skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Consequence-driven cyber-informed engineering (CCE)

Abstract

The Idaho National Lab (INL) is leading a high-impact, national security-level initiative to reprioritize the way the nation looks at high-consequence risk within the industrial control systems (ICS) environment of the country’s most critical infrastructure and other national assets. The Consequence-driven Cyber-informed Engineering (CCE) effort provides both private and public organizations with the steps required to examine their own environments for high-impact events/risks; identify implementation of key devices and components that facilitate that risk; illuminate specific, plausible cyber attack paths to manipulate these devices; and develop concrete mitigations, protections, and tripwires to address the high-consequence risk. The ultimate goal of the CCE effort is to help organizations take the steps necessary to thwart cyber attacks from even top-tier, highly resourced adversaries that would result in a catastrophic physical effect. CCE participants are encouraged to work collaboratively with each other and with key U.S. Government (USG) contributors to establish a coalition, maximizing the positive effect of lessons-learned and further contributing to the protection of critical infrastructure and other national assets.

Authors:
 [1];  [1];  [1];  [1]
  1. Idaho National Lab. (INL), Idaho Falls, ID (United States)
Publication Date:
Research Org.:
Idaho National Lab. (INL), Idaho Falls, ID (United States)
Sponsoring Org.:
USDOE
OSTI Identifier:
1341416
Report Number(s):
INL/EXT-16-39212
DOE Contract Number:  
AC07-05ID14517
Resource Type:
Technical Report
Country of Publication:
United States
Language:
English
Subject:
97 MATHEMATICS AND COMPUTING; cyber security; cyber-informed; cyber-informed engineering; threat analysis; consequence prioritization; Mission Support Center; electric grid security; critical infrastructure protection

Citation Formats

Freeman, Sarah G., St Michel, Curtis, Smith, Robert, and Assante, Michael. Consequence-driven cyber-informed engineering (CCE). United States: N. p., 2016. Web. doi:10.2172/1341416.
Freeman, Sarah G., St Michel, Curtis, Smith, Robert, & Assante, Michael. Consequence-driven cyber-informed engineering (CCE). United States. doi:10.2172/1341416.
Freeman, Sarah G., St Michel, Curtis, Smith, Robert, and Assante, Michael. Tue . "Consequence-driven cyber-informed engineering (CCE)". United States. doi:10.2172/1341416. https://www.osti.gov/servlets/purl/1341416.
@article{osti_1341416,
title = {Consequence-driven cyber-informed engineering (CCE)},
author = {Freeman, Sarah G. and St Michel, Curtis and Smith, Robert and Assante, Michael},
abstractNote = {The Idaho National Lab (INL) is leading a high-impact, national security-level initiative to reprioritize the way the nation looks at high-consequence risk within the industrial control systems (ICS) environment of the country’s most critical infrastructure and other national assets. The Consequence-driven Cyber-informed Engineering (CCE) effort provides both private and public organizations with the steps required to examine their own environments for high-impact events/risks; identify implementation of key devices and components that facilitate that risk; illuminate specific, plausible cyber attack paths to manipulate these devices; and develop concrete mitigations, protections, and tripwires to address the high-consequence risk. The ultimate goal of the CCE effort is to help organizations take the steps necessary to thwart cyber attacks from even top-tier, highly resourced adversaries that would result in a catastrophic physical effect. CCE participants are encouraged to work collaboratively with each other and with key U.S. Government (USG) contributors to establish a coalition, maximizing the positive effect of lessons-learned and further contributing to the protection of critical infrastructure and other national assets.},
doi = {10.2172/1341416},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2016},
month = {10}
}