Eastern WA researchers fight cyber threats at aging U.S. hydropower system
Washington generates more hydroelectricity than any other state, so it is fitting that research to protect the critical infrastructure responsible for generating this power is happening right here in the Tri-Cities, at the Department of Energy's Pacific Northwest National Laboratory.
Researchers at PNNL are combining their knowledge of the hydropower system and expertise in cybersecurity to secure the operational technology of the nation's hydropower fleet.
Their work to protect these facilities helps ensure the continued generation of affordable electricity that powers our homes and factories.
It also safeguards a key source of dispatchable power — generation that can be ramped up and down as needed to balance supply and demand — that enhances grid reliability and resilience.
The federally managed hydropower projects have an average age of about 65 years, so researchers tasked with protecting them must bridge the past to the future.
Efforts to adapt aging systems to thwart today's constantly evolving cyber threats include developing a suite of cybersecurity tools, an operational training model and a monitoring system.
To make it easier for operators who may need to respond to and recover from a cyber incident, researchers assembled and integrated guidance from several agencies and created a cyber-physical framework and roadmap for the nation's entire fleet. They also prepared and shared a step-by-step desk guide for navigating a cyberattack.
Fundamental to this work was an assessment of the connections and interactions among the cyber and physical components at hydropower facilities of all kinds.
By studying a representative sample of plants with a wide range of ages and uses, researchers found that they could be binned into just nine distinct cyber-physical configurations. This allows operators to more easily identify shared risks and potential mitigations.
In a separate effort to train cybersecurity professionals working on critical infrastructure, PNNL researchers developed a series of test platforms. These platforms, known as skids, are scaled-down, functional models that enable realistic exercises without putting real infrastructure at risk.
Examples of PNNL-developed skids include models of a water treatment facility, the Class 1 freight rail network and a hydropower plant. Each can be 'attacked' by cyber means to explore vulnerabilities and mitigation strategies.
The hydropower skid and associated training scenarios were designed with input from regional hydropower plant operators, including Spokane-based Avista Corporation and Grant County Public Utility District.
Complete with wicket gates, turbines and other components needed to generate power, as well as small, representative industrial control systems, the skid allows operators to see the effects of unauthorized cyber access and learn how to manage the risk.
Trainees can watch water levels above and below the miniature dam as the control systems undergo a simulated cyberattack. They can monitor relays in the substation that might trip, watch for flooding or erosion and see how the power grid responds. They also get a firsthand look at how their simulated responses impact the system.
PNNL's support in protecting hydropower plants also extends to an award-winning technology called SerialTap. This palm-sized device serves as a data collector, allowing modern network cybersecurity tools to monitor dispersed serial communication devices and legacy industrial control systems.
SerialTap makes it possible to detect cyberattacks and network anomalies so that analysts and operators can respond more quickly and effectively.
The technology will be tested by a commercial partner whose affiliate companies own and operate 85 hydroelectric facilities in the United States.
As the complexity and connectedness of the critical infrastructure we depend on for a strong economy increase, so does the risk of cyber threats with higher consequences.
Experts at PNNL are developing novel approaches to protect, detect and recover from potential cyberattacks at the hydroelectric facilities that produce nearly 6 percent of the nation's total electricity — and more than 60 percent of the power generated in the great state of Washington.
Steven Ashby is director of the Pacific Northwest National Laboratory in Richland.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Boston Globe
2 hours ago
- Boston Globe
The Trump administration canceled an $87 million award for this MIT startup. But life goes on.
