The information infrastructure - comprising computers, embedded devices, networks and software systems - is vital to operations in every sector: inf- mation technology, telecommunications, energy, banking and ?nance, tra- portation systems, chemicals, agriculture and food, defense industrial base, public health and health care, national monuments and icons, drinking water and water treatment systems, commercial facilities, dams, emergency services, commercial nuclear reactors, materials and waste, postal and shipping, and government facilities. Global business and industry, governments, indeed - ciety itself, cannot function if major components of the critical information infrastructure are degraded, disabled or destroyed. This book, Critical Infrastructure Protection IV, is the fourth volume in the annual series produced by IFIP Working Group 11.10 on Critical Infr- tructure Protection, an active international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation e?orts related to critical infrastructure protection. The book presents original research results and innovative applications in the area of infrastructure protection. Also, it highlights the importance of weaving s- ence, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. This volume contains seventeen edited papers from the Fourth Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure P- tection, held at the National Defense University, Washington, DC, March 15- 17, 2010. The papers were refereed by members of IFIP Working Group 11.10 and otherinternationally-recognized experts in critical infrastructure prot- tion.
Themes and Issues.- Security At What Cost?.- Foreign Direct Investment in an Era of Increased Threats to Critical Infrastructures.- Critical Information Infrastructure Protection in the Developing World.- Control Systems Security.- Modeling Control System Failures and Attacks - The Waterloo Campaign to Oil Pipelines.- High Security with Low Latency in Legacy SCADA Systems.- Detecting Sensor Signal Manipulations in Non-Linear Chemical Processes.- Distributed Intrusion Detection System for SCADA Protocols.- Infrastructure Security.- Distributed IP Watchlist Generation for Intrusion Detection in the Electrical Smart Grid.- Security Analysis of the MPLS Label Distribution Protocol.- U.S. Federal Oversight of Rail Transportation of Toxic by Inhalation Materials.- Protecting the Food Supply Chain from Terrorist Attack.- Infrastructure Modeling and Simulation.- Interactive Visualization of Interdependencies and Vulnerabilities in Constrained Environments.- Assessing the Economic Loss and Social Impact of Information System Breakdowns.- Modeling Inoperability Propagation Using Bayesian Networks.- Risk Management.- Resilience in Risk Analysis and Risk Assessment.- A Manufacturer-Specific Security Assessment Methodology for Critical Infrastructure Components.- An Advanced Decision-Support Tool for Electricity Infrastructure Operations.
