Ebook: Critical Infrastructure Protection II

The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection II describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

- Themes and Issues

- Infrastructure Security

- Control Systems Security

- Security Strategies

- Infrastructure Interdependencies

- Infrastructure Modeling and Simulation

This book is the second volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of twenty edited papers from the Second Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at George Mason University, Arlington, Virginia, USA in the spring of 2008.

Critical Infrastructure Protection II is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Mauricio Papa is an Associate Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

---

The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection II describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

- Themes and Issues

- Infrastructure Security

- Control Systems Security

- Security Strategies

- Infrastructure Interdependencies

- Infrastructure Modeling and Simulation

This book is the second volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of twenty edited papers from the Second Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at George Mason University, Arlington, Virginia, USA in the spring of 2008.

Critical Infrastructure Protection II is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Mauricio Papa is an Associate Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

---

The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection II describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

- Themes and Issues

- Infrastructure Security

- Control Systems Security

- Security Strategies

- Infrastructure Interdependencies

- Infrastructure Modeling and Simulation

This book is the second volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of twenty edited papers from the Second Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at George Mason University, Arlington, Virginia, USA in the spring of 2008.

Critical Infrastructure Protection II is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Mauricio Papa is an Associate Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Content:
Front Matter....Pages i-xviii
Emergent Risks In Critical Infrastructures....Pages 3-16
Cyberspace Policy For Critical Infrastructures....Pages 17-28
Security Assessment Of A Turbo-Gas Power Plant....Pages 31-40
Detecting Cyber Attacks On Nuclear Power Plants....Pages 41-54
Applying Trusted Network Technology To Process Control Systems....Pages 57-70
Towards A Taxonomy Of Attacks Against Energy Control Systems....Pages 71-85
Attribution Of Cyber Attacks On Process Control Systems....Pages 87-99
Modeling And Detecting Anomalies In Scada Systems....Pages 101-113
Assessing The Integrity Of Field Devices In Modbus Networks....Pages 115-128
Designing Security-Hardened Microkernels For Field Devices....Pages 129-140
Combating Memory Corruption Attacks On Scada Devices....Pages 141-156
Mitigating Accidents In Oil And Gas Production Facilities....Pages 157-170
Automated Assessment Of Compliance With Security Best Practices....Pages 173-187
Collaborative Access Control For Critical Infrastructures....Pages 189-201
Modeling Dependencies In Critical Infrastructures....Pages 205-213
Metrics For Quantifying Interdependencies....Pages 215-227
An Integrated Approach For Simulating Interdependencies....Pages 229-239
Simulation Of Advanced Train Control Systems....Pages 243-256
An Integrated Methodology For Critical Infrastructure Modeling And Simulation....Pages 257-268
Using 3D Models And Discrete Simulations In Infrastructure Security Applications....Pages 269-278

---

The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection II describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

- Themes and Issues

- Infrastructure Security

- Control Systems Security

- Security Strategies

- Infrastructure Interdependencies

- Infrastructure Modeling and Simulation

This book is the second volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of twenty edited papers from the Second Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at George Mason University, Arlington, Virginia, USA in the spring of 2008.

Critical Infrastructure Protection II is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Mauricio Papa is an Associate Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Content:
Front Matter....Pages i-xviii
Emergent Risks In Critical Infrastructures....Pages 3-16
Cyberspace Policy For Critical Infrastructures....Pages 17-28
Security Assessment Of A Turbo-Gas Power Plant....Pages 31-40
Detecting Cyber Attacks On Nuclear Power Plants....Pages 41-54
Applying Trusted Network Technology To Process Control Systems....Pages 57-70
Towards A Taxonomy Of Attacks Against Energy Control Systems....Pages 71-85
Attribution Of Cyber Attacks On Process Control Systems....Pages 87-99
Modeling And Detecting Anomalies In Scada Systems....Pages 101-113
Assessing The Integrity Of Field Devices In Modbus Networks....Pages 115-128
Designing Security-Hardened Microkernels For Field Devices....Pages 129-140
Combating Memory Corruption Attacks On Scada Devices....Pages 141-156
Mitigating Accidents In Oil And Gas Production Facilities....Pages 157-170
Automated Assessment Of Compliance With Security Best Practices....Pages 173-187
Collaborative Access Control For Critical Infrastructures....Pages 189-201
Modeling Dependencies In Critical Infrastructures....Pages 205-213
Metrics For Quantifying Interdependencies....Pages 215-227
An Integrated Approach For Simulating Interdependencies....Pages 229-239
Simulation Of Advanced Train Control Systems....Pages 243-256
An Integrated Methodology For Critical Infrastructure Modeling And Simulation....Pages 257-268
Using 3D Models And Discrete Simulations In Infrastructure Security Applications....Pages 269-278
....