Skip to main content
OSTI.GOVU.S. Department of Energy Office of Scientific and Technical Information
U.S. Department of Energy
Office of Scientific and Technical Information
 

Evaluating Methods of Software Bill of Materials Generation to Enhance Nuclear Power Plant Cybersecurity

Journal Article · · Nuclear Technology
 [1];  [1];  [1];  [1];  [2];  [1]
  1. Georgia Institute of Technology, Atlanta, GA (United States)
  2. Idaho National Laboratory (INL), Idaho Falls, ID (United States)
+ Show Author Affiliations
Instrumentation and control (I&C) systems in nuclear power plants (NPPs) are potential targets of cyberattacks and can prove deleterious for the safety of the NPPs. A Software Bill of Materials (SBOM) provides a detailed list of the various components and their dependencies in software, which helps in vulnerability and risk assessment for cyber hygiene and situational awareness. For an NPP, the process of generating an accurate SBOM report can be complex due to the legacy systems and firmware binaries involved. While most current SBOM tools are focused more on modern internet technology software, this research provides insights and guidelines for an NPP to generate an accurate and efficient SBOM. Here, the paper proposes a new methodology to help NPPs categorize software and use appropriate tools to generate SBOMs for their digital I&C systems.
Research Organization:
Idaho National Laboratory (INL), Idaho Falls, ID (United States)
Sponsoring Organization:
USDOE Office of Nuclear Energy (NE)
Grant/Contract Number:
AC07-05ID14517
OSTI ID:
2587599
Report Number(s):
INL/JOU--23-75742-Rev000
Journal Information:
Nuclear Technology, Journal Name: Nuclear Technology Journal Issue: 6 Vol. 211; ISSN 0029-5450; ISSN 1943-7471
Publisher:
Informa UK LimitedCopyright Statement
Country of Publication:
United States
Language:
English

References (4)

Cyber security issues imposed on nuclear power plants journal March 2014
Robust localized cyber-attack detection for key equipment in nuclear power plants journal October 2020
Building resilient medical technology supply chains with a software bill of materials journal February 2021
Software Bills of Materials Are Required. Are We There Yet? journal March 2023

Figures / Tables (5)

Fig. 2(p. 15)figure Fig. 2
TABLE II(p. 14)table TABLE II
Fig. 1(p. 8)figure Fig. 1
Fig. 3(p. 17)figure Fig. 3
TABLE I(p. 11)table TABLE I

Similar Records

Software Bill of Materials in the Nuclear Industry
Conference · Tue Jun 20 20:00:00 EDT 2023 · OSTI ID:2279155
Towards Software Bill of Materials in the Nuclear Industry
Technical Report · Wed Aug 31 20:00:00 EDT 2022 · OSTI ID:1901825
SCA Tools - SCRM Value Add or Lossy Noise Machines
Conference · Tue Oct 29 20:00:00 EDT 2024 · OSTI ID:2479528

Related Subjects

SBOM
Software Bill of Materials
cybersecurity
firmware analysis