Hawaii MEP Tours the CTL Operational Technology Cybersecurity Laboratory

NIST researchers from the Communications Technology Laboratory's Smart Connected Systems Division recently hosted representatives from the Hawaii Technology Development Corporation (HTDC), one of 51 NIST Manufacturing Extension Partnership (MEP) centers located throughout the United States and Puerto Rico. The delegation was interested in CTL’s research and publications regarding cybersecurity for securing manufacturing environments, and artificial intelligence and machine learning (AI/ML) for smart manufacturing.

NIST researchers Timothy Zimmerman, Dr. M. Sharp, Michael Pease, and CheeYee Tang presented their findings on cybersecurity for operational technology (OT), focusing on applying NIST Guidance from NIST Special Publication (SP) 800-82r3 to various environments including manufacturing, continuous processes, and SCADA systems, all simulated within the laboratory. Additionally, they discussed their research on the increasing integration of AI/ML technologies in these settings.

Many questions were asked by the participants during the presentation, resulting in a lively discussion regarding how they can use NIST guidance to help their local Hawaiian manufacturers and MEP in general. Positive feedback was received from NIST MEP and HTDC in the post-tour follow-up. Many of the representatives in the tour group expressed interest in the work and publications produced by the projects and requested more information on the presentation.

Front-and-center of the tour was the Cybersecurity for Operational Technology laboratory and its three testbeds, representing three common types of OT control systems: discrete manufacturing systems, distributed control systems (DCS), and Supervisory Control and Data Acquisition (SCADA). The discrete manufacturing testbed is a collaboration between the Cybersecurity for OT project and the Industrial Artificial Intelligence Management and Metrology (IAIMM) project (both within CTL), enabling experiments and research data for both projects to be generated from the same testbed.

The DCS testbed is an improved version of the original “Process Control Testbed” described in NIST IR 8188, which emulates a chemical manufacturing process with components distributed over a large area, similar to an oil refinery.

The water system testbed emulates the operations of water utilities commonly found in cities and towns in the U.S. The testbed contains a SCADA system that uses devices common to the industry and provides a critical environment for cybersecurity research in the water sector.

The Manufacturing Extension Partnership (MEP) is part of the Commerce Department’s National Institute of Standards and Technology (NIST). The MEP National Network, whose mission is to strengthen and empower U.S. manufacturers, comprises the National Institute of Standards and Technology’s Manufacturing Extension Partnership (NIST MEP), the 51 MEP Centers located in all 50 states and Puerto Rico, the MEP Advisory Board, MEP Center boards, and the Foundation for Manufacturing Excellence, as well as over 1,440 trusted advisors and experts at approximately 460 MEP service locations, providing any U.S. manufacturer with access to resources they need to succeed. You can find more information about the NIST MEP at: https://www.nist.gov/mep.

The Cybersecurity for Operational Technologies project delivers cybersecurity implementation methodologies, best practices, metrics, and tools to enable OT owners and operators to implement cybersecurity capabilities while addressing the demanding performance, reliability, and safety requirements of OT systems. Our research provides OT owners and operators with a clear and effective roadmap for managing cybersecurity within their resource constraints, thereby reducing risk, and improving their overall cybersecurity posture. You can find more information regarding NIST's research and publications on cybersecurity for Operational Technology at: https://csrc.nist.gov/projects/operational-technology-security.

The Industrial Artificial Intelligence Management and Metrology (IAIMM) project develops and deploys measurement science to advance adoption and management of Artificial Intelligence (AI) systems in industrial environments to improve the productivity, resiliency, security, and the sustainability of manufacturing operations and supply chains. Our project aims to facilitate trust-based adoption of artificial intelligence in industrial tools like condition monitoring systems, while effectively capturing and conveying the value of using AI in these tools and their impacts through intuitive, risk-aware metrics and procedures. We enable better, more effective use of AI in industrial tools by developing deployment and evaluation best practices. You can find more information regarding NIST's research and publications on industrial artificial intelligence at: https://www.nist.gov/programs-projects/industrial-artificial-intelligence-management-and-metrology-iaimm.