Threat Intelligence

10/2/2018
02:45 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Department of Energy Invests $28 Million to Advance Cybersecurity of the Nations Critical Energy Infrastructure

Funding to Support the Creation of More Resilient Energy Delivery Systems

WASHINGTON, D.C. –  Today, the U.S. Department of Energy (DOE) is announcing awards of up to $28 million to support the research, development, and demonstration (RD&D) of next-generation tools and technologies to improve the cybersecurity and resilience of the Nation's critical energy infrastructure, including the electric grid and oil and natural gas infrastructure. With funding provided by the Office of Cybersecurity, Energy Security, and Emergency Response’s (CESER) Cybersecurity for Energy Delivery Systems (CEDS) Division, research partnerships will create and make available innovative technologies that help prevent, detect, and mitigate cyber attacks. The teams will pursue innovative approaches such as redesigning the current architecture that exposes the energy grid to cyber threats so that existing and future energy delivery systems can detect adversarial actions and adapt to survive while continuing to support critical functions.

“Protecting the Nation’s energy delivery systems from cyber-threats is a top national priority,” said U.S. Secretary of Energy Rick Perry. “These awards will spur the next level of innovation needed to advance cyber resilience, ensuring that the Nation’s critical energy infrastructure can withstand potential cyber attacks while also still keeping the lights on.”

Each awarded project has a clear path to develop technology that will meet the energy sector’s stringent operational requirements of energy delivery systems that reduce cyber risks. These awarded projects advance the strategy articulated in the DOE Multiyear Plan for Energy Sector Cybersecurity to reduce cyber risks by pursuing high-priority activities that are coordinated with other DOE offices, across Federal agencies, and with energy owners and operators as well as key energy stakeholders in the private sector. A detailed list of the eleven projects is available HERE. Final award amounts are subject to negotiation.

To date, the CEDS program has developed and transitioned 35 technologies to the energy sector by partnering with industry, cybersecurity vendors, academia, and National Laboratories as highlighted in the report CEDS R&D: From Innovation to Practice – Redesigning Energy Delivery Systems to Survive Cyber Attacks. Today’s investment continues DOE's long history of working closely with public and private partners to advance the shared vision of resilient energy delivery systems that are designed, installed, operated and maintained to survive a cyber incident while sustaining critical functions.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
'PowerSnitch' Hacks Androids via Power Banks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/8/2018
The Case for a Human Security Officer
Ira Winkler, CISSP, President, Secure Mentem,  12/5/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-8651
PUBLISHED: 2018-12-12
A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vulnerability." This affects Microsoft Dynamics NAV.
CVE-2018-8652
PUBLISHED: 2018-12-12
A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1.
CVE-2018-8617
PUBLISHED: 2018-12-12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8...
CVE-2018-8618
PUBLISHED: 2018-12-12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8...
CVE-2018-8619
PUBLISHED: 2018-12-12
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Exp...