is having the right mix of solutions to achieve your organization s need for speedy recovery and maximum value. Bluelock
Designing Fault-Tolerant Applications
Designing Fault-Tolerant Applications Miles Ward Enterprise Solutions Architect Building Fault-Tolerant Applications on AWS White paper published last year Sharing best practices We d like to hear your
Exercise of FERC Authority for Cybersecurity of the North American Electric Grid
Exercise of FERC Authority for Cybersecurity of the North American Electric Grid Thomas S. Popik Joseph M. Weiss George R. Cotter FERC Docket RM15-14-000 www.resilientsocieties.org Agenda Overall Concerns
Establishing a Framework for Effective Testing and Validation of Critical Infrastructure Cyber-Security
Establishing a Framework for Effective Testing and Validation of Critical Infrastructure Cyber-Security Michael John SmartSec 2016, Amsterdam www.encs.eu European Network for Cyber Security The European
Parallel Databases C H A P T E R18. Practice Exercises
C H A P T E R18 Parallel Databases Practice Exercises 181 In a range selection on a range-partitioned attribute, it is possible that only one disk may need to be accessed Describe the benefits and drawbacks
Digital Transformation of Power Delivery
Digital Transformation of Power Delivery Keynote Speech Professor Saifur Rahman, PhD Virginia Tech, USA IEEMA Engineer Infinite Conference, Delhi NCR, India, 14 March 2018 Traditional Electricity Delivery
Synology High Availability (SHA)
Synology High Availability (SHA) Based on DSM 5.1 Synology Inc. Synology_SHAWP_ 20141106 Table of Contents Chapter 1: Introduction... 3 Chapter 2: High-Availability Clustering... 4 2.1 Synology High-Availability
WEBSCALE CONVERGED APPLICATION DELIVERY PLATFORM
SECURITY ANALYTICS WEBSCALE CONVERGED APPLICATION DELIVERY PLATFORM BLAZING PERFORMANCE, HIGH AVAILABILITY AND ROBUST SECURITY FOR YOUR CRITICAL WEB APPLICATIONS OVERVIEW Webscale is a converged multi-cloud
Document Sub Title. Yotpo. Technical Overview 07/18/ Yotpo
Document Sub Title Yotpo Technical Overview 07/18/2016 2015 Yotpo Contents Introduction... 3 Yotpo Architecture... 4 Yotpo Back Office (or B2B)... 4 Yotpo On-Site Presence... 4 Technologies... 5 Real-Time
Awareness Technologies Systems Security. PHONE: (888)
Awareness Technologies Systems Security Physical Facility Specifications At Awareness Technologies, the security of our customers data is paramount. The following information from our provider Amazon Web
Dynamic Risk Management for Cyber Defence
Dynamic Risk Management for Cyber Defence Douglas Wiemer Director, Cyber Security Solutions FP7 Project number 610416 RHEA Group Consortium Participants The User agency: Acea Group Founded in 1909 as the
Industrial Control System Cyber Security
Industrial Control System Cyber Security Disaster Recovery Information Exchange Bruce Tyson June 28, 2017 Lunch and Learn Introduction Bruce Tyson is a certified engineering technologist (CET Telecommunications
An Empirical Study of High Availability in Stream Processing Systems
An Empirical Study of High Availability in Stream Processing Systems Yu Gu, Zhe Zhang, Fan Ye, Hao Yang, Minkyong Kim, Hui Lei, Zhen Liu Stream Processing Model software operators (PEs) Ω Unexpected machine
Securing Your Data ATA Spec 42. Regan Brossard - The Boeing Company June 2017
Securing Your Data ATA Spec 42 Regan Brossard - The Boeing Company June 2017 Agenda PKI - Use in the Aviation Industry and why is it necessary Guidance for Transitioning to Connected Airplanes Choosing
Veracity: Practical Secure Network Coordinates via Vote-Based Agreements
Veracity: Practical Secure Network Coordinates via Vote-Based Agreements Micah Sherr, Matt Blaze, and Boon Thau Loo University of Pennsylvania USENIX Technical June 18th, 2009 1 Network Coordinate Systems
An Overlay Architecture for End-to-End Internet Service Availability
An Overlay Architecture for End-to-End Internet Service Availability Angelos Stavrou Network Security Lab Computer Science Department, Columbia University Overview of the talk Problem Motivation Summary
Smart Grid vs. The NERC CIP
Smart Grid vs. The NERC CIP Tobias Whitney, MBA GE Smart Grid Center of Excellence 1 First The Bottom Line Security & Privacy are paramount Smart Grid concerns of regulators and the public Currently every
Integration of the Energy Industry
Session 2: Energy Integration Integration of the Energy Industry Tammie Gibson, PMP Schneider Electric August 9, 2016 Rhode Island Convention Center Providence, Rhode Island Overview Industry has become
BENCHMARK: PRELIMINARY RESULTS! JUNE 25, 2014!
BENCHMARK: PRELIMINARY RESULTS JUNE 25, 2014 Our latest benchmark test results are in. The detailed report will be published early next month, but after 6 weeks of designing and running these tests we
Which technology to choose in AWS?
