# About Cyber security and systems engineering researcher. Stacy works on **static analysis of compiled software**, **physics-based intrusion detection**, and the security of **critical infrastructure**. ----- # News <!-- No new news is news of no new news. --> <table> <tr> <th>Teaching</th> <td>I will be teaching a course on automated reverse engineering of compiled software at Tennessee Tech (though teaching remotely from ORNL this time).</td> </tr> <tr> <th>Speaking</th> <td>I was on a panel session on [security in the cloud](https://www.teknovation.biz/about-50-attend-ktechs-cybersecurity-in-the-cloud-lunch-and-learn-get-some-good-advice/).</td> </tr> <!-- <tr> <th>Teaching</th> <td>I'm teaching an automated binary analysis class at Tennessee Tech, on campus.</td> </tr> <tr> <th>Speaking</th> <td>I spoke at "75 Years of Science: Lab Day at Oak Ridge National Laboratory" on Saturday, June 9, 2018, at ORNL.</td> </tr> <tr> <th>Teaching</th> <td>I taught Computer Science 7575 on Electric Grid Security in the summer for Tennessee Tech... but on campus at ORNL!</td> </tr> <tr> <th>Speaking</th> <td>Some of the nation's best middle and high school students were subjected to hearing me speak at the <a href="https://science.energy.gov/wdts/nsb">National Science Bowl&reg;</a> in Chevy Chase, Maryland, on April 27, 2018.</td> </tr> <tr> <th>Competition</th> <td>ORNL hosted one third of the three-lab <a href="https://cyberdefense.anl.gov/">Cyber Defense Competition (CDC)</a> on April 6 &amp; 7, 2018, with PNNL and ANL. Overall winner: Lewis University. We're going to do this again on November 30 &amp; December 1, 2018, so get ready.<td> </tr> <tr> <th>Speaking</th> <td>I spoke at the University of Tennessee [Science Forum][utsf] on November 17, 2017.</td> </tr> <tr> <th>Panelist</th> <td>I served on a panel on cyber security at [INTERSECT'17][intersect2017] hosted at [GRIDSMART][gridsmart] on November 15, 2017.</td> </tr> <tr> <th>Panelist</th> <td>I served on the national laboratory panel at the 8th Annual [Maritime Risk Symposium][mrs2017] at Tiffin University on November 14, 2017.</td> </tr> <tr> <th>Article</th> <td>Read my article [Vehicle Cybersecurity][eetimes2017] on EETimes.</td> </tr> <tr> <th>Q&amp;A</th> <td>I had a Q&amp;A on vehicle security. You can find it <a href="https://tec.ieee.org/articles-publications/ieee-talks-transportation-electrification/ieee-talks-transportation-electrification?highlight=WyJwcm93ZWxsIiwicHJvd2VsbCdzIl0=">here</a>.</td> </tr> <tr> <th>Speaking</th> <td>I spoke at [Friends of Oak Ridge National Laboratory (FONL)](http://www.fornl.info), Tuesday, March 14th, 2017, at the UT Resource Center, 1201 Oak Ridge Turnpike, Oak Ridge, TN. The topic was automotive security.</td> </tr> <tr> <th>Speaking</th> <td>I spoke at the [ON*VECTOR 16th Annual International Photonics Workshop](http://onvector2017.eventbrite.com), February 22-23, 2017, at the Qualcomm Institute at the University of California, San Diego, CA. The topic was "Smart Cybersecurity for Smart Networks."</td> </tr> <tr> <th>Speaking</th> <td>I spoke at the University of Kentucky in Lexington, KY, on the 23 January 2017, as part of their [Spring 2017 ECE Colloquium Lecture Series](https://www.engr.uky.edu/ece/research/seminars/). Topic was security in general, and vehicle security specifically.</td> </tr> <tr> <th>Workshop</th> <td>I ran the "Smart Cyber Security Sub-System" track of the ASCR Smart Networks Workshop in DC on 8-9 December 2016. Report forthcoming!</td> </tr> <tr> <th>Presenting</th> <td>On October 27th I presented "The Physics of Cyber Security" at the [2016 ICS Cyber Security Conference](http://www.icscybersecurityconference.com) in Atlanta, GA, on the campus of Georgia Tech. Probably for the first and last time, since my laptop died immdiately thereafter. Physics!</td> </tr> </tr> <tr> <th>Panelist / Presenting</th> <td>On October 18th and 19th I served on a panel and presented on vehicle security at the [Volpe Center][volpe] in Cambridge, MA.</td> </tr> <tr> <th>Presenting</th> <td>On October 17th I presented "Vehicle Security: Where the Rubber Meets the Code" at the [Cyber &amp; Information Security Consortium (CISC)][cisc] Fall Event, at the Crowne Plaza Hotel in Knoxville, TN. This event was co-located with [EDGE](https://edgesecurityconference.com).