The Detection and Analysis of Threats to the Energy Sector (DATES) project has as its overall objective a breakthrough integrated capability in detection, security event monitoring, and large-scale threat analysis to effectively defend against cyber attacks targeted against digital control systems in the energy sector, as called for in the Energy Sector Roadmap. The project is sponsored by the National Energy Technology Laboratory of the U.S. Department of Energy. Our partners are ArcSight (security incident event monitoring) and Sandia National Laboratories (architecture analysis, and test and evaluation).

• Communication Pattern Anomaly Detection in Process Control Systems, Presentation at the 2009 IEEE International Conference on Technologies for Homeland Security, April 2009
• Intrusion Monitoring and Situational Awareness in Infrastructure Systems, Presentation at the 42nd HICSS, January 2009
• Presentation at the E-Sec Northwest CIPS compliance workshop, Portland, OR, March 20, 2008
• Project overview

• Funding announcement

• Alfonso Valdes

• Dr. Linda Briesemeister
• Dr. Steven Cheung
• Dr. Bruno Dutertre
• Martin Fong
• Dr. Ulf Lindqvist
• Jenny McNeill
• Phillip Porras
• Robin Roy
• Keith Skinner

• Communication Pattern Anomaly Detection in Process Control Systems  (2009)
• Intrusion Monitoring in Process Control Systems  (2009)