Sixty-six students visited Georgia Tech on Friday, July 21, for the final day of Chip Camp, a three-day STEM camp for rising sixth through eighth graders. The camp is sponsored by the Micron Foundation and is designed to “pique students' curiosity and challenge their minds through hands-on STEM and semiconductor activities.”

The day began at the Institute for Electronics and Nanotechnology (IEN), where students learned about ferrofluids, thin films, magic sand, measuring their height in nanometers, and the size and scale of the universe. They also visited the Materials Characterization Facility for an introduction to characterization and demonstrations of some of its tools, including the digital optical microscope and atomic force microscope. The IEN portion of the day concluded with a window tour of the IEN cleanroom and an opportunity to gown up in “bunny suits,” the standard uniform worn by cleanroom users.

“We’re committed to developing the pipeline of the future microelectronics workforce,” said Mikkel Thomas, assistant director of workforce development at IEN. “This includes K-12 students who may not know what microelectronics are, or the career paths associated with them. We were glad to host part of Chip Camp and introduce these students to IEN.”

Following a lunch break, campers visited the Invention Studio makerspace, where they built their own rockets — and then launched them in Tech Green.

Micron Chip Camp is a global initiative offering opportunities to students in the U.S. and Asia both in person and online. Micron teamed up with STE(A)M Truck, Atlanta's leader in hands-on STEAM education, for the Georgia session.

In addition to hosting students for camps, IEN provides a variety of outreach programs for K-12 and adult learners, which include short courses and seminars, research experiences for undergraduates, and research experiences for teachers. To learn more about these opportunities, visit research.gatech.edu/nano/workforce-development.

A new cybersecurity technology that relies on the unique digital fingerprint of individual semiconductor chips could help protect the equipment of electrical utilities from malicious attacks that exploit software updates on devices controlling the critical infrastructure.

The GridTrust project, which has been successfully tested in a real substation of a U.S. municipal power system, combines the digital fingerprint with cryptographic technology to provide enhanced security for the utilities and other critical industrial systems that must update control device software or firmware.

Led by researchers at the Georgia Institute of Technology (Georgia Tech) in collaboration with the City of Marietta, Georgia, the project was supported by the U.S. Department of Energy's Office of Cybersecurity, Energy Security, and Emergency Response (CESER). GridTrust also included researchers from Sandia National Laboratories and Protect Our Power, a security-focused not-for-profit organization. The three-year, $3 million project began in 2021.

GridTrust Improves Security for Device Updates

“The security of updates applied to equipment is critical to maintaining operation of the nation’s electricity grid,” said Santiago Grijalva, the project’s principal investigator and Southern Company Distinguished Professor in Georgia Tech’s School of Electrical and Computer Engineering. “We have demonstrated that GridTrust can block direct cyber-attacks through the equipment supply chain in multiple configurations and scenarios, while also preventing a whole array of potential errors. What we have developed and demonstrated will provide multiple layers of additional security to the existing electricity grid.”

The project focused on power system controllers, including sensors, actuators, and protection relays that are normally located in power substations distributed throughout a utility’s service area. Malicious actors may attempt to alter the software controlling the devices to, for instance, turn off power or damage the equipment. The attacks could take place if technicians attempt to use corrupted software to make updates at utility substations or other facilities.

Authentication Uses Semiconductor PUFs, Cryptography

Installed as part of the substation equipment, GridTrust would verify the authenticity of the software before any updates were installed, and it would ensure that the software was being applied to the correct device – by a person authorized to do so. In addition to cryptographic technologies, the system uses a new form of security based on unique physically unclonable functions (PUFs) that exist in certain semiconductor chips. PUFs are a set of unique characteristics created by minor variations that occur during chip fabrication.

“The PUF relies on random behavior based on variations in the manufacturing process, and they cannot be changed after fabrication,” said Vincent Mooney, an associate professor in Georgia Tech’s School of Electrical and Computer Engineering. “During an update, the GridTrust interfacing device first proves its identity using the PUF, then it verifies both utility and vendor signatures using their public RSA keys. Only if all these checks are passed will the firmware update be successfully installed. If the update isn’t installed, the device will continue to operate with its previous firmware version, and the utility’s network operations center will be notified to investigate.”

The GridTrust technology can operate as a standalone device with existing utility equipment or be built into new devices. Utility sensors, actuators, relays and similar control devices are currently produced by multiple manufacturers, and the Georgia Tech researchers have been in contact with an existing supplier that is interested in incorporating the technology, Grijalva said.

GridTrust Evaluated in a Real Utility Substation

Initial testing of the GridTrust system took place in Georgia Tech laboratories, then researchers worked with technical staff at the city of Marietta to evaluate the system in one of the utility’s substations. Located northwest of Atlanta, Marietta’s power network serves approximately 42,000 customers, including several critical electrical loads. The testing was done in a substation circuit isolated from the grid to ensure that the research activity would not affect customers.

“When Georgia Tech approached us about participating in an operational technology security research project, we were excited to participate, especially considering that our mayor and city manager have always supported working with state and local universities to develop new programs and technologies to solve real-world challenges,” said Ronald Barrett, Director of Information Technology for Marietta.

