Battelle Memorial Institute

Other

Cisco Technology, Inc.

Bora A Akyol

Jereme Nathan Haack

Cody William Tews

Anand V Kulkarni

Brandon J Carpenter

Wendy M Maiden

Selim Ciraci

Philip Allen Craig, Jr

William Timothy Strayer

Ruixi Yuan

Navindra Yadav

Atul Mahamuni

Jian Yin

Thomas Jeffrey Enderwick

Shashi Kumar

Thomas E Carroll

Michael E Mylrea

Aji Joseph

Azim Ozakil

Penny L McKenzie

Ian Gorton

Peirong Feng

Sambasivam Valliappan

Kyle E Monson

Keith W Thornhill

A cybersecurity infrastructure command validation system is provided herein for validating asset commands issued within an infrastructure network. The cybersecurity infrastructure command validation system can be integrated into an infrastructure network to monitor and validate infrastructure asset commands in real-time or while the infrastructure network is active. The cybersecurity infrastructure command validation system can receive or intercept commands issued by asset controllers. The cybersecurity infrastructure command validation system can validate the commands based on a command validation model. The command validation model can represent normal operating behavior of the infrastructure network. The cybersecurity infrastructure command validation system can provide valid commands to the intended infrastructure asset, or can reject invalid commands. The cybersecurity infrastructure command validation system can store validation results for use in updating the command validation model. The cybersecurity infrastructure command validation system can flag or otherwise warn the infrastructure network or administrators of invalid commands.

Integrated behavior-based infrastructure command validation

Disclosed below are representative embodiments of methods, apparatus, and systems for monitoring and using data in an electric power grid. For example, one disclosed embodiment comprises a sensor for measuring an electrical characteristic of a power line, electrical generator, or electrical device; a network interface; a processor; and one or more computer-readable storage media storing computer-executable instructions. In this embodiment, the computer-executable instructions include instructions for implementing an authorization and authentication module for validating a software agent received at the network interface; instructions for implementing one or more agent execution environments for executing agent code that is included with the software agent and that causes data from the sensor to be collected; and instructions for implementing an agent packaging and instantiation module for storing the collected data in a data container of the software agent and for transmitting the software agent, along with the stored data, to a next destination.

Intelligent sensor and controller framework for the power grid

A system and method of managing time-series data for smart grids is disclosed. Data is collected from a plurality of sensors. An index is modified for a newly created block. A one disk operation per read or write is performed. The one disk operation per read includes accessing and looking up the index to locate the data without movement of an arm of the disk, and obtaining the data. The one disk operation per write includes searching the disk for free space, calculating an offset, modifying the index, and writing the data contiguously into a block of the disk the index points to.

Method and system for managing power grid data

In one embodiment, a method includes receiving a communication from an endpoint device at a network access device located within a data path between the endpoint device and a network, identifying a network admission control policy for the endpoint device, enforcing at the network access device, the network admission control policy for traffic received from the endpoint device, and forwarding at the network access device, traffic from the endpoint device to the network in accordance with the network admission control policy. An apparatus is also disclosed.

Integration of network admission control functions in network access devices

A cell relay switch includes an output port for transmitting cells to multiple destinations. The output port further includes a queuing buffer, a controller, and an output processor. The buffer receives a plurality of cells of a packet from a source. The buffer temporarily stores the cells before transmission by the output processor. The controller controls the storing of the received cells in the buffer by determining a total number of the cells in the packet and a number of cells to be received from different packets, deciding whether the buffer contains sufficient space to store the received cells based on the total number of cells in the packet, the number of cells to be received from the different packets, and the rates at which cells are received and drained from the buffer. The buffer is commanded by the controller to store the received cells when the buffer contains sufficient space and discard the received cells when the buffer contains insufficient space.

Cell discard scheme for IP traffic over a cell relay infrastructure

A method and system for communicating a packet over a cell relay satellite network, without establishing a connection in the cell relay satellite network, comprises the steps of segmenting the packet into a number of segments at a source node in the communications network, generating for each of the segments a fixed size cell that includes a cell header and a payload with a prefix, a downlink beam locator, and a source node identifier included in the cell header, and inserting each segment into the payload of each generated cell, respectively, and transmitting the cells to the cell relay satellite. A cell relay satellite receives each transmitted cell from the source node, and broadcasts each cell on a downlink beam corresponding to the downlink beam locator in each cell header. A destination node receives each broadcasted cell on the downlink beam, and re-assembles the packet from the received cells. Specifically, the destination node re-assembles the packet by identifying the cells corresponding to the packet, and appending the segments inside the cell payloads together, in the order of receipt of the identified cells. Finally, the destination node may identify a destination address in the packet, and may route the packet to the identified destination address, which may reside in another communications network.

Method and system for connectionless communication in a cell relay satellite network

Growing community of inventors

Richland, WA, United States of America

Bora A Akyol