Industrial Control Systems (ICS) are facing a growing number of cyber threats, due in part to the rapid pace of digitization. To protect against these threats, it is essential to implement a comprehensive set of security policies. However, the manual design of these policies can be time-consuming, prone to human error, and difficult to manage as the complexity of ICS systems increases. To address this challenge, our team is developing an automated policy generation tool (Auto-PGT) that streamlines the security policy generation process for ICS. The tool leverages a combination of user-defined policy templates and advanced machine learning techniques to analyze ICS data and generate targeted policies. Additionally, the tool assesses the completeness of these policies against a knowledge base of attack steps for ICSs, providing a policy score that helps ensure their effectiveness. Auto-PGT is a valuable solution for organizations looking to simplify and enhance the security of their ICS systems.

We have developed a cutting-edge security solution for critical infrastructures such as Industrial IoT devices, SCADA systems, and central/cloud management systems. The API we have built is designed to be lightweight and multi-hop, making it ideal for use in a wide range of different environments. It is designed to enforce security policies in real-time, helping to protect against cyber threats that can pose a significant risk to these systems. The API is equipped with a fast and flexible provenance verification scheme, which enables it to quickly and accurately assess the validity of incoming data. Furthermore, the API can be enriched with additional security policies, allowing organizations to tailor the solution to meet their specific security needs. To validate the effectiveness of our API and future projects to follow, we have built a realistic Building Energy Management System (BEMS) testbed as another outcome of this project and tested our solution on it.

The energy industry is undergoing significant changes, with a growing trend towards deregulation and increased integration of renewable energy sources. The power grid is evolving into an intelligent infrastructure to support and regulate a diverse range of energy generation, consumption, and storage entities. However, this shift also introduces new security challenges, such as the integration of systems with varying security levels, insecure communication protocols, and the absence of a trustworthy platform for transactions and collaborative operation. Our project addresses these challenges by providing a foundation of trust for deregulated energy markets. This will enable secure and robust operation of energy-related services as we move towards a more decarbonized, decentralized, and deregulated energy future.