Battelle Memorial Institute

Beverly E Johnson

Sri Nikhil Gupta Gourisetti

Michael E Mylrea

Seemita Pal

Harvey D Schindler

Arun Veeramany

Siddharth Sridhar

Garill A Coles

William James Hutton, Iii

Penny L McKenzie

Christopher A Bonebrake

Craig H Allwardt

Johnnie Johnson

Md Touhiduzzaman

Newton B Brown

Travis Ashley

Method include receiving banner information from one or more queries of a network connecting a set of devices, wherein the banner information of one or more of the devices includes common vulnerability and exposure identifiers (CVEs) and the banner information of one or more of the devices does not include a CVE, identifying the devices based on the banner information including classifying devices without known CVEs by a device type, determining vulnerability scores for the devices with known CVEs based on retrieved CVE information, and determining vulnerability scores for the devices without CVEs based on a series of exploitability and impact parameter estimates associated with the device type classifications. Some methods include estimating a cyberattack vulnerability risk for the devices using the determined vulnerability scores.

Mitigation of external exposure of energy delivery systems

Technology related to blockchain cybersecurity solutions and a blockchain applicability framework is disclosed. In one example of the disclosed technology, a system is configured to store, in a database, a plurality of cryptographically-signed records of data transmitted between an asset and a utility historian, and store, in a distributed ledger, a respective hash value corresponding to each record of the database. The system can be further configured to verify a selected record by recomputing a hash value corresponding to the selected record and comparing the recomputed hash value to the respective hash value stored in the distributed ledger in correspondence with the selected record.

Blockchain cybersecurity solutions

Technology related to evaluating cyber-risk for synchrophasor systems is disclosed. In one example of the disclosed technology, a method includes generating an event tree model of a timing-attack on a synchrophasor system architecture. The event tree model can be based on locations and types of timing-attacks, an attack likelihood, vulnerabilities and detectability along a scenario path, and consequences of the timing-attack. A cyber-risk score of the synchrophasor system architecture can be determined using the event tree model. The synchrophasor system architecture can be adapted in response to the cyber-risk score.

Evaluating cyber-risk in synchrophasor systems

Cookie cutter

Growing community of inventors

Richland, WA, United States of America

Beverly E Johnson