Research

Core Research Areas

Detecting Intrusions and Building Resilient Systems

Modern critical infrastructure generates massive amounts of data but knowing which data matters for security is the challenge. Our research develops intelligent systems that filter out noise to focus on genuine security threats, use machine learning to identify abnormal patterns that signal attacks, detect intrusions at the earliest possible stage, and distinguish between equipment failures, human error, and malicious activity. We’re also addressing a critical emerging threat: backdoor attacks on the artificial intelligence systems themselves, ensuring your security tools remain trustworthy. Even the best perimeter defense can be breached, so our research also focuses on intrusion tolerance — designing systems that continue operating correctly even when partially compromised. 

Modeling Complex Systems and Understanding Risk

As critical infrastructure evolves, we need better ways to model, implement, and manage these increasingly complex systems. Our research develops digital twin models and analytical tools that provide visibility into systems across distributed networks, enable reliable and efficient coordination of diverse resources, and support secure implementation of autonomous command and control systems. Beyond modeling, not all threats are equally dangerous, and resources are limited.

Navigating Policy and Regulatory Challenges

Technical solutions alone aren’t enough. Companies operating critical infrastructure face cultural, regulatory, economic, and organizational barriers to implementing robust cybersecurity programs. Our research identifies and categorizes barriers to cybersecurity improvement, develops policy frameworks that facilitate rather than hinder security, provides guidance on compliance with evolving regulations, and creates best practices that balance security, reliability, and cost.

Publications

Emerging Research Areas

Internet of Things

With the number of connected devices growing rapidly, Internet of Things (IoT) devices are becoming more diverse and widely used, which means that threats to those devices are constantly evolving. It’s now more important than ever to secure IoT devices.

Manufacturing

As the manufacturing industry and processes become more technologically advanced, we must consider security threats that attack our machines, computers, and ultimately, the integrity of the products that are created.

Law and Policy

A vital aspect of the Industrial Internet of Things, law and policy is an increasingly significant area where attention is needed. Geospatial data laws, privacy-preserving sensors, and trust and credibility are just a few areas of growing importance.

Healthcare and Medical Devices

The world of connected devices is continuously changing, including medical devices and other aspects of the healthcare industry. The Internet of Medical Things (IoMT) takes connected devices to a more personal, human-centric level. Heart monitors, diabetes regulators, and vital patient records are only a few areas of healthcare that are affected by IoT.

Energy and Utilities

Critical infrastructure is yet another industry that is changing with the growing impact of IoT-enabled devices.  Therefore, ensuring security in oil and gas, water, and electricity is more important than ever, as these areas directly affect our daily lives.

The Cyber Energy Center works closely with the Center for Energy, RETI Consortium and Pitt Cyber.