The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed.

Critical Infrastructure Protection II describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include:

• Themes and Issues

• Infrastructure Security

• Control Systems Security

• Security Strategies

• Infrastructure Interdependencies

• Infrastructure Modeling and Simulation

This book is the second volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of twenty edited papers from the Second Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection held at George Mason University, Arlington, Virginia, USA in the spring of 2008.

Critical Infrastructure Protection II is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Mauricio Papa is an Associate Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Inhalt

Themes And Issues.- Emergent Risks In Critical Infrastructures.- Cyberspace Policy For Critical Infrastructures.- Infrastructure Security.- Security Assessment Of A Turbo-Gas Power Plant.- Detecting Cyber Attacks On Nuclear Power Plants.- Control Systems Security.- Applying Trusted Network Technology To Process Control Systems.- Towards A Taxonomy Of Attacks Against Energy Control Systems.- Attribution Of Cyber Attacks On Process Control Systems.- Modeling And Detecting Anomalies In Scada Systems.- Assessing The Integrity Of Field Devices In Modbus Networks.- Designing Security-Hardened Microkernels For Field Devices.- Combating Memory Corruption Attacks On Scada Devices.- Mitigating Accidents In Oil And Gas Production Facilities.- Security Strategies.- Automated Assessment Of Compliance With Security Best Practices.- Collaborative Access Control For Critical Infrastructures.- Infrastructure Interdependencies.- Modeling Dependencies In Critical Infrastructures.- Metrics For Quantifying Interdependencies.- An Integrated Approach For Simulating Interdependencies.- Infrastructure Modeling And Simulation.- Simulation Of Advanced Train Control Systems.- An Integrated Methodology For Critical Infrastructure Modeling And Simulation.- Using 3D Models And Discrete Simulations In Infrastructure Security Applications.