I-Corps: Techniques for Securing and Managing Industrial Control Systems

这个I-Corps项目更广泛的影响/商业潜力是基于创新，可以帮助保护控制国家最关键基础设施的工业控制系统（ICS）（例如，电网、关键制造厂、废水处理厂等）。 该团队技术的目标是帮助最大限度地减少可能导致生命损失、大范围停电、环境灾难和经济损失的妥协。针对ICS运营商的攻击每年都在增加，与此同时，寻求针对ICS的威胁行为者的进入障碍正在减少。这个I-Corps团队开发了可以检测对ICS的各种攻击的技术。这项技术的商业机会是巨大的。该项目探讨了商业化可能导致一个全面的ICS安全平台，减少对关键基础设施ICS的攻击，从而挽救生命和最大限度地减少经济损失。该I-Corps项目利用新技术来增强入侵检测，访问控制，网络管理和工业控制系统（ICS）的恶意软件检测。在I-Corps计划期间，该团队将探索设备指纹识别技术的商业化用途和潜力，该技术利用ICS的两个基本动作（数据采集和物理驱动）和基于网络的方法来检测可编程逻辑控制器（PLC）的危害。I-Corps计划将使团队能够了解使用ICS的组织中最重要的威胁。这些信息将用于帮助团队确定功能开发的优先级，并制定最佳的上市策略。

The broader impact/commercial potential of this I-Corps project is based on innovations that can help to secure industrial control systems (ICSs) that control the Nation's most critical infrastructure (e.g., the electric power grid, critical manufacturing plants, waste water treatment plants, etc.). The goal of this team's technology is to help minimize compromises that can lead to loss of life, widespread blackouts, environmental disasters, and financial loss. Attacks against ICS operators are increasing each years at the same time that barriers to entry for threat actors seeking to target ICSs are reducing. This I-Corps team developed technology that can detect various attacks on ICSs. The commercial opportunity for this technology is significant. This project explores the commercialization that may lead to a comprehensive ICS security platform that reduces attacks on critical infrastructure ICSs, thus saving lives and minimizing financial loss.This I-Corps project utilizes novel techniques to enhance intrusion detection, access control, network management, and malware detection for industrial control systems (ICSs). During the I-Corps program, this team will explore the uses and potential for commercialization of device fingerprinting techniques that leverage the two fundamental actions of ICSs (data acquisition and physical actuation) and a network-based method for detecting the compromise of programmable logic controllers (PLCs). The I-Corps program will allow the team to understand the most significant threats at organizations that use ICSs. This information will be used to enable the team to prioritize their feature development and to develop an optimal go-to-market strategy.