Cyber Hygiene for Control System Security

Oliver, David

Title: Cyber Hygiene for Control System Security

Full Record
Other Related Research

Abstract

There are many resources from government and private industry available to assist organizations in reducing their attack surface and enhancing their security posture. Furthermore, standards are being written and improved upon to make the practice of securing a network more manageable. And while the specifics of network security are complex, most system vulnerabilities can be mitigated using fairly simple cyber hygiene techniques like those offered above.

Authors:

Oliver, David ^[1]

Idaho National Lab. (INL), Idaho Falls, ID (United States)

Publication Date:: Thu Oct 08 00:00:00 EDT 2015

Research Org.:: Idaho National Lab. (INL), Idaho Falls, ID (United States)

Sponsoring Org.:: USDOE Office of Nuclear Energy (NE)

OSTI Identifier:: 1357478

Report Number(s):: INL/JOU-15-36770
Journal ID: ISSN 9999-0006

Grant/Contract Number:: AC07-05ID14517

Resource Type:: Accepted Manuscript

Journal Name:: The CIP Report

Additional Journal Information:: Journal Volume: 10; Journal Issue: 08; Journal ID: ISSN 9999-0006

Publisher:: Center for Infrastructure Protection & Homeland Security

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING; Business Case; Control Systems; Critical Infrastructure; Cybersecurity

Citation Formats


                    Oliver, David. Cyber Hygiene for Control System Security.  United States: N. p., 2015. 
Web.

Copy to clipboard


                    Oliver, David. Cyber Hygiene for Control System Security.  United States.

Copy to clipboard


                    Oliver, David. Thu .  
"Cyber Hygiene for Control System Security".  United States.  https://www.osti.gov/servlets/purl/1357478.

Copy to clipboard


                    
@article{osti_1357478,

  title        = {Cyber Hygiene for Control System Security},

  author       = {Oliver, David},

  abstractNote = {There are many resources from government and private industry available to assist organizations in reducing their attack surface and enhancing their security posture. Furthermore, standards are being written and improved upon to make the practice of securing a network more manageable. And while the specifics of network security are complex, most system vulnerabilities can be mitigated using fairly simple cyber hygiene techniques like those offered above.},

  doi          = {},

  journal      = {The CIP Report},

  number       = 08,

  volume       = 10,

  place        = {United States},

  year         = {Thu Oct 08 00:00:00 EDT 2015},

  month        = {Thu Oct 08 00:00:00 EDT 2015}

}

Copy to clipboard

Journal Article:

Free Publicly Available Full Text

Accepted Manuscript (DOE)

Publisher's Version of Record

The DOI is not currently available

Other availability

Search WorldCat to find libraries that may hold this journal

Save / Share:

Export Metadata

Save to My Library

Similar Records in DOE PAGES and OSTI.GOV collections:

Cyber Security Testing and Training Programs for Industrial Control Systems

Conference Noyes, Daniel

Service providers rely on industrial control systems (ICS) to manage the flow of water at dams, open breakers on power grids, control ventilation and cooling in nuclear power plants, and more. In today's interconnected environment, this can present a serious cyber security challenge. To combat this growing challenge, government, private industry, and academia are working together to reduce cyber risks. The Idaho National Laboratory (INL) is a key contributor to the Department of Energy National SCADA Test Bed (NSTB) and the Department of Homeland Security (DHS) Control Systems Security Program (CSSP), both of which focus on improving the overall securitymore »« less
Full Text Available
Evaluation Report on "The Department's Unclassified Cyber Security Program"

Technical Report

Industry experts report that security challenges and threats are continually evolving as malicious activity has become more web-based and attackers are able to rapidly adapt their attack methods. In addition, the number of data breaches continues to rise. In an effort to mitigate and address threats and protect valuable information, the Department of Energy anticipated spending about $275 million in Fiscal Year (FY) 2009 to implement cyber security measures necessary to protect its information technology resources. These systems and data are designed to support the Department's mission and business lines of energy security, nuclear security, scientific discovery and innovation, andmore »« less
https://doi.org/10.2172/967831

Full Text Available
DOE/DHS Industrial Control System Cyber Security Programs: A Model for Use in Nuclear Facility Safeguards and Security

Conference Anderson, Robert S. ; Bjornard, Trond ; Schanfein, Mark ; ...

Many critical infrastructure sectors have been investigating cyber security issues for several years especially with the help of two primary government programs. The U.S. Department of Energy (DOE) National SCADA Test Bed and the U.S. Department of Homeland Security (DHS) Control Systems Security Program have both implemented activities aimed at securing the industrial control systems that operate the North American electric grid along with several other critical infrastructure sectors (ICS). These programs have spent the last seven years working with industry including asset owners, educational institutions, standards and regulating bodies, and control system vendors. The programs common mission is tomore »« less
Full Text Available
CS2SAT: THE CONTROL SYSTEMS CYBER SECURITY SELF-ASSESSMENT TOOL

Conference Lee, Kathleen A

The Department of Homeland Security National Cyber Security Division has developed the Control System Cyber Security Self-Assessment Tool (CS2SAT) that provides users with a systematic and repeatable approach for assessing the cyber-security posture of their industrial control system networks. The CS2SAT was developed by cyber security experts from Department of Energy National Laboratories and with assistance from the National Institute of Standards and Technology. The CS2SAT is a desktop software tool that guides users through a step-by-step process to collect facility-specific control system information and then makes appropriate recommendations for improving the system’s cyber-security posture. The CS2SAT provides recommendations frommore »« less
Full Text Available
Cyber Threat and Vulnerability Analysis of the U.S. Electric Sector

Technical Report Glenn, Colleen ; Sterbentz, Dane ; Wright, Aaron

With utilities in the U.S. and around the world increasingly moving toward smart grid technology and other upgrades with inherent cyber vulnerabilities, correlative threats from malicious cyber attacks on the North American electric grid continue to grow in frequency and sophistication. The potential for malicious actors to access and adversely affect physical electricity assets of U.S. electricity generation, transmission, or distribution systems via cyber means is a primary concern for utilities contributing to the bulk electric system. This paper seeks to illustrate the current cyber-physical landscape of the U.S. electric sector in the context of its vulnerabilities to cyber attacks,more »« less
https://doi.org/10.2172/1337873

Full Text Available

Similar Records