UA project produces cybersecurity tool for energy utilities

by Jeff Della Rosa ([email protected]) 1,195 views 

A University of Arkansas project supported by the U.S. Department of Energy’s Office of Cybersecurity, Energy Security and Emergency Response has created cybersecurity software that provides energy utilities with “a sophisticated way to assess their system’s security vulnerabilities.”

The software, named V-INT: Automated Vulnerability Intelligence and Risk Assessment, addresses a key issue in cybersecurity: understanding an organization’s complex firewall policy, according to a Tuesday (June 24) news release.

“V-INT enables companies to conduct realistic attack simulations to provide a clear view of how their vulnerabilities appear from an attacker’s perspective,” said Philip Huff, co-founder and chief scientist of Bentonville-based software startup Bastazo. “By combining advanced vulnerability and threat intelligence with a deep understanding of asset exposure, Bastazo delivers actionable insights that help organizations prioritize and remediate their most critical vulnerabilities in operational technology networks.”

V-INT has been integrated into and works with existing commercial technology platforms from Network Perception and Bastazo, an artificial intelligence-powered cybersecurity platform focused on OT (operational technology) remediation.

According to Bastazo, it was awarded $487,250 for the V-INT project. This includes $331,905 from the Department of Energy and $155,345 from in-kind, cost-share contributions from Bastazo. At the end of the project, Bastazo contributed the required cost-share and an additional $50,000 as an in-kind contribution to the project.

“In the face of the increasing complexity of today’s OT networks, collaborative research initiatives are vital to safeguarding critical infrastructure from evolving cyber threats,” said Robin Berthier, founder and former CEO of Network Perception. “We are proud of this partnership that brought together experts and stakeholders from the public and private sectors to enhance the resilience of our nation’s essential systems through research innovation.”

Network Perception, a company of Hanover, Md.-based Dragos, offers network security analysis by modeling and visualizing network access pathways. This capability enabled the V-INT software “to rapidly assess the network exposure of key vulnerabilities, which introduced a new way to prioritize mitigation efforts” and protect operational technology (OT) equipment, the release shows.

V-INT offers user-accessible options and materials, including promotional content and technical guides, that are available for energy utilities. Bastazo is leading V-INT’s commercialization effort through its platform.

Bastazo got its start at the University of Arkansas from the cyber investments of the Department of Energy’s Office of Cybersecurity, Energy Security and Emergency Response. Bastazo helps organizations protect their systems while reducing team workloads by addressing the top 3% of vulnerabilities with work plans. The company has 15 full-time employees.

OSZAR »