The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity

Peisert, Sean; Welch, Von

doi:10.1109/MSP.2017.3681058

Title: The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity

Abstract

The Open Science Cyber Risk Profile (OSCRP) working group has created a document that motivates scientists by demonstrating how improving their security posture reduces the risks to their science. This effort aims to both bridge the communication gap between scientists and IT security professionals and allows for the effective management of risks to open science caused by IT security threats.

Authors:

Peisert, Sean ^[1]; Welch, Von ^[2]

Lawrence Berkeley National Lab. (LBNL), Berkeley, CA (United States); Corp. for Education Network Initiatives in California (CENIC), La Mirada, CA (United States); Univ. of California, Davis, CA (United States)
Indiana Univ., Bloomington, IN (United States)

Publication Date:: Mon Oct 02 00:00:00 EDT 2017

Research Org.:: Lawrence Berkeley National Lab. (LBNL), Berkeley, CA (United States)

Sponsoring Org.:: USDOE Office of Science (SC), Advanced Scientific Computing Research (ASCR)

OSTI Identifier:: 1458484

Grant/Contract Number:: AC02-05CH11231

Resource Type:: Accepted Manuscript

Journal Name:: IEEE Security & Privacy

Additional Journal Information:: Journal Volume: 15; Journal Issue: 5; Related Information: © 2003-2012 IEEE.; Journal ID: ISSN 1540-7993

Publisher:: IEEE

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING; OSCRP; Open Science Cyber Risk Profile; security; cyberattacks; cybersecurity; scientific computing; In Focus; computer crime; risk management; software development; computer hacking

Citation Formats


                    Peisert, Sean, and Welch, Von. The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity.  United States: N. p., 2017. 
Web.  doi:10.1109/MSP.2017.3681058.

Copy to clipboard


                    Peisert, Sean, & Welch, Von. The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity.  United States.  https://doi.org/10.1109/MSP.2017.3681058

Copy to clipboard


                    Peisert, Sean, and Welch, Von. Mon .  
"The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity".  United States.  https://doi.org/10.1109/MSP.2017.3681058.  https://www.osti.gov/servlets/purl/1458484.

Copy to clipboard


                    
@article{osti_1458484,

  title        = {The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity},

  author       = {Peisert, Sean and Welch, Von},

  abstractNote = {The Open Science Cyber Risk Profile (OSCRP) working group has created a document that motivates scientists by demonstrating how improving their security posture reduces the risks to their science. This effort aims to both bridge the communication gap between scientists and IT security professionals and allows for the effective management of risks to open science caused by IT security threats.},

  doi          = {10.1109/MSP.2017.3681058},

  journal      = {IEEE Security & Privacy},

  number       = 5,

  volume       = 15,

  place        = {United States},

  year         = {Mon Oct 02 00:00:00 EDT 2017},

  month        = {Mon Oct 02 00:00:00 EDT 2017}

}

Copy to clipboard

Journal Article:

Free Publicly Available Full Text

Accepted Manuscript (DOE)

Publisher's Version of Record

https://doi.org/10.1109/MSP.2017.3681058

Other availability

Search WorldCat to find libraries that may hold this journal

Citation Metrics:

Cited by: 1 work

Citation information provided by
Web of Science

Save / Share:

Export Metadata

Save to My Library

Works referencing / citing this record:

Online Surveillance, Censorship, and Encryption in Academia
journal, October 2019

Tanczer, Leonie Maria; Deibert, Ronald J.; Bigo, Didier
International Studies Perspectives
DOI: 10.1093/isp/ekz016

Similar Records in DOE PAGES and OSTI.GOV collections:

The CYBER security – Competency Health and Maturity Progression (CYBER-CHAMP) model: Extending the National Initiative for Cybersecurity Education (NICE) Framework Across Organizational Security

Journal Article Hott, Jade A. ; Stailey, Shane D. ; Haderlie, Donaven M. ; ... - Cybersecurity Skills Journal: Practice and Research

