Information Assurance

The Information Assurance Group of the Infrastructure Assurance Center is focusing on all aspects of computer system and network security, and cyber protection for this nation's critical infrastructures.

The Presidential Decision Directive 63 for Critical Infrastructure Protection highlighted the need for protecting all of the nation's infrastructures, but especially for Information and Communications (Telecommunications). This infrastructure underpins all of the control structures in the other infrastructures (energy, banking and finance, water, continuity of government services, physical distribution and vital human services).

Argonne National Laboratory, one of the nation's premier multiprogram research laboratories, meets this challenge using a systematic assessment process, multidisciplinary analytical approaches, and proven technology to support effective decisions.

The Laboratory is especially well known for its ability to assemble interdisciplinary teams of specialists, and engage visiting scientists and engineers in research programs.

Computer System and Network Security
Argonne has developed advanced tools, technologies and expertise to assure security for computer systems and networks. These areas include:

• Secure Networks for Military Applications
• Secure Operating Systems
• Network Analysis and Design for High-Speed and Secure Applications
• Web Server Security
• Intrusion Detection and Monitoring
• Internet Usage Monitoring
• Configuration of System Devices for

High Security

• Integration of New Computing Platforms into Existing Environments
• Multi-platform Environments
• System Administration Practices to

Minimize Risk and Verify Integrity

• Integration of Remote Sensors and Devices
• ATM, SONET, and Gigabit Applications
• E-Government/E-Commerce Security

Layered Security Architecture

Authentication and Authorization Argonne has participated in developing advanced authentication technologies for distributed systems, including: Kerberos authentication Single sign-on for access to distributed computing resources using kerberos and public key Virtual private networks Smart card authentication utilizing the public key infrastructure Security for large file systems Trusted Computing and Ultra-High Reliability Systems Information assurance relies on having a trusted environment capable of providing critical functionality in the presence of failures or threats. Argonne has developed theoretical and applied experience in assurance for trusted infrastructures to verify that certified products have been manufactured as specified. Argonne has also: Designed systems to mitigate threats and preserve system integrity Certified that implementations comply with specifications Determined the effectiveness of protective mechanisms Researched advanced infrastructure technologies with an emphasis on telecommunications

Information Assurance and Management

The protection and management of information bases is critical to operations in both the government and private sector. Argonne's experience in designing secure information bases assures protection from a variety of failures and threats.

Reverse Engineering of Micro-electronic Circuits

Argonne has developed advanced analysis technologies for deriving functionality from gate level circuit diagrams. This analysis assures that the circuit performs only valid functions.

Management and Control of Distributed Systems and Sensors

The control of distributed systems using computer networks (e.g. SCADA) is the underpinning of the nation's infrastructure system. The protection and security of these control systems requires specialized technologies and interfaces between computers, telecommunication systems and devices. Argonne's multidisciplinary teams have developed and applied advanced technologies for distributed system control.

Framework for Model Integration

The Dynamic Information Architecture System (DIAS) is a simulation framework that allows new or legacy models to interoperate in the same frame of reference. DIAS captures the dynamic interplay between models, accommodates models with varying resolution, and integrates tools, such as infrastructure assessment and vulnerability assessment tools.

For more information, contact:
Craig Swietlik
Information Sciences
Decision and Information Sciences Division
Argonne National Laboratory
9700 South Cass Ave., Bldg. 221
Phone: 630-252-8912
Fax: 630-252-5128
E-mail Craig Swietlik