Configuration Security
Abstract
The Configuration Security program is developing technologies to analyze, monitor, and modify the configuration of composed cyber-physical-human systems to identify system vulnerabilities and minimize the attack surface while maintaining functionality and performance. Complex cyber-physical systems, such as ships, airplanes, and critical infrastructure increasingly consist of commodity information technology components. The manual configuration necessary to enable each component to interoperate introduces exploitable cyber vulnerabilities, as do the standard operating procedures that system operators follow. The Configuration Security program will develop capabilities to automate the appropriate configuration of such systems within the operational context. The resulting capability will ensure secure configuration settings and prevent malicious changes to these settings.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2020
- Source ID
- 257b9abf0e1dc38073cb72c284390fe4