Critical Energy Infrastructure Cyber Defense-in-Depth
Abstract
This project implemented, and successfully demonstrated in a power plant, an aware, fault and intrusion tolerant cyber defense-in-depth for a power plants control system network. Two technologies; Spire, a suite of fault and intrusion tolerant technologies, provided by Johns Hopkins University and Spread Concepts, LLC, and the MANATM, Network Intrusion Detection System (NIDS) with machine-learning tools for cyber situational awareness, provided by Resurgo, LLC, and aligned with the Spire technologies, were demonstrated during the operational validation in the power plant. The MANATM NIDS was able to detect all attacks from initial reconnaissance through exploit and port denial of service to hide the exploits. All systems protected by Spire were not compromised. Additionally, neither technology induced latency nor errors in plant control systems, communications, or devices. Costs, assuming all new equipment and installation by the technology providers, for one installation is estimated to be $250,000.00, not including travel
Document Details
- Document Type
- Technical Report
- Publication Date
- Aug 01, 2018
- Accession Number
- AD1070099
Entities
People
- Eamon Jordan
- Kevin B. Jordan
- Kevin Ruddell