Search NASA⌕ Search

SEARCH · Search NASA

Results for “Cybersecurity for the Operational Technology Environment (CyOTE)”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

22 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Cybersecurity for System Operators

SERC's System Operator Conference is an annual education and sustainment training for electric power system operators across the southeastern United States. In recognition of the growing importance of cybersecurity for energy systems, a block of instruction on cybersecurity concepts was included for this year's conferences. This presentation provides an overview of the need for and general approach used in the DOE CESER-sponsored Cybersecurity for the Operational Technology Environment (CyOTE) program, tailored for electric power system operators. NERC's updated Cyber Intrusion Guide for System Operators is reviewed, explaining how it is an operationalization of some of CyOTE's principles and approach.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Neighborhood Keeper Program Review

Dragos provided INL access to their Neighborhood Keeper platform, which contains simulated data, sample reports given to utilities, and access to anonymized program data that is sent from utilities to the cloud. Dragos has specifically asked INL to review the available data and respond to the following questions: 1) What detections or combinations of detections are most useful? 2) What additional analysis would benefit the electricity subsector? 3) How could Neighborhood Keeper reporting be modified to benefit the electricity subsector? 4) What lessons learned from the Cybersecurity for the Operational Technology Environment (CyOTE) program could be provided? 5) Based on INL’s experience with utilities, are there lessons learned about data sharing that could be provided? 6) Are there recommendations that could benefit the electricity subsector?

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH)

The Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH) provides a framework for augmenting an organization’s existing security controls with CyOTE developed analyses. CATCH collects, stores, analyzes, and creates STIX reports on anomalous data. CATCH connects the CyOTE analysis framework together with the MITRE ICS ATT&CK® patterns and highlights areas of improvement and further research. This tool is designed to enhance an organization’s security controls by providing a structured approach to collecting, storing, analyzing, and reporting anomalous data.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Bayesian Attack Model (BAM)

The Bayesian Attack Model (BAM) is an analytical tool designed to enhance the comprehension of adversarial activity in OT environments. BAM leverages both expert cybersecurity insights and historical data to characterize the likelihood of adversarial behavior given anomalous observable events.

99 GENERAL AND MISCELLANEOUS↗