Advertisement On May 20, Suffolk Technologies, a venture capital arm of Boston-based Suffolk Construction, announced it had invested an unspecified amount of money in Sublime and pre-purchased some of the cement that will be made in Holyoke. Two days later, Sublime announced an agreement with Microsoft in which the software giant will buy more than 620,000 metric tons of Sublime cement over up to nine years. Last fall, two of the world's largest cement suppliers, Holcim and CRH, together invested $75 million in the company. The company has also raised $45 million in venture capital funding, including from Lowercarbon Capital and Engine Ventures. And on Thursday, Sublime disclosed a roster of nine construction companies, including Suffolk, that have agreed to act as sales partners to pitch Advertisement The Holyoke factory is expected to be completed in 2027 and provide jobs for at least 70 people after it opens. The plant will still get some subsidies, including $47 million in federal tax credits that remain in place, $1.05 million in state tax credits, and $351,000 in local property tax breaks. Site work has begun in Holyoke, but not construction of the actual building. Joe Hicken, senior vice president of business development at Sublime, declined to say what kind of impact, if any, the Department of Energy's action will have on the project's timing. He noted that Sublime's mission dovetails with the Trump administration's goal of boosting American manufacturing. 'If anything, that termination letter is one data point,' Hicken said. 'We have many other data points associated with commercial movement [and] for every plan that we talk about publicly, we have 10 backup plans waiting for their day to shine.' Builders such as those at Suffolk and Consigli Construction in Milford have come to appreciate the technology developed by Sublime cofounders Leah Ellis and Yet-Ming Chiang. The process they developed replaces traditional kilns with electrolysers that make cement from calcium sources, avoiding the intense release of carbon dioxide from the super-heating of limestone used to make most cement. So far, Sublime's production has been limited to small test batches, including a foundation section included in the new building WS Development finished for Amazon in the Seaport. Consigli vice president Todd McCabe said his company signed up to sell Sublime cement because its executives are always looking for ways to build more sustainably and efficiently, and Sublime's clean cement will help with that. Advertisement At Suffolk, executives decided to buy equity in Sublime. Suffolk followed the startup soon after its 2020 inception. As Sublime moved closer to commercialization, Suffolk chief technology officer Jit Kee Chin decided it was the right time to invest. 'They're getting to the point where it's about to go to market,' Chin said. 'Really, it's no longer a science experiment. ... This is the right time for us to go in and really support them.' Chin said many of Suffolk's clients are keenly interested in Sublime's goal of creating a cost-effective, low-carbon cement that's just as effective as traditional cement, known as portland cement. The news about Sublime losing the federal award came as a disappointment to Ben Downing, the chief strategist at the Engine, a nonprofit startup accelerator affiliated with MIT and with VC firm Engine Ventures. Although it's a significant amount of money, Downing has confidence that Sublime will be able to finish the Holyoke factory. 'We know there's a lot of chaos in Washington but we believe in the science and we believe in the team,' Downing said. 'It's bad news, but if any team is going to be able to respond to it and grow and scale it, they're going to find a way [and] I know Holyoke and Massachusetts will be better for it.' Jon Chesto can be reached at
Yahoo
4 hours ago
- Yahoo
Eastern WA researchers fight cyber threats at aging U.S. hydropower system
Washington generates more hydroelectricity than any other state, so it is fitting that research to protect the critical infrastructure responsible for generating this power is happening right here in the Tri-Cities, at the Department of Energy's Pacific Northwest National Laboratory. Researchers at PNNL are combining their knowledge of the hydropower system and expertise in cybersecurity to secure the operational technology of the nation's hydropower fleet. Their work to protect these facilities helps ensure the continued generation of affordable electricity that powers our homes and factories. It also safeguards a key source of dispatchable power — generation that can be ramped up and down as needed to balance supply and demand — that enhances grid reliability and resilience. The federally managed hydropower projects have an average age of about 65 years, so researchers tasked with protecting them must bridge the past to the future. Efforts to adapt aging systems to thwart today's constantly evolving cyber threats include developing a suite of cybersecurity tools, an operational training model and a monitoring system. To make it easier for operators who may need to respond to and recover from a cyber incident, researchers assembled and integrated guidance from several agencies and created a cyber-physical framework and roadmap for the nation's entire fleet. They also prepared and shared a step-by-step desk guide for navigating a cyberattack. Fundamental to this work was an assessment of the connections and interactions among the cyber and physical components at hydropower facilities of all kinds. By studying a representative sample of plants with a wide range of ages and uses, researchers found that they could be binned into just nine distinct cyber-physical configurations. This allows operators to more easily identify shared risks and potential mitigations. In a separate effort to train cybersecurity professionals working on critical infrastructure, PNNL researchers developed a series of test platforms. These platforms, known as skids, are scaled-down, functional models that enable realistic exercises without putting real infrastructure at risk. Examples of PNNL-developed skids include models of a water treatment facility, the Class 1 freight rail network and a hydropower plant. Each can be 'attacked' by cyber means to explore vulnerabilities and mitigation strategies. The hydropower skid and associated training scenarios were designed with input from regional hydropower plant operators, including Spokane-based Avista Corporation and Grant County Public Utility District. Complete with wicket gates, turbines and other components needed to generate power, as well as small, representative industrial control systems, the skid allows operators to see the effects of unauthorized cyber access and learn how to manage the risk. Trainees can watch water levels above and below the miniature dam as the control systems undergo a simulated cyberattack. They can monitor relays in the substation that might trip, watch for flooding or erosion and see how the power grid responds. They also get a firsthand look at how their simulated responses impact the system. PNNL's support in protecting hydropower plants also extends to an award-winning technology called SerialTap. This palm-sized device serves as a data collector, allowing modern network cybersecurity tools to monitor dispersed serial communication devices and legacy industrial control systems. SerialTap makes it possible to detect cyberattacks and network anomalies so that analysts and operators can respond more quickly and effectively. The technology will be tested by a commercial partner whose affiliate companies own and operate 85 hydroelectric facilities in the United States. As the complexity and connectedness of the critical infrastructure we depend on for a strong economy increase, so does the risk of cyber threats with higher consequences. Experts at PNNL are developing novel approaches to protect, detect and recover from potential cyberattacks at the hydroelectric facilities that produce nearly 6 percent of the nation's total electricity — and more than 60 percent of the power generated in the great state of Washington. Steven Ashby is director of the Pacific Northwest National Laboratory in Richland.