GTRI Cybersecurity “Red Team” Challenges the System

As part of the testing, Grijalva and Mooney involved “red team” cybersecurity researchers from the Georgia Tech Research Institute (GTRI), Georgia Tech’s applied research organization. GTRI researchers Trevor Lewis, David Huggins, Sam Litchfield, and Matt Guinn led an effort to challenge the GridTrust system with sophisticated attempts to install software that simulated the kind of potential malware that could affect utility equipment.

“They pretended to be black-hat hackers who wanted to compromise the system by pushing a malicious configuration file to one of the devices or initiating a firmware update without being authorized to do that,” said Huggins, a GTRI senior research engineer. “They had several attack methods and strategies aimed at multiple components of the system – and were not successful.”

Such third-party validation is important to a broad range of systems, noted Lewis, a senior research engineer who participates in “red team” test scenarios for many critical systems. “We are routinely contracted to perform assessments on a variety of system architectures to emulate the actions of real cyber attackers, and to test and evaluate the security of all components within an architecture under test,” he said.

Next Step: Implementation in Utility Industry

While there are multiple manufacturers of equipment for the utility industry, the devices provide similar functions and have similar needs for periodic updating. The protection system developed by Georgia Tech should be broadly applicable to devices produced by different manufacturers, and could therefore have broad application to the utility industry.

“Georgia Tech is creating technology that makes energy delivery systems safer, and protecting that critical infrastructure is important for national security,” Huggins said. “Reliable electrical power is critical to every aspect of our society today.”

In addition to ensuring the safety of device updates, the GridTrust system will also help utilities inventory the software operating on substation devices. Large utility companies can have hundreds or thousands of substations in their service areas, each with dozens of devices that may need periodic updates.

The three-year GridTrust project is now moving into the commercialization phase where it could be licensed to manufacturers or spun off into a start-up company, Grijalva said. For utilities like Marietta Power that want to be on the cutting edge of cybersecurity, that comes as welcome news.

“We believe the work that Georgia Tech has done is critical to maintaining a safe and secure electrical grid,” said Eric Patten, Marietta Power’s electrical director. “Our goal for this project was to see a system that added another layer of security from attacks, and from what we have seen, we believe this was a success.”

Writer: John Toon (john.toon@gtri.gatech.edu)
GTRI Communications
Georgia Tech Research Institute
Atlanta, Georgia USA

The Georgia Tech Research Institute (GTRI) is the nonprofit, applied research division of the Georgia Institute of Technology (Georgia Tech). Founded in 1934 as the Engineering Experiment Station, GTRI has grown to more than 2,800 employees supporting eight laboratories in over 20 locations around the country and performing more than $800 million of problem-solving research annually for government and industry. GTRI's renowned researchers combine science, engineering, economics, policy, and technical expertise to solve complex problems for the U.S. federal government, state, and industry.

Three of 12 projects that received funding from the U.S. National Science Foundation’s Using the Rules of Life to Address Societal Challenges are led by researchers in Georgia Tech’s School of Chemical and Biomolecular Engineering (ChBE).

The 12 projects received a total of $27 million in investment, supporting the use of knowledge learned from studying the Rules of Life — the complex interactions within and between a broad array of living systems across biological scales, and time and space — to tackle pressing societal challenges, including clean water, planet sustainability, carbon capture, biosecurity, and antimicrobial resistance to antibiotics. The Georgia Tech-related projects received a total of $7.7 million.

"The enormous opportunity to apply biological principles to solving the biggest problems of today is one we cannot take lightly," said Susan Marqusee, NSF assistant director for Biological Sciences. "These projects will use life to improve life, including for many underprivileged communities and groups."

The Georgia Tech-led projects include:

• Co-Producing Knowledge, Biotechnologies and Practices to Enhance Biological Nitrogen Fixation for Sustainable Agriculture. $2.67 million (Georgia Tech and Worcester Polytechnic Institute, award 2319430)

The project’s principal investigator is Lily Cheung, assistant professor of ChBE@GT, and the co-principal investigators are Shuichi Takayama, professor of biomedical engineering at Georgia Tech, and William San Martín, assistant professor of global environmental science, technology, and governance at Worcester Polytechnic Institute.

The researchers will address food security through low-cost technology based on biological principles to increase nitrogen content in soils and improve crop production on marginal lands.

• Next-Generation Biological Security and Bio-Hackathon, $2.81 million (Georgia Tech and Massachusetts Institute of Technology, award 2319231).

The project’s principal investigator is Corey Wilson, professor of ChBE@GT, and the co-principal investigators are Matthew Realff, professor of ChBE@GT, and Christopher Voigt, professor of biological engineering at Massachusetts Institute of Technology.

The researchers will create programmable, biological combination lock methods — "on and off" states — for using synthetic biology safely, containing potentially dangerous organisms and protecting valuable ones.

• Synthetic Protocell Communities to Address Critical Sensing Challenges, $2.23 million (Georgia Tech, award 2319391).

The project’s principal investigator is Mark Styczynski, professor of ChBE@GT, and the co-principal investigators are Shuichi Takayama, professor of biomedical engineering at Georgia Tech; Brian Hammer, associate professor of biological sciences at Georgia Tech, and Neha Garg, assistant professor of chemistry and biochemistry at Georgia Tech.

The researchers will create synthetic "protocells" enabling the development of a highly sensitive, field deployable analysis system that could be used for many applications such as measuring micronutrient deficiencies in undernourished populations.