COMPREHENSIVE CYBERSECURITY SOLUTIONS FOR OPERATIONAL TECHNOLOGY (OT) ENVIRONMENTS - SOFTWARE LICENSING OPPORTUNITY

Comprehensive Cybersecurity Solutions for Operational Technology (OT) Environments

Introduction As cybersecurity threats against Operational Technology (OT) networks continue to grow, the Department of Energy (DOE) and Idaho National Laboratory (INL), through the Cybersecurity for the Operational Technology Environment (CyOTE™) program, have developed a suite of tools to strengthen cybersecurity monitoring, detection, and response. The initial release of solutions include — OPTIC, and CATCH— offering targeted capabilities to enhance protection and resilience in critical infrastructure.

Operational Process for Trigger Identification and Comprehension (OPTIC)

Overview: OPTIC is a downloadable application designed to support CyOTE methodologies by assisting OT professionals in detecting and analyzing cyber anomalies. It aids in differentiating between malicious threats and routine maintenance irregularities.

Key Benefits:

• Integrates with a Safety-Culture of OT environments
• Guides users through a structured workflow for anomaly documentation and analysis.
• Functions as a cybersecurity awareness training tool.
• Provides forensic research capabilities to investigate past cyber events.
• Saves time by consolidating government and industry standards into a single interface.
• Enhances cybersecurity decision-making and response efficiency.

Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH)

Overview: CATCH is a real-time telemetry collection and analysis framework designed to augment existing security controls with CyOTE analytics. It provides deep insights into network traffic, system logs, and user activities to detect cyber threats proactively.

Key Benefits:

• Offers nine detection engines for comprehensive threat monitoring.
• Uses the MITRE ATT&CK® framework for analyzing ICS vulnerabilities.
• Generates STIX 2.1 reports and automates threat intelligence sharing via TAXII.
• Enhances forensic investigations by correlating telemetry data across systems.
• Integrates with BAM and OPTIC to improve threat detection and response.

Integrated Cybersecurity Approach

These tools can work together to improve the cybersecurity ecosystem for OT environments. By leveraging the CyOTE tools, OPTIC and CATCH, organizations can:

• Detect and respond to cyber threats more effectively.
• Improve operational resilience and mitigate risks proactively.
• Collaborate across industry sectors to strengthen energy security.

Licensing Opportunity Notice This opportunity describes a chance to license the software mentioned from Idaho National Laboratory (INL). This is not a funding opportunity, grant, or a solicitation for external services. We are seeking parties interested in licensing these software solutions, with potential collaboration opportunities.

For more information, contact td@inl.gov or visit https://cyote.inl.gov/