Ebook: Critical Infrastructure Protection III: Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, Hanover, New Hampshire, USA, March 23-25, 2009, Revised Selected Papers

The information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection III describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

• Risk Management
• Control Systems Security
• Infrastructure Security
• Infrastructure Modeling and Simulation

This book is the third volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of seventeen edited papers from the Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at Dartmouth College, Hanover, New Hampshire, USA in the spring of 2009.

Critical Infrastructure Protection III is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Charles Palmer is a Senior Technical Advisor with the Institute for Information Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

---

The information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection III describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

• Risk Management
• Control Systems Security
• Infrastructure Security
• Infrastructure Modeling and Simulation

This book is the third volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of seventeen edited papers from the Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at Dartmouth College, Hanover, New Hampshire, USA in the spring of 2009.

Critical Infrastructure Protection III is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Charles Palmer is a Senior Technical Advisor with the Institute for Information Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

---

The information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection III describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

• Risk Management
• Control Systems Security
• Infrastructure Security
• Infrastructure Modeling and Simulation

This book is the third volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of seventeen edited papers from the Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at Dartmouth College, Hanover, New Hampshire, USA in the spring of 2009.

Critical Infrastructure Protection III is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Charles Palmer is a Senior Technical Advisor with the Institute for Information Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

Content:
Front Matter....Pages -
Front Matter....Pages 1-1
Information Risk Management and Resilience....Pages 3-17
Does the Liberalization of the European Railway Sector Increase Systemic Risk?....Pages 19-33
Risk-Based Criticality Analysis....Pages 35-49
Modeling and Managing Risk in Billing Infrastructures....Pages 51-64
Front Matter....Pages 65-65
A Taxonomy of Attacks on the DNP3 Protocol....Pages 67-81
Design and Implementation of a Secure Modbus Protocol....Pages 83-96
Providing Situational Awareness for Pipeline Control Operations....Pages 97-111
Enhancing the Safety, Security and Resilience of ICT and Scada Systems Using Action Research....Pages 113-123
An Ontology for Identifying Cyber Intrusion Induced Faults in Process Control Systems....Pages 125-138
Using Physical Models for Anomaly Detection in Control Systems....Pages 139-149
Detecting Anomalies in Process Control Networks....Pages 151-165
Front Matter....Pages 167-167
Nondeducibility-Based Analysis of Cyber-Physical Systems....Pages 169-183
Stack-Based Buffer Overflows in Harvard Class Embedded Systems....Pages 185-197
Secure Cross-Domain Train Scheduling....Pages 199-211
Front Matter....Pages 213-213
A Holistic-Reductionistic Approach for Modeling Interdependencies....Pages 215-227
Ontology-Based Critical Infrastructure Modeling and Simulation....Pages 229-242
A Framework for Modeling Interdependencies in Japan’s Critical Infrastructures....Pages 243-257

---

The information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection III describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

• Risk Management
• Control Systems Security
• Infrastructure Security
• Infrastructure Modeling and Simulation

This book is the third volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of seventeen edited papers from the Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at Dartmouth College, Hanover, New Hampshire, USA in the spring of 2009.

Critical Infrastructure Protection III is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Charles Palmer is a Senior Technical Advisor with the Institute for Information Infrastructure Protection, Dartmouth College, Hanover, New Hampshire, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

Content:
Front Matter....Pages -
Front Matter....Pages 1-1
Information Risk Management and Resilience....Pages 3-17
Does the Liberalization of the European Railway Sector Increase Systemic Risk?....Pages 19-33
Risk-Based Criticality Analysis....Pages 35-49
Modeling and Managing Risk in Billing Infrastructures....Pages 51-64
Front Matter....Pages 65-65
A Taxonomy of Attacks on the DNP3 Protocol....Pages 67-81
Design and Implementation of a Secure Modbus Protocol....Pages 83-96
Providing Situational Awareness for Pipeline Control Operations....Pages 97-111
Enhancing the Safety, Security and Resilience of ICT and Scada Systems Using Action Research....Pages 113-123
An Ontology for Identifying Cyber Intrusion Induced Faults in Process Control Systems....Pages 125-138
Using Physical Models for Anomaly Detection in Control Systems....Pages 139-149
Detecting Anomalies in Process Control Networks....Pages 151-165
Front Matter....Pages 167-167
Nondeducibility-Based Analysis of Cyber-Physical Systems....Pages 169-183
Stack-Based Buffer Overflows in Harvard Class Embedded Systems....Pages 185-197
Secure Cross-Domain Train Scheduling....Pages 199-211
Front Matter....Pages 213-213
A Holistic-Reductionistic Approach for Modeling Interdependencies....Pages 215-227
Ontology-Based Critical Infrastructure Modeling and Simulation....Pages 229-242
A Framework for Modeling Interdependencies in Japan’s Critical Infrastructures....Pages 243-257
....