Brief overview of cutting edge R&D that is used to increase cybersecurity and cyber resiliency of Energy Delivery Systems (EDS). Authored by Dilhan Rodrigo, Information Trust Institute, University of Illinois at Urbana-Champaign.
2. cred-c.org | 2
About Us
• Multidisciplinary research and development
• Ten academic research institutions
• Two national labs
• Industrial advisory board and participation
• Cybersecurity and cyber-resiliency of Energy Delivery Systems (EDS)
• Supports Roadmap to Achieve Energy Delivery Systems Cybersecurity
• R&D ecosystem that leads directly to applications and
methodologies that are validated in realistic contexts
• Funding
• U.S. Department of Energy Office of Electricity Delivery & Energy Reliability
• U.S. Department of Homeland Security Science & Technology Directorate
• Industry Membership Support
4. cred-c.org | 4
CREDC in a nutshell
• Identify and perform cutting edge research and development where
results are actually used to increase cybersecurity and cyber-
resiliency of Energy Delivery Systems (EDS)
• Current Research Theme Areas:
• Cyber-protection Technology
• Cyber Monitoring, Metrics, and Evaluation
• Risk Assessment of EDS Technology and Systems
• Data Analytics for Cyber Event Detection, Management, Recovery
• Resilient EDS Architectures and Networks
• Impact of Disruptive Technologies on EDS
• Validation and Verification
5. cred-c.org | 5
Supporting objectives
• Identify impediments and find highest impact adoptable solutions
• Develop, validate, verify high impact solutions, with industry
• Make solutions available for adoption
• Develop model of operation that is ultimately self-supporting
6. cred-c.org | 6
R&D Ecosystem
Seeking industry collaborators. Email info@cred-c.org or drodrigo@illinois.edu
8. cred-c.org | 8
Industry Engagement : Internships
What it is
• Student spends time at your facilities (paid by
industry or paid by CREDC)
Value
• Recruiting potential
• Employees learn about things they might not
otherwise encounter
• Students bring new knowledge of available tools
and technology
9. cred-c.org | 9
Industry Engagement : Industrial Advisory Board
What it is
• Committee of 12-20 members
• Quarterly (remote) meetings with CREDC
leadership
• Advise on strategic direction
• Review project progress
• Comment on new proposals
Value
• Influence on CREDC direction
• Exposure to broad spectrum of emerging
technologies
• Exposure to viewpoints from diverse corners of
industry
10. cred-c.org | 10
Current Industrial Advisory Board Members
Mark Browning
Exelon Utilities
Fred Cohn
Schneider Electric
James Formea
Eaton Cooper Power Systems
Dennis Gammel
Schweitzer Engineering Laboratories
Dmitry Ishchenko
ABB US Corporate Research Center
Richard Jackson
formerly with Chevron Corporation
Michael Keane
Federal Energy Regulatory Commission (FERC)
Himanshu Khurana
Honeywell Building Solutions
Blake Larsen
Andeavor
Robert M. Lee
Dragos, Inc.
Jonathon Monken
PJM Interconnection
Paul Myrda
Electric Power Research Institute (EPRI)
Bryan Owen
OSIsoft LLC
11. cred-c.org | 11
Industry Engagement : Project Participation
What it is
• Allocation of some time to interact with researchers
• Identify problem of interest to your company
• Advise researchers on
• Objectives, requirements and constraints
• Aid in validation and verification
Value
• Direct influence on development and first access to it
• Knowledge gained from exposure to new tools,
techniques and technologies
• Interaction with students, potential for recruiting
12. cred-c.org | 12
Industry Engagement : Attend Industry Day Event
What it is
• Annual meeting focused on CREDC / Industry interactions
• Presentations on current events
• Lightening talks / poster session
• Moderated / Scribed break-out sessions on topics of
interest
Value
• Exposure to and networking with wide spectrum of CREDC
research and researchers
• Interaction with students, potential for recruiting
• “No attribution” forum for identifying issues, voicing concerns
about cyber resiliency in EDS
13. cred-c.org | 13
Industry Engagement : CREDC Sponsorship
What it is
• Preferred engagement by means of membership fee
Value
• Voice in selection of member-directed CREDC projects
• Access to student resumes, recorded project
presentations
• White papers
• Voice in topic selection, first access to results
• Membership round-table
• Reach out to CREDC leadership for information,
advice
14. cred-c.org | 14
Benefits of working with Universities
• Exposure to a knowledge base larger than a single organization that leads
to:
• More informed decisions about technology investments
• Foreknowledge of emerging threats
• Discovery and use of tools that give better insight into what systems are doing
• Access to future employees
• Influence development of technology that address specific problems
• Gives a sounding board for questions about emerging technologies
• Helping the nation!
• Cyber-security of critical infrastructure is a team sport
15. cred-c.org | 15
Technology Transition
Building on past success…
• AMILYZER
• Monitors traffic among meters and access points at the network, transport, and
application layers to ensure that devices are running in a secure state and that
their operations respect a specified security policy
• Has been successfully deployed by a utility partner since December 2012 and is
currently monitoring a 100,000-meter AMI deployment
• NETWORK PERCEPTION
• Tool that analyzes security vulnerabilities in networked systems
• Developed and commercialized the NP-View tool to help power utilities prepare
for NERC CIP audits
Be part of the future…
16. cred-c.org | 16
Current Research
A few examples…
• SECURITY TECHNOLOGY FOR REMOTE EDS DATA MONITORING APPLIED
TO DRONES
• A generalizable framework for integrating key security technologies in remote
EDS systems such as pipelines
• As a proof of concept, refining this framework and applying it to a specific case of
securing drone-based data gathering for pipelines
17. cred-c.org | 17
Current Research
• ANOMALY DETECTION aNd ANALYSIS (ADNA)
• An online, context-aware, intelligent tool for anomaly detection, anomalous data
analysis, causal reasoning, consequence indication and response suggestion for
SCADA networks
• Smart Grid is currently used for designing. However, ADNA can be easily adapted
to any cyber physical system that use SCADA (oil and gas systems for example)
• OTHER
• Research: https://cred-c.org/research
• Tools and technology development: https://cred-c.org/technologies
18. cred-c.org | 18
Example: Industry Partnership Path
Learn more about the Academic/Industry Partnership with ReliabilityFirst from their
2017 Industry Workshop Presentation Slides.
Collaborative
Research
Agreement
Industry
Relevance
Partnership
Establishment
Research
Motivation
Research
Challenges
Research
Approach
Overcoming
Hurdles
Technology
Transition Plan
Milestones and
Deliverables
