More Resources

Transportation of Transuranic Waste in TRUPACT-III Containers, Carlsbad Field Office

Designing research, development, and demonstration programs based on a future look at electric power delivery with respect to evolving societal and technological change

The need to protect national critical infrastructure has led to the development of a threat analysis framework. The threat analysis framework can be used to identify the elements required to quantify threats against critical infrastructure assets and provide a means of distributing actionable threat information to critical infrastructure entities for the protection of infrastructure assets. This document identifies and describes five key elements needed to perform a comprehensive analysis of threat: the identification of an adversary, the development of generic threat profiles, the identification of generic attack paths, the discovery of adversary intent, and the identification of mitigation strategies.

The key piece of knowledge necessary for building defenses capable of withstanding or surviving cyber and kinetic attacks is an understanding of the capabilities posed by threats to a government, function, or system. With the number of threats continuing to increase, it is no longer feasible to enumerate the capabilities of all known threats and then build defenses based on those threats that are considered, at the time, to be the most relevant. Exacerbating the problem for critical infrastructure entities is the fact that the majority of detailed threat information for higher-level threats is held in classified status and is not available for general use, such as the design of defenses and the development of mitigation strategies. To reduce the complexity of analyzing threat, the threat space must first be reduced. This is achieved by taking the continuous nature of the threat space and creating an abstraction that allows the entire space to be grouped, based on measurable attributes, into a small number of distinctly different levels. The work documented in this report is an effort to create such an abstraction.

This document presents information on the impacts of adopting Internet Protocol version 6 (IPv6) into infrastructure control systems. The investigation was performed by members of Sandia National Laboratories and funded by the Department of Energy’s (DOE) National SCADA Test Bed (NSTB) Program. Specifically, the document presents a brief background and description of the features of IPv6, details on how IPv6 may be implemented in a control system, and potential issues that may surface related to reliability and security.

Hanford Tank Waste Treatment and Immobilization Plan Project PIA, Richland Operations Office

Hanford Tank Waste Treatment and Immobilization Plan Project PIA, Richland Operations Office

PIA - Richland Health Services Scheduling