Critical Infrastructure Protection X

Name: Critical Infrastructure Protection X | 10th IFIP WG 11.10 International Conference, ICCIP 2016, Arlington, VA, USA, March 14-16, 2016, Revised Selected Papers
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

10th IFIP WG 11.10 International Conference, ICCIP 2016, Arlington, VA, USA, March 14-16, 2016, Revised Selected Papers

Mason Rice Sujeet Shenoi(Editor)

Springer (Publisher)

Published on 7. November 2016

XIV, 255 pages

E-Book

PDF with digital watermarking

System requirements

978-3-319-48737-3 (ISBN)

€53.49incl. 7% vat

System requirements

for PDF with digital watermarking

E-Book Single Licence

Available for download

Description

Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.

Alles über E-Books, Kopierschutz & Dateiformate finden Sie in unserem Info- & Hilfebereich.

The information infrastructure - comprising computers, embedded devices, networks and software systems - is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed. Critical Infrastructure Protection describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include: themes and issues; control systems security; infrastructure modeling and simulation; risk and impact assessment. This book is the tenth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of fourteen edited papers from the Tenth Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, held at SRI International, Arlington, Virginia, USA in the spring of 2016. Critical Infrastructure Protection is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

More details

Other editions

Content

Intro
Contents
Contributing Authors
Preface
I THEMES AND ISSUES
1 CYBERSPACE AND ORGANIZATIONAL STRUCTURE: AN ANALYSIS OF THE CRITICAL INFRASTRUCTURE ENVIRONMENT
1. Introduction
2. Structuring Organizations
2.1 Organizational Structure Theory
2.2 Contingencies
2.3 Environmental Uncertainty
2.4 Structures
3. Mechanistic and Organic Structures
3.1 U.S. Army
3.2 Apache Indians, Anonymous and Al Qaeda
3.3 Synthesis
4. Research Method
4.1 Research Design and Methodology
4.2 Data Collection
4.3 Coding
4.4 Validity
4.5 Reliability
5. Results
5.1 Descriptive Statistics
5.2 Inter-Coder Agreement
5.3 Code Distribution
5.4 Coder Analysis
5.5 Strata Analysis
5.6 Recommendations
6. Conclusions
References
2 CRITICAL INFRASTRUCTURE ASSET IDENTIFICATION: POLICY, METHODOLOGY AND GAP ANALYSIS
1. Introduction
2. Policy Frameworks
2.1 United States
2.2 European Union
2.3 Other Countries
3. Methodology Requirements
3.1 Qualitative Requirements
3.2 Quantitative Requirements
4. Methodology
5. Gap Analysis
5.1 Completeness
5.2 Reproducibility
5.3 Defensibility
6. Future Research
7. Conclusions
References
3 MITIGATING EMERGENT VULNERABILITIES IN OIL AND GAS ASSETS VIA RESILIENCE
1. Introduction
2. Terminology
3. Problem Statement
4. Methods
5. Vulnerabilities and Resilience
5.1 Asset Protection
5.2 Security Guidelines
5.3 Reactive (Not Proactive) Focus
5.4 Emergent Threats and Resilience
5.5 Enhancing Risk Assessment and Recovery
5.6 Oil and Gas Sector Vulnerabilities
5.7 Strengths and Resilience
6. Key Findings
6.1 Proactive Regulations and Guidelines
6.2 Emergent Threats and Resilience
6.3 Risk Governance and Societal Audits
7. Conclusions
Acknowledgements
References
4 LEGAL ASPECTS OF PROTECTING INTELLECTUAL PROPERTY IN ADDITIVE MANUFACTURING
1. Introduction
2. Related Work
3. Intellectual Property Risks
4. Federal Protections
4.1 Patents
4.2 Copyrights
4.3 Trademarks
5. Conclusions
References
II CONTROL SYSTEMS SECURITY
5 PRACTICAL APPLICATION LAYER EMULATION IN INDUSTRIAL CONTROL SYSTEM HONEYPOTS
1. Introduction
1.1 Honeypots
1.2 Industrial Control System Honeypots
1.3 Current Technology
2. Emulator Methodology
2.1 Design Considerations
2.2 Proxy and Update Features
