Abstract: Embodiments of the disclosure relate to systems and methods for protecting a physical asset against an attack. In one exemplary embodiment, an asset protection system is configured to use a monitoring system to obtain performance parameters of a physical asset when the physical asset is in operation. The asset protection system is further configured to retrieve from a database, one or more threat signatures and to use the one or more threat signatures to detect an attack upon the physical asset, the detection based at least in part on identifying a relationship between at least one of the threat signatures and at least a portion of the performance parameters of the physical asset. When an attack is detected, a signal can be transmitted to a control system of the physical asset and/or directly to the physical asset, to modify an operation of the physical asset in response to the attack.

Abstract: A method for controlling an operation of an industrial machine that includes authenticating control commands remotely issued by command issuers through a network. The control commands each describe a modifying action to the operation of the industrial machine. The method includes: providing a jump host as a communication buffer between a unit controller of the industrial machine and the network; maintaining within a memory of the jump host whitelisted commands, the whitelisted commands including a list of the approved control commands; receiving, at the jump host, a first control command via the network; determining, at the jump host, whether the first control command is contained within the whitelisted commands; in response to an affirmative determination that the first control command is contained within the whitelisted commands, deeming the first control command as being authenticated; and transmitting the first control command to the unit controller of the industrial machine.

Abstract: A method for controlling an operation of an industrial machine that includes authenticating control commands remotely issued by command issuers through a network. The control commands each describe a modifying action to the operation of the industrial machine. The method includes: providing a jump host as a communication buffer between a unit controller of the industrial machine and the network; maintaining within a memory of the jump host whitelisted commands, the whitelisted commands including a list of the approved control commands; receiving, at the jump host, a first control command via the network; determining, at the jump host, whether the first control command is contained within the whitelisted commands; in response to an affirmative determination that the first control command is contained within the whitelisted commands, deeming the first control command as being authenticated; and transmitting the first control command to the unit controller of the industrial machine.

Abstract: Embodiments of the disclosure relate to systems and methods for protecting a physical asset against an attack. In one exemplary embodiment, an asset protection system is configured to use a monitoring system to obtain performance parameters of a physical asset when the physical asset is in operation. The asset protection system is further configured to retrieve from a database, one or more threat signatures and to use the one or more threat signatures to detect an attack upon the physical asset, the detection based at least in part on identifying a relationship between at least one of the threat signatures and at least a portion of the performance parameters of the physical asset. When an attack is detected, a signal can be transmitted to a control system of the physical asset and/or directly to the physical asset, to modify an operation of the physical asset in response to the attack.

Abstract: Critical stress in a gas turbine can be estimated using one or more readily measurable temperatures in the gas turbine. First and second critical temperatures can be estimated based on the at least one measurable temperature using heat conduction and convection equations. Subsequently, the critical stress can be estimated in real time according to a stress model prediction based on the difference between the critical temperatures, and possibly the rotational speed of the turbine, and some parameter, such as air pressure, that is indicative of air flow around the turbine component. Operation of the gas turbine can thus be controlled using the estimated critical temperatures.

Abstract: Critical stress in a gas turbine can be estimated using one or more readily measurable temperatures in the gas turbine. First and second critical temperatures can be estimated based on the at least one measurable temperature using heat conduction and convection equations. Subsequently, the critical stress can be estimated in real time according to a stress model prediction based on the difference between the critical temperatures, and possibly the rotational speed of the turbine, and some parameter, such as air pressure, that is indicative of air flow around the turbine component. Operation of the gas turbine can thus be controlled using the estimated critical temperatures.