Measuring, maintaining, and continually improving the security posture of a system or enterprise is an ever-changing challenge. However, it also presents interesting avenues for cybersecurity research to help understand and improve future systems. 

PNNL researchers combine applied research with state-of-the-art techniques to improve the cybersecurity policies and controls of our sponsors. We use advanced tools and analyses to help gain a greater system understanding—before destructive attacks take place. For example, our efforts to strengthen the trustworthiness of supply chain manufacturers increase confidence that embedded systems perform their assigned tasks, and only their tasks.

Sponsors often engage PNNL to gain insight into the security of their systems—from red teaming to penetration testing, security testing, and reverse engineering. We collaborate with sponsors to evaluate and assess the resilience of their cybersecurity architectures in comparison with system vulnerabilities and risk. We also develop techniques to evaluate threats to a system and illuminate whom and what our sponsors should defend against. 

Beyond helping sponsors secure their networks, devices, or components, we provide workforce development to help sponsors enhance their security posture as they continue their mission. Our ongoing relationships with sponsors allow us to provide collaborators with access to data and real-world expertise that can guide and inform future research.