Basically all activities in our society depend on infrastructures such as energy delivery or communications. It is becoming increasingly important to secure those infrastructures against malicious cyber attacks. The Infrastructure Security program conducts research, development, and supporting activities aimed at improving the security of infrastructures such as electric power, oil and natural gas, financial systems, telecommunications, and the Internet.

Director: Dr. Ulf Lindqvist

Staff Members:

• Dr. Steven Cheung
• Jenny McNeill
• Martin Fong
• Keith Skinner
• Laura Tinnel
• Dr. Vinod Yegneswaran

• Cybersecurity Experimentation of the Future (CEF)
• Detection and Analysis of Threats to the Energy Sector (DATES)
• Internet of Things Security and Privacy Center (IoTSPC)
• Process Control Systems Security
• Sharing Expertise and Artifacts for Reuse through Cybersecurity Community Hub (SEARCCH)

• Toward Findable, Accessible, Interoperable, and Reusable Cybersecurity Artifacts  (2022)
• Cryptography Review of W3C Verifiable Credentials Data Model (VCDM) and Decentralized Identifiers (DIDs) Standards and Cryptography Implementation Recommendations  (2021)
• Cyber State Requirements for Design and Validation of Trust in the Critical Transportation Infrastructure  (2020)
• A Comparative Analysis Approach for Deriving Failure Scenarios in the Natural Gas Distribution Infrastructure  (2019)
• SRI International Work on Cybereconomic Incentives for the Department of Homeland Security Science and Technology Directorate Cyber Security Division  (2015)
• Government-Funded R&D to Drive Cybersecurity Technologies  (2015)
• Crossing the "Valley of Death": Transitioning Cybersecurity Research into Practice  (2013)
• Host Protection Strategies for Industrial Control Systems  (2012)
• Detection, Correlation, and Visualization of Attacks against Critical Infrastructure Systems  (2010)
• Communication Pattern Anomaly Detection in Process Control Systems  (2009)
• Intrusion Monitoring in Process Control Systems  (2009)
• Key Management and Secure Software Updates in Wireless Process Control Environments  (2008)
• An Intrusion Detection System for Wireless Process Control Systems  (2008)
• Securing Current and Future Process Control Systems  (2007)
• Using Model-based Intrusion Detection for SCADA Networks  (2007)
• Denial of Service against the Domain Name System  (2006)
• Securing Control Systems in the Oil and Gas Infrastructure  (2005)