</td> </tr> <tr> <th>Presenting</th> <td>On October 3rd I presented on Vehicle Security to the Minnesota State University IEEE student group (about 50 attendees) in Mankato, MN, and then later in the day to the Southern Minnesota IEEE Chapter in Rochester, MN.</td> </tr> <tr> <th>Presenting</th> <td>My talk was accepted for <a href="http://energy.gov/cio/cybercon">DOE CyberCon</a> in Atlanta, GA, 19th through 22nd of September.</td> </tr> <tr> <th>Speaking</th> <td>I spoke at the <a href="http://www.mcmspecialevents.com/HotelElegante/PPP/">6th Annual Building Resilience through Public-Private Partnerships Conference</a>, 29th through 31st of August, in Colorado Springs, CO.</td> </tr> <tr> <th>Panel</th> <td>On the 29th of June I participated in a lively panel session on vehicle security at <a href="http://itec-conf.com">ITEC 2016</a> in Dearborn, MI. </tr> <tr> <th>Panel</th> <td>I participated in a panel session on IoT at the FedEx Institute in Memphis on the 10th of June. <a href="http://www.memphis.edu/fedex/cast_workshop/schedule.php">CAST Reserach Workshop Schedule</a></td> </tr> <tr> <th>Speaking</th> <td>On 20 May at 11am I presented a short webinar for the <a href="http://www.thei3p.org">Institute for Information Infrastructure Protection (I3P)</a> on Vehicle Security work at ORNL.</td> </tr> <tr> <th>Award</th> <td>Hyperion won a <a href="https://www.federallabs.org/index.php?tray=award_detail&cid=1512gp695&tid=1FLtop207">2016 Excellence in Technology Transfer Award</a> from the Federal Laboratory Consortium (FLC).</td> </tr> <tr> <th>Speaking</th> <td>I was an invited speaker for <a href="http://tecworkshop.crosby.work">Electrified Transportation: A Focused Workshop</a>, at Howard University.</td> </tr> <tr> <th>CISR'11</th> <td>The 11th annual Cyber and Information Security Research (CISR) conference at Oak Ridge National Laboratory was held 5-7 April 2016. It was the best yet! [Details here][cisr2016].</td> </tr> <tr> <th>R&amp;D 100 Wins</th> <td>Our Hyperion team won an R&amp;D 100 award! See [here][rd100winners] for the 2015 winners. ORNL won [6 awards][ornl6rd100] and DOE labs got [33][doe33rd100]!</td> </tr> --> </table> # Jobs <table> <tr> <td width="50%"> __Chief Cybersecurity Research Scientist__<br> [Computational Sciences and Engineering Division][csed]<br> [Oak Ridge National Laboratory][ornl] </td> <td> __Program Manager__, Cybersecurity for Energy Delivery Systems (CEDS)<br> [Sustainable Electricity Program][sep]<br> [Oak Ridge National Laboratory][ornl] </td> </tr> <tr> <td> __Adjunct Professor__ (Joint Appointment with ORNL)<br> [Department of Electrical Engineering and Computer Science][eecs]<br> [The University of Tennessee][utk] </td> <td> __Adjunct Professor__ (Joint Appointment with ORNL)<br> [Department of Computer Science][ttucs]<br> [Tennessee Tech University][ttu] </td> </tr> <tr> <td> __Adjunct Professor__ (Joint Appointment with ORNL)<br> Medical College<br> [Georgetown University][gu] </td> </tr> </table> # Projects <table> <tr><td> __[Verify][]__ will develop a tool to verify the integrity of software at runtime in energy delivery system devices, without taking the equipment offline. </td> <td> The **Black Box** provides a secure environment for mixing data from mutually untrusted sources. </td></tr> <tr><td> **Acronym** applies machine learning to rapidly develop a digital twin of a complex system. </td> <td> **M3LID** applies multimodal machine learning to detect adverse cyber events. </td></tr> </table> # Open Source <!-- Do you want to see my [open source report card][report-card]? Of course you don't. **And you can't! OSRC is broken, and nobody wants to fix it! Waa!