Which technology to choose in AWS? RDS / Aurora / Roll-your-own April 17, 2018 Daniel Kowalewski Senior Technical Operations Engineer Percona 1 2017 Percona AWS MySQL options RDS for MySQL Aurora MySQL
Atlas Technology White Paper
Atlas Technology White Paper 2017 Bomgar Corporation. All rights reserved worldwide. BOMGAR and the BOMGAR logo are trademarks of Bomgar Corporation; other trademarks shown are the property of their respective
Toward All-Hazards Security and Resilience for the Power Grid
Toward All-Hazards Security and Resilience for the Power Grid Juan Torres Associate Laboratory Director, Energy Systems Integration National Renewable Energy Laboratory December 6, 2017 1 Grid Modernization
Robust BFT Protocols
Robust BFT Protocols Sonia Ben Mokhtar, LIRIS, CNRS, Lyon Joint work with Pierre Louis Aublin, Grenoble university Vivien Quéma, Grenoble INP 18/10/2013 Who am I? CNRS reseacher, LIRIS lab, DRIM research
INTRUSION-TOLERANT REPLICATION UNDER ATTACK. Jonathan Kirsch
INTRUSION-TOLERANT REPLICATION UNDER ATTACK by Jonathan Kirsch A dissertation submitted to The Johns Hopkins University in conformity with the requirements for the degree of Doctor of Philosophy. Baltimore,
Cyber security for digital substations. IEC Europe Conference 2017
Cyber security for digital substations IEC 61850 Europe Conference 2017 Unrestricted Siemens 2017 siemens.com/gridsecurity Substation Digitalization process From security via simplicity 1st generation:
CATALYZING CYBER SECURITY INNOVATION THROUGH CYBER DEFENSE COMPETITIONS
erhtjhtyhy DEFENDING TOMORROW S INFRASTRUCTURE TODAY CATALYZING CYBER SECURITY INNOVATION THROUGH CYBER DEFENSE COMPETITIONS JENNIFER FOWLER Cyber Security Analyst jfowler@anl.gov 630-252-8707 AMANDA JOYCE
Rethinking Security CLOUDSEC2016. Ian Farquhar Distinguished Sales Engineer Field Lead for the Gigamon Security Virtual Team
Rethinking Security CLOUDSEC2016 Ian Farquhar Distinguished Sales Engineer Field Lead for the Gigamon Security Virtual Team Breaches Are The New Normal Only The Scale Surprises Us OPM will send notifications
Incident Handling and Response
Incident Handling and Response Network Security Workshop 29-31 May 2017 Phnom Penh, Cambodia Motivation Security incidents (violations) do happen! How do you minimise damage (disruptions)? Coordinated
High Availability for Cisco Unified Communications on the Cisco Unified Computing System (UC on UCS)
White Paper High Availability for Cisco Unified Communications on the Cisco Unified Computing System (UC on UCS) Updated January 2013 2012 Cisco and/or its affiliates. All rights reserved. This document
Cyber Security of Power Grids
Cyber Security of Power Grids Chen-Ching Liu Boeing Distinguished Professor Director, Energy Systems Innovation Center Washington State University In Collaboration with M. Govindarasu, Iowa State University
Getting Started Guide
Getting Started Guide Introduction Vembu Technologies For more than 15 years, Vembu has been delivering simplified and powerful backup solutions through its portfolio of products. You will be joining thousands
Designing a new IEC substation architecture
Designing a new IEC 61850 substation architecture Gerrit Dogger Senior Product and Application Specialist Cooper Power Systems gerrit.dogger@cybectec.com Garry Tennese Station Integration Specialist Manitoba
Conservation Voltage Reduction with AMI
Conservation Voltage Reduction with AMI Ilya Roytelman, Ph.D. Principal Engineer Distribution Systems Applications Engineering Conference June 10, 2013 Trade Secret This document and attachments contain
EMC CLARiiON CX3 UltraScale Series The Proven Midrange Storage
EMC CLARiiON CX3 UltraScale Series The Proven Midrange Storage Erez Etzyon Senior Technology Consultant CLARiiON CX3 UltraScale Series Breakthrough Architecture and Innovation Designed to Deliver New Levels
NET EXPERT SOLUTIONS PVT LTD
Module 1: Implementing Advanced Network Services In this module students will be able to configure advanced features for Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS), and configure
Web Security. Outline
Security CS 161/194-1 Anthony D. Joseph November 21, 2005 s Outline Static and Dynamic Content Firewall review Adding a DMZ Secure Topologies 2 1 Polls How many people have set up a personal web server?
Meeting the Challenges of Enhancing Power Sector Resilience
Meeting the Challenges of Enhancing Power Sector Resilience EMERGING PRACTICES Dr. Vivien Foster Global Lead, Energy Markets The World Bank Asian Clean Energy Forum Manila, the Philippines June 5, 2017
Technical Description: Nixu Registry Server
Technical Description: Nixu Registry Server Nixu Software Oy Ltd A Nixu Group Company Keilaranta 15 FI-02150 Espoo Finland 1 1. Overview of Nixu Registry Server Nixu Registry Server is a Domain Name Registry
CIS Top 20 #10 Data Recovery Capability. Lisa Niles: CISSP, Director of Solutions Integration
CIS Top 20 #10 Data Recovery Capability Lisa Niles: CISSP, Director of Solutions Integration CSC # 10 Data Recovery Capability Center for Internet Security (CIS) states the following is the key principle
Cyber Threat Assessment and Mitigation for Power Grids Lloyd Wihl Director, Application Engineering Scalable Network Technologies
Cyber Threat Assessment and Mitigation for Power Grids Lloyd Wihl Director, Application Engineering Scalable Network Technologies lwihl@scalable-networks.com 2 The Need OT security particularly in the
Byzantine Fault Tolerance
Byzantine Fault Tolerance CS6450: Distributed Systems Lecture 10 Ryan Stutsman Material taken/derived from Princeton COS-418 materials created by Michael Freedman and Kyle Jamieson at Princeton University.
GNUnet Distributed Data Storage
GNUnet Distributed Data Storage DHT and Distance Vector Transport Nathan S. Evans 1 1 Technische Universität München Department of Computer Science Network Architectures and Services July, 24 2010 Overview