Yahoo
4 hours ago
- Yahoo
Japanese Lunar Lander Crashes In Second Failed Mission
A private Japanese lunar lander crashed during an attempted touchdown on the moon Friday. This marks the second failed mission for the Tokyo-based global lunar exploration company, ispace. The lander, named Resilience, lost communication less than two minutes before its scheduled landing in Mare Frigoris, a flat, crater-filled region on the moon's northern near side. A preliminary analysis indicated the laser system for measuring altitude malfunctioned, causing the lander to descend too fast. 'Based on these circumstances, it is currently assumed that the lander likely performed a hard landing on the lunar surface,' ispace said in a statement. 'This is the second time that we were not able to land. So we really have to take it very seriously,' CEO and founder Takeshi Hakamada told reporters, per Associated Press. He apologized to contributors and added that the mission was 'merely a stepping stone' to a larger lander planned for 2027 with NASA involvement. 'Engineers did everything they possibly could' to ensure success, he said minutes before the attempted landing. The 7.5-foot Resilience, launched in January from Florida on a SpaceX rocket, carried an 11-pound, four-wheeled rover named Tenacious, built by ispace's Luxembourg subsidiary. The rover, equipped with a high-definition camera and a shovel for NASA to collect lunar soil, was designed to operate for two weeks during the moon's daylight period. It also carried a toy-size Swedish-style red cottage, dubbed Moonhouse by artist Mikael Genberg, for placement on the lunar surface. The mission's $16 million payload included scientific instruments from Japanese firms and a Taiwanese university. The failure follows ispace's first lunar crash in 2023, caused by inaccurate altitude readings. 'Truly diverse scenarios were possible, including issues with the propulsion system, software or hardware, especially with sensors,' Chief Technology Officer Ryo Ujiie said at a press conference. Jeremy Fix, chief engineer for ispace's U.S. subsidiary, noted last month that the company, with a mission cost less than the first's $100 million, lacks 'infinite funds' and cannot afford repeated failures. 'We're not facing any immediate financial deterioration or distress because of the event,' CFO Jumpei Nozaki said, citing investor support. However, space shares faced heavy sell orders and were poised for a 29% drop. As of Thursday, their market capitalization was over 110 billion yen ($766 million). The crash marks another setback in the commercial lunar race, which began in 2019. U.S. firms Firefly Aerospace and Intuitive Machines achieved successful landings in March, though Intuitive's lander toppled in a crater. Japan's space agency, JAXA, landed its SLIM probe last year, joining Russia, the U.S., China, and India as the only nations with successful robotic lunar landings. 'Expectations for ispace have not faded,' Japanese Prime Minister Shigeru Ishiba posted on X, reported Reuters. Ispace remains committed to NASA's Artemis program, with plans for a third mission in 2027. 'NASA increasingly needs private companies to improve cost efficiency for key missions with limited budgets,' Hakamada said, referencing proposed U.S. budget cuts. Two U.S. companies, Blue Origin and Astrobotic Technology, aim for moon landings by year's end following Astrobotic's 2024 failure.
