CISA, DHS S&T, INL, LSU Help Energy Industry Partners Strengthen Incident Response and OT Cybersecurity
WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS) Science and Technology Directorate (S&T) and the Idaho National Laboratory (INL) hosted Louisiana State University (LSU) and several energy industry and critical infrastructure partners to train against simulated, high-impact cyberattacks on operational technology (OT) and traditional information technology (IT) at CISA’s Control Environment Laboratory Resource (CELR) in Idaho Falls, Idaho, last week. LSU is the first university in the U.S. invited to participate in the CELR exercise, as part of CISA and INL’s efforts to strengthen cyber talent development and research partnerships.
Cybersecurity threats exploit the increased complexity and connectivity of critical infrastructure systems. The potential incapacitation or destruction of assets, systems and networks, whether physical or virtual, could have a debilitating effect on national security, economic security and on public health and safety. As the nation’s cyber defense agency, CISA is committed to growing operational and strategic partnerships to increase collaboration across the OT and industrial control systems (ICS) community.
On April 15-17, energy industry partners and the CISA-INL-LSU team used the CELR chemical processing platform, located at and operated by INL on behalf of CISA. CELR platforms are benchtop models of critical infrastructure with integrated industrial processes to represent how real-world components and facilities might be compromised through cyber-physical attacks. The participants were positioned in a live environment with IT and OT traffic and attacked by a technical team posing as a sophisticated adversary. The training participants’ mission was to detect and respond to kinetic cyberattacks through ICS elements, including supervisory control and data acquisition (SCADA) systems, human-machine interfaces (HMIs), programmable logic controllers (PLCs), OT and IT systems and other key components widely used in industrial facilities.
“Collaborating with LSU and industry partners is extremely beneficial in strengthening the nation’s cybersecurity knowledge and ability to respond to threats. This training is another step in our shared vision to expand the opportunity for critical infrastructure entities to strengthen their cybersecurity using CELR,” said Matt Hartman, CISA Deputy Executive Assistant Director for Cybersecurity. “Malicious cyber actors and nation-state adversaries are a persistent, highly capable threat to critical infrastructure operations, functionality and safety. CELR is a valuable resource for critical infrastructure owners and operators seeking to improve the security of their ICS/OT networks.”
"INL's Controls Laboratory hosts five CISA-sponsored ICS testbeds, offering immersive environments for partners to experience realistic cyberattack scenarios against critical infrastructure,” said Tim Huddleston, INL's Cybersecurity Program Manager. “We were proud to host industry partners and academia in this exercise, helping them improve their skills in cyber hunting and incident response, which reduces the risk from malicious cyber actors."
INL leverages scientific expertise and unique controls environments to support the departments of Energy, Defense and Homeland Security in national security challenges, including critical infrastructure protection. Last week’s training is part of an ongoing collaborative effort by CISA, DHS S&T, INL and LSU to equip energy industry cyber defenders to protect ICS environments and develop deeply technical cyber talent for critical infrastructure. Under CISA and S&T oversight, INL is currently developing the first university-based CELR platform. DHS S&T and CISA plan to deliver an Oil and Natural Gas CELR platform to LSU by fall of this year.
Through a Cooperative Research and Development Agreement, LSU will operate and maintain the Oil and Natural Gas platform and host similar trainings for energy sector partners, state cyber defenders, and LSU faculty, staff and students. This agreement will provide government and industry security professionals in the Louisiana gulf region an extremely valuable, local opportunity to hone their OT/ICS cybersecurity skills.
“This partnership is a wonderful example of DHS S&T’s role in enabling effective, efficient, and secure operations by applying scientific, engineering, analytic, and innovative approaches to deliver timely solutions. The CELR platforms help ensure critical infrastructure is better positioned to detect, mitigate, or prevent cyber-attacks in the real world. By positioning a platform in close proximity to critical infrastructure owners and operators, as well as making it accessible to the next generation of oil refinery workforce through the university, DHS S&T and CISA are ensuring our nation’s oil supply remains secure and available to consumers,” said Jonathan McEntee, Acting Executive Director for S&T Office of Mission and Capability Support.
“As a leading energy and chemical manufacturing state, Louisiana’s cybersecurity posture around its critical infrastructure has national implications,” said Greg Trahan, director of economic development at LSU and special advisor to LSU President William F. Tate IV on cyber initiatives. “The invitation by CISA and INL to participate in this exercise underscores what we know: LSU has emerged as one of the most important and consequential cybersecurity schools in the country. The opportunity to be joined by our close industry partners means we can bring these skills and agency relationships home to support and protect Louisiana—that is the LSU Scholarship First Agenda and flagship mission in action.”
Another outcome from this collaborative effort, LSU and Battelle Energy Alliance, the company that manages INL, recently signed a memorandum of understanding to formalize their partnership in areas of mutual interest, including cybersecurity and advanced nuclear technology. Over the past year, INL has hosted six LSU cybersecurity interns and successfully hired two LSU graduates. This collaboration exemplifies INL's commitment to expanding partnerships with other industry and academic entities, fostering an environment to develop cyber resilience skills.
For more information on ICS security, visit the CISA Industrial Control Systems webpage.
Control Environment Laboratory Exercise (CELR) Exercise
Government, industry and academia partners gather to view Control Environment Laboratory Resource (CELR) exercise