Improved Security Information Management for SCADA Systems

Expert Microsystems will increase the scope of its cyber-security surveillance solution beyond intrusion detection systems to include other intelligence sources-firewalls, routers, server logs, and packet sniffers for performing dynamic packet filtering of the SCADA protocols themselves. We will develop a software solution that eliminates 99.9%+ of false positives generated by today's surveillance solutions, identifying true threats and breaches with greatly improved accuracy, and increasing the efficiency of limited cyber-security personnel. An extensible product will be developed that enables future plug-ins for additional SCADA protocols and security enhancements. The solution will be applied to power transmission and distribution, and municipal water applications. Wide deployment within these industries will be assured by developing two product versions-a full-featured version for entities with sophisticated cyber-security resources, and a simplified version for organizations with limited or constrained resources. Ease-of-use, total cost of ownership, and customer input will be priorities during all work tasks-successful commercialization and wide deployment is given the highest priority. Our Phase II customers will be DOE's Western Area Power Administration (manages power grid for fifteen states), San Juan Water District (community services district in Northern California), and EPRI (pending funding approval) who represents our nation's electric utilities.