Energy and Water Projects: Baseline Automated Security Enumeration and Configuration (BASEC)

Abstract

BASEC provides a scalable, enterprise solution intended to integrate specifically with mission assurance efforts and the automation of cyber hygiene assessments. The current method of evaluating installation energy/water control systems cybersecurity relies on manual evaluations and requires assessment teams, follow-on analysis, and specialized skillsets. Unfortunately, such evaluations only show a snapshot in time of the security posture, and the costs for sustaining an effective Service-wide program in this manner are expensive and unrealistic. The BASEC solution automates the analysis of device-level configuration settings for installation energy/water control systems, identifies vulnerabilities in configurations and provides an effective means for maintaining asset inventory at the Service level.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
May 31, 2023
Accession Number
AD1217039

Entities

People

  • Billy Rios
  • Jonathan Butts

Tags

DTIC Thesaurus Topics

  • Abstracts
  • Air Force
  • Civil Engineering
  • Control Systems
  • Critical Infrastructure
  • Cyberattacks
  • Cybersecurity
  • Department Of Defense
  • Engineering
  • Engineers
  • National Security
  • Risk
  • Security
  • Test And Evaluation
  • User Interface
  • Vulnerability
  • Web Browsers

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Energy Conservation and Renewable Energy Engineering.
  • Systems Analysis and Design

Technology Areas

  • Cyber