# Cybersecurity in a Large-Scale Research Facility--One Institution's Approach
###### Abstract
Cybersecurity Challenges to Protection with Access--Using the Example of the NHMFL DC Field Facility  
In recent years, the operation of a number of large-scale industrial, public, and academic facilities has been disrupted by cyberattacks, resulting in significant operational downtime, facility damage, compromise to the safety of personnel and the environment, as well as significant monetary losses due to downtime, equipment, and reputational damage [4, 5, 6]. High-profile institutions and facilities with unique, world-leading, or critical capabilities are particularly vulnerable to cybersecurity threats and cyberattacks. Hence, the development of a strong yet practicable cybersecurity strategy is needed to enable scientific exchange, adequate access for remote participation, and reliable instrument control. The DCFF is a large-scale, scientific user facility featuring industrial-grade equipment. The DCFF is a 24/7 site comprised of a magnet cooling water plant, a 60-megawatt power infrastructure, and a cryogenics plant, which are monitored and controlled via a Distributed Control System (DCS, Figure 1). Specifically, the 60 MW power system features an onsite substation, several subsidiary switchgear line-ups, four dedicated 14.5 MW DC power supplies for magnet operation, and power quality conditioning equipment. The magnet cooling water plant features primary magnet cooling loops that utilize four 500 HP and one 800 HP pumps, each equipped with a variable speed drive, as well as a water treatment system that ensures high-resistivity deionized magnet cooling water. The primary cooling loops are linked to a secondary cooling system that features four 2000-ton chillers, four cooling towers, and 4,000,000 gallons of stored chilled water and various pumps. The cryogenics plant purifies, compresses, and liquefies helium from the NHFML's closed helium recovery system and directly connects to the superconducting magnet cryostats of two of the NHMFL's flagship magnets, the 45T hybrid magnet [7] and the Series Connected Hybrid magnet [8]. Importantly, the operation of all three plants is required to serve the user facility at its full capacity. The DCFF welcomes several hundred scientific users per year, both in person and via remote participation [3]. A major goal of a cybersecurity program at a large-scale user facility, such as the NHMFL's DCFF, is the protection of personnel and equipment from the potentially disastrous release of stored energy via compromised controls, protection systems, or the external take-over of the large-scale infrastructure. Inherent challenges include maintaining the integrity of the industrial equipment and control systems. For example, security updates or upgrades of the operating system (OS) versions routinely disable or adversely impact previously working software and systems. As a result, (proprietary) software, vintage equipment, and operating systems are not always straightforward to update or replace, which results in system vulnerability until necessary security enhancements or compensating controls are in place. This is particularly problematic in the context of the user facility's need for high-level accessibility (Figure 2). Figure 1: Overview of the DCFF industrial infrastructure. Figure 2: Overview of the accessibility needs for scientific research in a large-scale user facility, exemplified by the NHMFL’s user magnet systems. Therefore, the presented approach is highly focused on ensuring necessary cybersecurity and data privacy controls are in place while also recognizing the need to balance and reduce the inherent friction between cybersecurity and research where possible--given the complex research and technology environment that NHMFL researchers, information technology (IT), and professional cybersecurity staff are required to manage. Without an effective strategy for addressing such challenges and implementing effective controls, it is possible that increased levels of risk may result, or new risks could be created.