** --> <table> <tr> <td width="50%"> __[Elision][]__ is a term rewriter written in Scala. Terms and types are unified (all types are terms, and vice-versa) allowing for creating some very elaborate type systems - or no type system at all. See Relision, below, for what the future might hold. </td> <td> __[Pico][]__ is a platform for safely working with malware. The Pico encoding is used to store files, and is open source. It's used at ORNL and a few other places. </td> </tr> <tr> <td> __[Relision][]__ is a project for liberating Elision from Scala with a lot of improvements, including some cleanup and simplification of the "mathy" parts. Ah, math. Current targets are C++ and Rust. </td> <td> __[SPSPS][]__ is a parsing, string, and JSON library written in plain C99 for an embedded project. </td> </tr> <tr> <td> __[HE4][]__ is a fast, pure C hash table implementation with a fixed memory footprint written for an embedded project. </td> <td> &nbsp; </td> </tr> </table> # Research Incomplete bibliographies abound. Look [here (dblp3)][dblp3] for one, or maybe [here (dblp-trier)][dblp-trier]. # Miscellany I am an [IEEE Distinguished Lecturer][ieee-dl]. I am a [Certified Scrum Master][csm]. My [CV] is available, if you're looking for that. Ask me for an updated version, just in case. I'm distributing it as a [PDF][]. Do you need a photo and bio for some reason? [You can find both here][sjp-bio]. This web page was created using [Markdown][] and [Strapdown][]. I don't play video games, but if I did, you could find me on [Steam][steam]. My Erd&#337;s number is 3. # Contact <table> <tr> <td>__Personal Web__</td> <td>[https://stacyprowell.com][sp]</td> </tr> <tr> <td>__ORNL Email__</td> <td> <prowellsj@ornl.gov> </td> </tr> <tr> <td>__University Email__</td> <td> <sprowell@utk.edu> </td> </tr> <tr> <td>__Personal Email__</td> <td> <sprowell@gmail.com> </td> </tr> <tr> <td>__Snail__</td> <td>[One Bethel Valley Rd, PO Box 2008, MS-6418, Oak Ridge, TN 37831-6418][ornl-geo]</td> </tr> <tr> <td>__Office__</td> <td>[+1 (865) 241-8874][voice]</td> </tr> <tr> <td>__Fax__</td> <td>[+1 (865) 576-5943][fax]</td> </tr> <tr> <td colspan=2>Most days you can find me in room 205, building 6012, ORNL main campus.</td> </tr> </table> <img align=right height=150 width=150 src="recursive-qr.png" alt="Self" /> ![Cato](little_cato.jpg) The only way out is through. / Le seul moyen de sortir est de passer à travers. / Der einzige Weg raus ist durch. / Solum autem per exitum. / Ο μόνος τρόπος να βγούμε είναι να προχωρήσουμε / Единственный путь наружу это пройти через это [dblp1]: http://dblp.uni-trier.de/pers/hd/p/Prowell:Stacy.html [dblp2]: http://dblp.uni-trier.de/pers/hd/p/Prowell:Stacy_J=.html [dblp3]: http://freesearch.kbs.uni-hannover.de/freesearch/Search.action?q=author%3AS*+Prowell&search=Search [dblp-trier]: http://dblp.uni-trier.de/search/publ?q=prowell [report-card]: http://osrc.dfm.io/sprowell [sep]: http://web.ornl.gov/sci/eere/sustainable_electricity.shtml [ornl]: http://www.ornl.gov/ [cisr]: http://csiir.ornl.gov/ [eecs]: http://www.eecs.utk.edu/ [utk]: http://www.utk.edu/ [gu]: https://gufaculty360.georgetown.edu/s/contact/0033600001tjppyAAA/stacy-prowell [elision]: http://elision.github.io/ [pico]: http://mons-pico.github.io/ [Relision]: https://relision.stacyprowell.com/ [SPSPS]: http://github.com/sprowell/spsps/ [HE4]: https://github.com/sprowell/he4/ [sp]: https://stacyprowell.com/ [cv]: sjp-cv.pdf [strapdown]: http://strapdownjs.com [markdown]: http://daringfireball.net/projects/markdown/ [cisr2015]: 2015cisr.html [cisr2016]: 2016cisr.html [cisr2017]: 2017cisr.html [cisr2018]: https://cisrc18.ornl.gov/ [voice]: tel:+1-865-241-8874 [fax]: tel:+1-865-576-5943 [ornl-geo]: geo:35.9313,-84.3104 [csed]: http://computing.ornl.gov/cse/ [steam]: http://steamcommunity.com/id/sprowell [cacr]: http://cacr.iu.edu [cacr-talk]: http://cacr.iu.edu/events/past/692 [ntrc]: http://www.ntrc.gov [rd100winners]: http://www.rd100awards.com/node/507 [ornl6rd100]: https://www.ornl.gov/news/ornl-wins-six-rd-100-awards [doe33rd100]: http://www.energy.gov/articles/us-department-energy-projects-win-33-rd-100-awards-2015 [ieee-dl]: http://tec.ieee.org/distinguished-lecturers-program [sjp-bio]: sjp-bio.html [cisc]: http://www.cyberinfosec.org/ [volpe]: https://www.volpe.dot.gov [PDF]: https://get.adobe.com/reader/ [ttucs]: https://www.tntech.edu/engineering/departments/csc/ [ttu]: https://www.tntech.edu/ [mrs2017]: http://www.tiffin.edu/criminaljustice/maritime-risk-symposium-2017 [intersect2017]: https://www.intersect17.com/ [gridsmart]: https://gridsmart.com/ [utsf]: https://scienceforum.utk.edu/ [eetimes2017]: https://www.eetimes.com/author.asp?section_id=36&doc_id=1332183 [Verify]: https://www.energy.gov/sites/prod/files/2017/09/f36/CEDS%20Awards%20fact%20sheet%20September2017%20FINAL.pdf [sjp-ornl]: https://www.ornl.gov/staff-profile/stacy-j-prowell [csm]: https://www.scrumalliance.org/community/profile/sprowell