Problem Statement: There is a pervasive talent deficit in the cybersecurity industry that prevents employers from being able to fill their open positions efficiently. A holistic approach to security is required to ensure organizations have adequate prevention and response capabilities in case of a cyberattack. Specifically, industrial control systems (ICS’s) and their operational technology (OT) components have become a constant target for cyberattacks. Research Questions: It is proposed that the NICE Framework should be extended in the following areas: 1) Include guidance regarding the job roles and competencies for both IT and OT professionals. 2) Offer step-by-step solutions, based onmore »« less
Full Text Available
Cybersecurity Resiliency of Marine Renewable Energy Systems Part 2: Cybersecurity Best Practices and Risk Management

Journal Article de Peralta, Fleurdeliza A. ; Watson, Mark D. ; Bays, Ryan M. ; ... - Marine Technology Society Journal

Marine renewable energy (MRE) is an emerging source of power for marine applications, marine devices, and coastal communities. This energy source relies on industrial control systems and IT to support operations and maintenance activities, which create a pathway for an adversary to gain unauthorized access to systems and data and disrupt operations. Incorporating cybersecurity risk prevention measures and mitigation capabilities from inception, development, operation, to decommissioning of the MRE system and components is paramount to the protection of energy generation and the security of network architecture and infrastructure. To improve the resilience of MRE systems as a predictable, affordable, andmore »« less
https://doi.org/10.4031/mtsj.55.2.4

Full Text Available
Facility Cybersecurity Framework Best Practices

Technical Report Gourisetti, Sri Nikhil G. ; Reeve, Hayden ; Rotondo, Julia A. ; ...

Federal facilities are increasingly adopting automation and connecting to the Internet creating an energy-internet-of-things environment that converges operational technology (OT) and information technology (IT). Today's buildings increasingly weave together networked sensors and cyber and physical systems that enable data to be collected, aggregated, exchanged, stored and monetized in new ways. Building technological advances have created new energy technology, services, markets and value creation opportunities (e.g. transactive energy, two-way grid communications, machine learning, and increased use of renewable and distributed energy resources). But as larger data sets are being exchanged at faster speeds between an increasing number of OT systems, itmore »« less
https://doi.org/10.2172/1660771

Full Text Available
Demonstration of the Cybersecurity Framework through Real-world Cyber Attack

Conference Gourisetti, Sri Nikhil G. ; Mylrea, Michael E. ; Ashley, Travis D. ; ...

The Cybersecurity Framework (CSF) developed by the National Institute of Standards and Technology Cybersecurity, provides five concurrent and continuous functions to Identify, Protect, Detect, Respond, and Recover from cyber threats and vulnerabilities to buildings. Based on the core architecture and security best practices defined in the CSF guidelines, we developed the CSF webtools. The CSF webtools provide actionable functions that can be easily adopted by a facility operator to enhance their critical infrastructure security. The essence is captured in a set of “how-to” instructions for the facility operators to adopt, adapt, and apply to their critical infrastructure facilities. When consideredmore »« less
https://doi.org/10.1109/RWS47064.2019.8971822

Full Text Available
Insider Threat Cybersecurity Framework Webtool & Methodology: Defending Against Complex Cyber-Physical Threats

Conference Mylrea, Michael E. ; Gourisetti, Sri Nikhil G. ; Larimer, Curtis J. ; ...

The paper demonstrates how the Insider Threat Cybersecurity Framework (ITCF) web tool and methodology help provide a more dynamic, defense-in-depth security posture against insider cyber-physical threats. ITCF includes over 30 cyber-physical security best practices to help organizations identify, protect, detect, respond and recover to sophisticated insider threats and vulnerabilities. The following paper tests the efficacy of this approach and helps validate and verify ITCF’s capabilities and features through various insider attacks use-cases. Three different investment scenarios and explored to determine how an organization can most efficiently leverage ICTF to increase their overall security posture against insider attacks. ITCF also facilitatesmore »« less
https://doi.org/10.1109/SPW.2018.00036

Similar Records

Title: The Open Science Cyber Risk Profile: The Rosetta Stone for Open Science and Cybersecurity

Abstract

Citation Formats

Online Surveillance, Censorship, and Encryption in Academia journal, October 2019

Online Surveillance, Censorship, and Encryption in Academia
journal, October 2019