LANL Cyber Security Program Overview
Abstract Not Provided
cyber security, information security, program over↗
SEARCH · Search NASA
Results for “cyber security, information security, program overview”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Nuclear Fundamentals Orientation Module 1: LANL Security Overview [Slides]
The presentation covers the following areas: Personnel Security; Substance Abuse Program; Physical Security; Prohibited and Controlled Articles; Information Protection & Cyber Security; Operations Security (OPSEC); Policies and Resources; and, Questions and Answers.
99 GENERAL AND MISCELLANEOUS↗
Path Scan Operational Data-Based Test Report
The TTP program is managed by DHS S&T Cyber Division and facilitates the transition of technology from the research lab to the Homeland Security Enterprise. It serves as a connection point for cyber security researchers, the Federal Government, and the private sector. Technologies targeted are those that are likely to transition successfully to the commercial market and expected to have notable impact on the cyber security of our Nation’s networks or systems. The test element of the TTP program aids in the technology transfer process and is not intended to be adversarial. Additional information on the TTP program and the iterative process used can be found in Appendix A - TTP Program Overview.
97 MATHEMATICS AND COMPUTING↗
DOE Fffice of Nuclear Energy cybersecurity research, development and demonstration program plan
This document describes the Cybersecurity Research Development and Demonstration (RD&D) Program, established by the Department of Energy Office of Nuclear Energy (NE) to provide sciencebased methods and technologies necessary for cost-effective, cyber-secure digital instrumentation, control and communication in collaboration with nuclear energy stakeholders. It provides an overview of program goals, objectives, linkages to organizational strategies, management structure, and stakeholder and cross-program interfaces.
97 MATHEMATICS AND COMPUTING↗
Cyber-Informed Engineering Overview: Joint NERC/INL/E-ISAC Webinar
In July, NERC, the Electricity Information Sharing and Analysis Center (E-ISAC), and Idaho National Laboratory (INL) will host a joint informational webinar to highlight areas focused on integrating cyber and physical security with conventional engineering practices (security integration). NERC's work on these topics represents one of the first focused applications of Cyber-Informed Engineering (CIE). INL is leading the development of philosophy and practices to identify and mitigate the inherent risks of digital technology by including cybersecurity as a core element of engineering risk management. This presentation will provide an overview of CIE, a discussion of how NERC's work represents one of the first new discipline-specific applications of CIE, and an update on significant milestones and resources from the CIE program.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Understanding Resilience Valuation for Energy Systems: An Overview of the NREL-NYSERDA Research Collaboration
Energy resilience has become a national priority as Americans experience more power outages attributed to climate change, extreme weather, and cyber events. Energy system owners and operators recognize that they must prepare differently for outages today than they did in the past. Decision makers at all levels face unique challenges and opportunities in effectively and equitably executing a transition to more resilient power systems. The New York State Energy Research and Development Authority (NYSERDA) recently added resilience to its mission statement. The authority engaged with the National Renewable Energy Laboratory (NREL) in a collaborative effort to: 1) understand options for measuring and valuing resilience investment benefits, and 2) inform how resilience could be operationalized across NYSERDA initiatives and program areas.
ENERGY PLANNING, POLICY, AND ECONOMY↗
Cyber-Informed Engineering Adoption in University Engineering Programs: An Overview of CIE Integration Successes at Nine U.S. Educational Institutions
This report examines the adoption of Cyber-Informed Engineering (CIE) in university engineering programs, driven by the need to protect critical energy infrastructure from adversarial threats. CIE equips current and future engineers and technicians with the necessary mindset, skills, and competencies to enhance the resilience of engineered systems against cyber attacks. This report highlights nine academic partners who are incorporating CIE into their curricula through various approaches, including lectures, courses, and certificates.
