Critical Infrastructure Protection X

Name: Critical Infrastructure Protection X | 10th IFIP WG 11.10 International Conference, ICCIP 2016, Arlington, VA, USA, March 14-16, 2016, Revised Selected Papers
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

10th IFIP WG 11.10 International Conference, ICCIP 2016, Arlington, VA, USA, March 14-16, 2016, Revised Selected Papers

Mason Rice Sujeet Shenoi(Herausgeber*in)

Springer (Verlag)

Erschienen am 7. November 2016

XIV, 255 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-319-48737-3 (ISBN)

53,49 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Contents
Contributing Authors
Preface
I THEMES AND ISSUES
1 CYBERSPACE AND ORGANIZATIONAL STRUCTURE: AN ANALYSIS OF THE CRITICAL INFRASTRUCTURE ENVIRONMENT
1. Introduction
2. Structuring Organizations
2.1 Organizational Structure Theory
2.2 Contingencies
2.3 Environmental Uncertainty
2.4 Structures
3. Mechanistic and Organic Structures
3.1 U.S. Army
3.2 Apache Indians, Anonymous and Al Qaeda
3.3 Synthesis
4. Research Method
4.1 Research Design and Methodology
4.2 Data Collection
4.3 Coding
4.4 Validity
4.5 Reliability
5. Results
5.1 Descriptive Statistics
5.2 Inter-Coder Agreement
5.3 Code Distribution
5.4 Coder Analysis
5.5 Strata Analysis
5.6 Recommendations
6. Conclusions
References
2 CRITICAL INFRASTRUCTURE ASSET IDENTIFICATION: POLICY, METHODOLOGY AND GAP ANALYSIS
1. Introduction
2. Policy Frameworks
2.1 United States
2.2 European Union
2.3 Other Countries
3. Methodology Requirements
3.1 Qualitative Requirements
3.2 Quantitative Requirements
4. Methodology
5. Gap Analysis
5.1 Completeness
5.2 Reproducibility
5.3 Defensibility
6. Future Research
7. Conclusions
References
3 MITIGATING EMERGENT VULNERABILITIES IN OIL AND GAS ASSETS VIA RESILIENCE
1. Introduction
2. Terminology
3. Problem Statement
4. Methods
5. Vulnerabilities and Resilience
5.1 Asset Protection
5.2 Security Guidelines
5.3 Reactive (Not Proactive) Focus
5.4 Emergent Threats and Resilience
5.5 Enhancing Risk Assessment and Recovery
5.6 Oil and Gas Sector Vulnerabilities
5.7 Strengths and Resilience
6. Key Findings
6.1 Proactive Regulations and Guidelines
6.2 Emergent Threats and Resilience
6.3 Risk Governance and Societal Audits
7. Conclusions
Acknowledgements
References
4 LEGAL ASPECTS OF PROTECTING INTELLECTUAL PROPERTY IN ADDITIVE MANUFACTURING
1. Introduction
2. Related Work
3. Intellectual Property Risks
4. Federal Protections
4.1 Patents
4.2 Copyrights
4.3 Trademarks
5. Conclusions
References
II CONTROL SYSTEMS SECURITY
5 PRACTICAL APPLICATION LAYER EMULATION IN INDUSTRIAL CONTROL SYSTEM HONEYPOTS
1. Introduction
1.1 Honeypots
1.2 Industrial Control System Honeypots
1.3 Current Technology
2. Emulator Methodology
2.1 Design Considerations
2.2 Proxy and Update Features
2.3 Synchronization Algorithms
2.4 Design Limitations
3. Emulator Evaluation
3.1 Experimental Design
3.2 Limitations
4. Experimental Results
4.1 Load Testing
4.2 Synchronization Algorithm Comparison
4.3 Authenticity Testing
5. Conclusions
References
6 LIGHTWEIGHT JOURNALING FOR SCADA SYSTEMS VIA EVENT CORRELATION
1. Introduction
2. Background
3. Journaling Use Cases
4. Event Correlation
5. Journal Generation Approach
