Battelle Memorial Institute

Seemita Pal

Sri Nikhil Gupta Gourisetti

Beverly E Johnson

Michael E Mylrea

Arun Veeramany

Siddharth Sridhar

William James Hutton, Iii

Penny L McKenzie

Garill A Coles

Md Touhiduzzaman

Newton B Brown

Travis Ashley

Christopher A Bonebrake

Method include receiving banner information from one or more queries of a network connecting a set of devices, wherein the banner information of one or more of the devices includes common vulnerability and exposure identifiers (CVEs) and the banner information of one or more of the devices does not include a CVE, identifying the devices based on the banner information including classifying devices without known CVEs by a device type, determining vulnerability scores for the devices with known CVEs based on retrieved CVE information, and determining vulnerability scores for the devices without CVEs based on a series of exploitability and impact parameter estimates associated with the device type classifications. Some methods include estimating a cyberattack vulnerability risk for the devices using the determined vulnerability scores.

Mitigation of external exposure of energy delivery systems

Technology related to evaluating cyber-risk for synchrophasor systems is disclosed. In one example of the disclosed technology, a method includes generating an event tree model of a timing-attack on a synchrophasor system architecture. The event tree model can be based on locations and types of timing-attacks, an attack likelihood, vulnerabilities and detectability along a scenario path, and consequences of the timing-attack. A cyber-risk score of the synchrophasor system architecture can be determined using the event tree model. The synchrophasor system architecture can be adapted in response to the cyber-risk score.

Evaluating cyber-risk in synchrophasor systems

Growing community of inventors

Richland, WA, United States of America

Seemita Pal