42 ENGINEERING↗
Facility Cybersecurity Framework Best Practices
Federal facilities are increasingly adopting automation and connecting to the Internet creating an energy-internet-of-things environment that converges operational technology (OT) and information technology (IT). Today's buildings increasingly weave together networked sensors and cyber and physical systems that enable data to be collected, aggregated, exchanged, stored and monetized in new ways. Building technological advances have created new energy technology, services, markets and value creation opportunities (e.g. transactive energy, two-way grid communications, machine learning, and increased use of renewable and distributed energy resources). But as larger data sets are being exchanged at faster speeds between an increasing number of OT systems, it becomes more difficult to protect the security of the data lifecycle and the physical equipment it interacts with. These challenges are especially difficult to overcome because the economic and environmental gain (interoperability, big data, social networks and ubiquitous information sharing) are driving these prominent trends in the digital age. Often cybersecurity is an afterthought. The U.S. Department of Energy’s (DOE) Federal Energy Management Program (FEMP) funded the Pacific Northwest National Laboratory (PNNL) to develop various cybersecurity tools, trainings, and reports to aid federal facility managers – and other building owners and operators – in better applying frameworks and lessons learned from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), risk management framework (RMF), DOE’s cybersecurity capability maturity model (C2M2), and a wide variety of industry best practices and guidance documents (i.e., NIST 800 series, Department of Defense United Facilities Criteria). This set of tools, collectively known as the FEMP Facility-Related Control System Cyber Toolkit (FRCS Cyber Toolkit)2, is focused on cybersecurity concerns from facility-related control systems and other operational technology (OT), such as industrial control systems (ICS). The FRCS Cyber Toolkit can be applied across six of the sixteen critical infrastructure sectors designated by the Department of Homeland Security, including government facilities, healthcare and public health, commercial facilities (e.g., public assembly, offices, lodging), financial services (e.g., banking and insurance), emergency services (e.g., fire and police stations), and information technology. With increasingly converged IT and OT systems, it is crucial to address OT cybersecurity considerations and assess how the seam of these two systems could impact the overall cybersecurity posture of a facility. The objective of this report is to provide an overview of the best possible method to use FRCS Cyber Toolkit (section 2.0) and distilled cybersecurity best practices for the federal facilities to address growing non-linear cyber threats (section 3.0). Recommendations in this document are aggregated from several NIST and other documents (see Appendix A for additional details).
97 MATHEMATICS AND COMPUTING↗
SIGNATURES OF ILLICIT NUCLEAR PROCUREMENT NETWORKS: AN OVERVIEW OF PRELIMINARY APPROACHES AND RESULTS
The illicit trafficking of strategic nuclear commodities (defined here as the goods needed for a covert nuclear program excluding special nuclear materials) poses a significant challenge to the international nuclear nonproliferation community. Export control regulations, both domestically and internationally, seek to inhibit the spread of strategic nuclear commodities by restricting their sale to parties that may use them for nefarious purposes. However, export controls alone are not sufficient for preventing the illicit transfer of strategic nuclear goods. There are two major pitfalls to relying solely on export control regulations for the deterrence of proliferation of strategic goods. First, export control enforcement today relies heavily on the honesty and willingness of participants to adhere to the legal framework already in place. Secondly, current practices focus on the evaluation of single records which allow for the necessary goods to be purchased separately and hidden within the thousands of legitimate commerce transactions that occur each day, disregarding strategic information regarding several purchases. Our research presents two preliminary data-centric approaches for investigating procurement networks of strategic nuclear commodities. Pacific Northwest National Laboratory (PNNL) has been putting significant effort into nonproliferation activities as an institution, both in terms of the classical nuclear material focused approach and in the examination of other strategic goods necessary to implement a nuclear program. In particular, the PNNL Signature Discovery Initiative (SDI) has codified several scientific methodologies for the detection, characterization, and prediction of signatures that are indicative of a phenomenon of interest. The methodologies and tools developed under SDI have already been applied successfully to problems in bio-forensics, cyber security and power grid balancing efforts and they have now made the nonproliferation of strategic goods into a challenge problem for testing their methodology and tools. As a first step towards the detection and characterization of illicit procurement networks, our research examines procurement networks as defined by a system of entities (people or companies) that enter into transactions of specific items with one another. Once we have defined such networks, we are interested in answering questions about the behavior and characterization of such networks. The questions we wish to answer regarding procurement networks are, first, “Can we detect networks within large, noisy datasets?” and second, “To what extent can we compare multiple networks and identify their similarities?” As procurement networks can be naturally viewed as a graph, we have employed several graph analytic tools to aid in these tasks. In particular, Graphscape, an SDI tool, uses a novel method to approximate edit distance, a graph distance measure based on the number of changes needed to transform one graph into another, in order to measure how similar two given graphs are to each other. Given a set of graphs where vertices represent companies and edges represent a shipment from company A to company B, we can calculate an all-for-all comparison of graphs. In this way, we are able to determine which graphs are most similar, and which require more changes to transform one into the other. The set of graphs to be compared can be further specialized to provide more insight, e.g., using different time periods to explore events in a company life cycle.
graph analysis↗