CAREER: Formal TOols foR SafEty aNd Security of Industrial Control Systems (FORENSICS)

职业：工业控制系统安全和安保的正式工具（取证）

• 批准号: 1846493
• 负责人: Hoda Mehrpouyan
• 金额: $ 45.38万
• 依托单位: Boise State University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-05-01 至 2025-04-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1846493&HistoricalAwards=false
• 关键词: CAREER; Formal; TOols; SafEty; Security

The goal of the project is to develop a multi-layer security framework to provide control technicians and engineers with far superior mechanisms to address the increasing risk of cybersecurity attack on vulnerable water treatment plants and reduce latent risks to public health and safety, industry, and national security. The findings will generate knowledge base and forensic tools to help control engineers to quickly detect and mitigate potential security flaws in central components across control systems, including industrial control software, sensors, and actuators. Industrial control systems are integral to the operations of many of the nation's largest manufacturers as well as to water treatment facilities, oil and gas production, and power plants. It is becoming increasingly common for organizations to facilitate improved communication and efficiency across and between organizations or subsidiaries by connecting their control systems to the Internet. However, in so doing, they become vulnerable to cyberattacks that could result in significant danger or disruption to city or regional populations or to geographically dispersed production chains.The project fills research and deployment gaps by developing a reliable and scalable formal framework by (1) developing formal models, algorithms, tools, and libraries to provide control technicians with a practical toolkit to integrate security into the control software without any expertise in cybersecurity, (2) developing process control anomaly detection mechanism and visualization tools, (3) developing new experimental methods and software to investigate the security of sensors and actuators and detect intrusions that are based on the Advanced Persistent Threat (APT), (4) providing training for students, teachers, control engineers, and control technicians to be more prepared to ask questions about cybersecurity and investigate how to tackle cybersecurity in their daily responsibilities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目的目标是开发一个多层安全框架，为控制技术人员和工程师提供更优越的机制，以应对易受攻击的水处理厂日益增加的网络安全风险，并降低对公共卫生和安全、工业和国家安全的潜在风险。这些发现将产生知识库和取证工具，帮助控制工程师快速检测和减轻控制系统中央组件的潜在安全漏洞，包括工业控制软件、传感器和执行器。工业控制系统是许多国家最大的制造商以及水处理设施，石油和天然气生产和发电厂的运作中不可或缺的一部分。组织通过将其控制系统连接到Internet来促进组织或子公司之间和之间的通信和效率的提高正变得越来越普遍。然而，在这样做的过程中，他们变得容易受到网络攻击，这可能会对城市或地区人口或地理上分散的生产链造成重大危险或破坏。该项目通过开发可靠且可扩展的形式化框架来填补研究和部署空白，通过(1)开发形式化模型、算法、工具和库，为控制技术人员提供实用的工具包，使其无需任何网络安全专业知识即可将安全性集成到控制软件中；(2)开发过程控制异常检测机制和可视化工具。(3)开发新的实验方法和软件，以研究传感器和执行器的安全性，并检测基于高级持续性威胁（APT）的入侵；(4)为学生、教师、控制工程师和控制技术人员提供培训，使他们能够更好地提出有关网络安全的问题，并研究如何在日常工作中解决网络安全问题。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Achieving Cyber-Informed Engineering Through Bayesian Belief Network and Sensitivity Analysis

• DOI: 10.1109/dsa59317.2023.00039
• 发表时间: 2023-08
• 期刊: 2023 10th International Conference on Dependable Systems and Their Applications (DSA)
• 作者: C. Agbo;Hoda Mehrpouyan

An Operational Resilience Metric for Modern Power Distribution Systems

• DOI: 10.1109/qrs-c51114.2020.00065
• 发表时间: 2020-12
• 期刊: 2020 IEEE 20th International Conference on Software Quality, Reliability and Security Companion (QRS-C)
• 作者: T. Phillips;T. McJunkin;C. Rieger;J. Gardner;Hoda Mehrpouyan

Resilience of Industrial Control Systems Using Signal Temporal Logic And Autotuning Mechanism

• DOI: 10.1109/dasc/picom/cbdcom/cy59711.2023.10361314
• 发表时间: 2023-11
• 期刊: 2023 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech)
• 作者: C. Agbo;Hoda Mehrpouyan

A Framework for Evaluating the Resilience Contribution of Solar PV and Battery Storage on the Grid

评估太阳能光伏和电池存储对电网的弹性贡献的框架

• DOI: 10.1109/rws50334.2020.9241296
• 发表时间: 2020
• 期刊: 2020 Resilience Week (RWS
• 作者: Phillips, Tyler;McJunkin, Timothy;Rieger, Craig;Gardner, John;Mehrpouyan, Hoda
• 通讯作者: Mehrpouyan, Hoda

FALCON: Framework for Anomaly Detection in Industrial Control Systems

• DOI: 10.3390/electronics9081192
• 发表时间: 2020-08-01
• 期刊: ELECTRONICS
• 影响因子: 2.9
• 作者: Sapkota, Subin;Mehdy, A. K. M. Nuhil;Mehrpouyan, Hoda
• 通讯作者: Mehrpouyan, Hoda