Application of OT Ontologies to Protect and Control Access to Grid Assets Preventing Cyber Grid MIS-Operations
Summary
TDI was awarded a Research and Development contract by DOE to establish a solution that will prevent grid misoperation in both the Utility and Oil & Gas sectors. By utilizing the MITRE ICS ATT&CK framework, TDI selected multiple Tactics, Techniques, and Protocols (TTP’s) to build use cases around. This will prevent the actor from executing an operational command that could change a configuration in a way that could cause disruptive or destructive events(s) to occur which may result in grid failure, production stoppage, or physical damage to humans and/or machines. How ConsoleWorks is breaking through barriers and is the new state of the art in Cybersecurity Currently, the ability to Identify, Protect, Detect, Respond, and Recover, from human actions beyond the HMI or Vendor Application is not available. This approach not only considers the NIST cybersecurity impact of an adversary but enhances coverage to include operational considerations for insiders (vendors, privileged actors, and contractors).