Systems and methods for control system security
Abstract
A component security device may be disposed at an interface between a component and a cyber-physical system. The disclosed component security device may be physically and/or electrically coupled between the component and infrastructure of the cyber-physical system, such as a backplane, bus, and/or the like. The component security device may be configured to monitor the component, and selectively isolate the component from the cyber-physical system. Since the component security device is interposed at the interface of the component, the component security device may be capable of isolating the component regardless of whether the component has been compromised (e.g., regardless of whether the component is capable of complying with system commands).
- Inventors:
- Issue Date:
- Research Org.:
- Idaho National Laboratory (INL), Idaho Falls, ID (United States)
- Sponsoring Org.:
- USDOE
- OSTI Identifier:
- 1987121
- Patent Number(s):
- 11579592
- Application Number:
- 16/990,972
- Assignee:
- Battelle Energy Alliance, LLC (Idaho Falls, ID)
- DOE Contract Number:
- AC07-05ID14517
- Resource Type:
- Patent
- Resource Relation:
- Patent File Date: 08/11/2020
- Country of Publication:
- United States
- Language:
- English
Citation Formats
Rieger, Craig G., Springer, Edward E., McCarty, Michael V., and McJunkin, Timothy R. Systems and methods for control system security. United States: N. p., 2023.
Web.
Rieger, Craig G., Springer, Edward E., McCarty, Michael V., & McJunkin, Timothy R. Systems and methods for control system security. United States.
Rieger, Craig G., Springer, Edward E., McCarty, Michael V., and McJunkin, Timothy R. Tue .
"Systems and methods for control system security". United States. https://www.osti.gov/servlets/purl/1987121.
@article{osti_1987121,
title = {Systems and methods for control system security},
author = {Rieger, Craig G. and Springer, Edward E. and McCarty, Michael V. and McJunkin, Timothy R.},
abstractNote = {A component security device may be disposed at an interface between a component and a cyber-physical system. The disclosed component security device may be physically and/or electrically coupled between the component and infrastructure of the cyber-physical system, such as a backplane, bus, and/or the like. The component security device may be configured to monitor the component, and selectively isolate the component from the cyber-physical system. Since the component security device is interposed at the interface of the component, the component security device may be capable of isolating the component regardless of whether the component has been compromised (e.g., regardless of whether the component is capable of complying with system commands).},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2023},
month = {2}
}
Works referenced in this record:
Method for Monitoring Security in and Automation Network, and Automation Network
patent-application, August 2015
- Palmin, Anna
- 14/622005; 20150229660
Data center architecture that supports attack detection and mitigation
patent, October 2017
- Jain, Navendu; Miao, Rui
- US Patent Document 9,800,592
Industrial Control System Emulator for Malware Analysis
patent-application, June 2017
- Chowdhury, Dewan Nadim
- US Patent Application 15/451404; 20170177865
Automatic System Control Failover
patent-application, June 2003
- Gilbert, Gary L.; Quick, Cathleen
- US Patent Application 09/998019; 20030105987
On-machine backplane mounted modular power and data distribution system
patent, October 2009
- Brandt, David D.; Wielebski, Wayne H.; Gollhardt, Neil
- US Patent Document 7,602,617
Self-monitoring and updating of firmware over a network
patent, May 2008
- Kataria, Mukesh; Gafken, Andrew H.; Stevens, William A.
- US Patent Document 7,376,870
System and methodology providing automation security analysis and network intrusion protection in an industrial environment
patent, August 2016
- Brandt, David D.; Hall, Kenwood H.; Anderson, Mark B.
- US Patent Document 9,412,073
Network Access Apparatus Having a Control Module and a Network Access Module
patent-application, February 2015
- Sanchez, Mauricio; Chiu, Jechun; Clark, Charles F.
- US Patent Application 14/372575; 20150058985
Systems, Devices, Agents and Methods for Monitoring and Automatic Reboot and Restoration of Computers, Local, Area Network, Wireless Access Points, Modems and Other Hardware
patent-application, January 2009
- McIntosh, P. Stuckey; James, David LAmar; Tan, Li-Quan
- US Patent Application 12/214313; 20090013210
System and methodology providing automation security analysis and network intrusion protection in an industrial environment
patent, April 2015
- Brandt, David D.; Hall, Kenwood H.; Anderson, Mark
- US Patent Document 9,009,084
Vehicle Middleware
patent-application, June 2013
- Ricci, Christopher P.; Swartz, Douglas W.
- US Patent Application 13/679476; 20130145482
PLC backplane analyzer for field forensics and intrusion detection
patent, May 2015
- Mulder, John; Schwartz, Moses Daniel; Berg, Michael
- US Patent Document 9,032,522
Methods and systems for an interposer board
patent, September 2014
- Cepulis, Darren J.; Reza, Masud M.; Stearns, Michael
- US Patent Document 8,832,348
Group Management in Reconfigurable Machine-to-Machine Systems
patent-application, September 2019
- Yang, Shao-Wen; Zhao, Meiyuan
- US Patent Application 16/306558; 20190296967
Plug and play motor control system
patent, July 2017
- Xu, Dayin; Brandt, David D.; Jensen, David L.
- US Patent Document 9,696,704