5.1 General Architecture
5.2 Correlation Methodology
6. Performance Evaluation
6.1 Implementation
6.2 Performance Evaluation
6.3 Experimental Results
6.4 Sensitivity Analysis
7. Conclusions
Acknowledgements
References
7 FORENSIC ANALYSIS OF A SIEMENS PROGRAMMABLE LOGIC CONTROLLER
1. Introduction
2. Related Work
3. Forensic Analysis Methodology
3.1 Analyzing the Siemens TIA Portal
3.2 Analyzing the PEData.plf File
3.3 Analyzing the Program Block Metadata
4. Analyzing the Diagnostics Buffer
4.1 Starting and Stopping the Controller
4.2 Uploading a New Program
4.3 Analyzing Engineer-Defined Events
5. Case Study
6. Conclusions
References
8 DIVISION OF CYBER SAFETY AND SECURITY RESPONSIBILITIES BETWEEN CONTROL SYSTEM OWNERS AND SUPPLIERS
1. Introduction
2. Background
3. Norwegian Electric Power Supply Sector
4. Materials and Methods
4.1 Observation Studies
4.2 Interviews
4.3 Questionnaire Survey
5. Results and Discussion
6. Conclusions
References
IIII NFRASTRUCTURE MODELING AND SIMULATION
9 MULTIGRAPH CRITICAL INFRASTRUCTURE MODEL
1. Introduction
2. Modeling Framework
2.1 Individual Infrastructure Graphs
2.2 Interdependent Infrastructures
3. Modeling Approach
3.1 Electric Power Sector Model
3.2 Water Sector Model
3.3 Telecommunications Sector Model
4. System Analysis
4.1 Global Vulnerability Analysis
4.2 Critical Node Analysis
5. Wind Turbine Attack Scenario
5.1 Targeting a Wind Turbine System
5.2 Targeting Multiple Wind Turbines
5.3 Attack Modeling
6. Conclusions
References
10 ENHANCING DECISION SUPPORT WITH INTERDEPENDENCY MODELING
1. Introduction
2. Related Work
3. Integrated Decision Making
3.1 CISIApro Simulator
3.2 Decision Support Modules
3.3 Unit Commitment Problem
4. Reference Scenario and Results
4.1 Reference Scenario
4.2 Results
5. Conclusions
References
11 INTEGRATING SIMULATED PHYSICS AND DEVICE VIRTUALIZATION IN CONTROL SYSTEM TESTBEDS
1. Introduction
2. Related Work
2.1 Testbeds
2.2 Physics Simulations
2.3 Emdedded Virtualization
3. SPAEVI Methodology
3.1 Overview
3.2 Reverse Engineering Requirements
3.3 Virtualization Requirements
3.4 Integration Requirements
3.5 Benefits
4. Proof-of-Concept System
4.1 Reverse Engineering
4.2 Virtualization
4.3 Simulated Physics Integration
4.4 Verification of Benefits
4.5 Results
5. Conclusions
References
12 A MULTIDISCIPLINARY PREDICTIVE MODEL FOR MANAGING CRITICAL INFRASTRUCTURE DISRUPTIONS
1. Introduction
2. Background
3. Proposed Model
3.1 Model Design
3.2 Modeling Process
4. Model Viability and Validation
4.1 Model Viability
4.2 Model Validation
5. Base Model Framework
6. Conclusions
References
IV RISK AND IMPACT ASSESSMENT
13 TOWARDS A COMPARABLE CROSS-SECTOR RISK ANALYSIS: RAMCAP REVISITED
1. Introduction
2. Background
3. Problem Formulation
4. Results
5. Conclusions
References
14 CLASSIFICATION AND COMPARISON OF CRITICAL INFRASTRUCTURE PROTECTION TOOLS
1. Introduction
2. Tool Classification and Comparison
2.1 Purpose Based Classification
2.2 Modeling Approach Based Classification
2.3 Classification Summary
3. Modeling Tool Comparison
3.1 Purpose Based Comparison
3.2 Technical Approach Based Comparison
4. Conclusions
References

Systemvoraussetzungen

Als PDF speichern Als Link merken