2.3 Synchronization Algorithms
2.4 Design Limitations
3. Emulator Evaluation
3.1 Experimental Design
3.2 Limitations
4. Experimental Results
4.1 Load Testing
4.2 Synchronization Algorithm Comparison
4.3 Authenticity Testing
5. Conclusions
References
6 LIGHTWEIGHT JOURNALING FOR SCADA SYSTEMS VIA EVENT CORRELATION
1. Introduction
2. Background
3. Journaling Use Cases
4. Event Correlation
5. Journal Generation Approach
5.1 General Architecture
5.2 Correlation Methodology
6. Performance Evaluation
6.1 Implementation
6.2 Performance Evaluation
6.3 Experimental Results
6.4 Sensitivity Analysis
7. Conclusions
Acknowledgements
References
7 FORENSIC ANALYSIS OF A SIEMENS PROGRAMMABLE LOGIC CONTROLLER
1. Introduction
2. Related Work
3. Forensic Analysis Methodology
3.1 Analyzing the Siemens TIA Portal
3.2 Analyzing the PEData.plf File
3.3 Analyzing the Program Block Metadata
4. Analyzing the Diagnostics Buffer
4.1 Starting and Stopping the Controller
4.2 Uploading a New Program
4.3 Analyzing Engineer-Defined Events
5. Case Study
6. Conclusions
References
8 DIVISION OF CYBER SAFETY AND SECURITY RESPONSIBILITIES BETWEEN CONTROL SYSTEM OWNERS AND SUPPLIERS
1. Introduction
2. Background
3. Norwegian Electric Power Supply Sector
4. Materials and Methods
4.1 Observation Studies
4.2 Interviews
4.3 Questionnaire Survey
5. Results and Discussion
6. Conclusions
References
IIII NFRASTRUCTURE MODELING AND SIMULATION
9 MULTIGRAPH CRITICAL INFRASTRUCTURE MODEL
1. Introduction
2. Modeling Framework
2.1 Individual Infrastructure Graphs
2.2 Interdependent Infrastructures
3. Modeling Approach
3.1 Electric Power Sector Model
3.2 Water Sector Model
3.3 Telecommunications Sector Model
4. System Analysis
4.1 Global Vulnerability Analysis
4.2 Critical Node Analysis
5. Wind Turbine Attack Scenario
5.1 Targeting a Wind Turbine System
5.2 Targeting Multiple Wind Turbines
5.3 Attack Modeling
6. Conclusions
References
10 ENHANCING DECISION SUPPORT WITH INTERDEPENDENCY MODELING
1. Introduction
2. Related Work
3. Integrated Decision Making
3.1 CISIApro Simulator
3.2 Decision Support Modules
3.3 Unit Commitment Problem
4. Reference Scenario and Results
4.1 Reference Scenario
4.2 Results
5. Conclusions
References
11 INTEGRATING SIMULATED PHYSICS AND DEVICE VIRTUALIZATION IN CONTROL SYSTEM TESTBEDS
1. Introduction
2. Related Work
2.1 Testbeds
2.2 Physics Simulations
2.3 Emdedded Virtualization
3. SPAEVI Methodology
3.1 Overview
3.2 Reverse Engineering Requirements
3.3 Virtualization Requirements
3.4 Integration Requirements
3.5 Benefits
4. Proof-of-Concept System
4.1 Reverse Engineering
4.2 Virtualization
4.3 Simulated Physics Integration
4.4 Verification of Benefits
4.5 Results
5. Conclusions
References
12 A MULTIDISCIPLINARY PREDICTIVE MODEL FOR MANAGING CRITICAL INFRASTRUCTURE DISRUPTIONS
1. Introduction
2. Background
3. Proposed Model
3.1 Model Design
3.2 Modeling Process
4. Model Viability and Validation
4.1 Model Viability
4.2 Model Validation
5. Base Model Framework
6. Conclusions
References
IV RISK AND IMPACT ASSESSMENT
13 TOWARDS A COMPARABLE CROSS-SECTOR RISK ANALYSIS: RAMCAP REVISITED
1. Introduction
2. Background
3. Problem Formulation
4. Results
5. Conclusions
References
14 CLASSIFICATION AND COMPARISON OF CRITICAL INFRASTRUCTURE PROTECTION TOOLS
1. Introduction
2. Tool Classification and Comparison
2.1 Purpose Based Classification
2.2 Modeling Approach Based Classification
2.3 Classification Summary
3. Modeling Tool Comparison
3.1 Purpose Based Comparison
3.2 Technical Approach Based Comparison
4. Conclusions
References

System requirements

Save as PDF Copy link into clipboard

Schweitzer Fachinformationen

Critical Infrastructure Protection X

Description

More details

Other editions

Additional editions

Content

System requirements