Critical Information Infrastructure Security

This volume contains the proceedings of the Third International Workshop on Critical Information Infrastructure Security (CRITIS 2008),which was held - tober 13 15, 2008 in Villa Mondragone (Rome), Italy, and was co-organized by AIIC (The Italian Society of Critical Infrastructures Experts) and ENEA (The Italian National Agency for New Technology, Energy and the Environment). This year s workshop was focused on an interdisciplinary and multifaced - alogue about the third millennium security strategies for critical information infrastructures (CII) and their protection (CIP). The aim was to explore the new challenges posed by the CII, bringing together researchersand professionals from universities, private companies and public administrations interested in all security-related aspects, and actively involved in the scienti?c communities at a national, European and trans-European level. More than 70 papers were submitted to the conference, which were screened by a very selective double-blind review process to identify the 39 papers selected for presentation, based on their signi?cance, novelty and technical quality. - visions were not checked and the authors bear full responsibility for the content of their papers. CRITIS 2008 also had six outstanding invited speakers: Erol Gelenbe (- perial College, UK), Massoud Amin (University of Minnesota, USA), George Apostolakis(MIT,USA),AndreaValboni(Microsoft,Italy),SujeetShenoi(U- versity of Tulsa, USA) and Angelo Marino (DG Information Society and Media, European Commission).

Inhalt
Blackouts in Power Transmission Networks Due to Spatially Localized Load Anomalies.- Stability of a Distributed Generation Network Using the Kuramoto Models.- Enabling System of Systems Analysis of Critical Infrastructure Behaviors.- Information Modelling and Simulation in Large Interdependent Critical Infrastructures in IRRIIS.- Multi-level Dependability Modeling of Interdependencies between the Electricity and Information Infrastructures.- Interdependency Analysis in Electric Power Systems.- Modeling and Simulation of Complex Interdependent Systems: A Federated Agent-Based Approach.- Self-healing and Resilient Critical Infrastructures.- Critical Infrastructures Security Modeling, Enforcement and Runtime Checking.- INcreasing Security and Protection through Infrastructure REsilience: The INSPIRE Project.- Increase of Power System Survivability with the Decision Support Tool CRIPS Based on Network Planning and Simulation Program PSS®SINCAL.- Information Modelling and Simulation in Large Dependent Critical Infrastructures An Overview on the European Integrated Project IRRIIS.- Assessment of Structural Vulnerability for Power Grids by Network Performance Based on Complex Networks.- Using Centrality Measures to Rank the Importance of the Components of a Complex Network Infrastructure.- RadialNet: An Interactive Network Topology Visualization Tool with Visual Auditing Support.- Quantitative Security Risk Assessment and Management for Railway Transportation Infrastructures.- Assessing and Improving SCADA Security in the Dutch Drinking Water Sector.- Analysis of Malicious Traffic in Modbus/TCP Communications.- Scada Malware, a Proof of Concept.- Testbeds for Assessing Critical Scenarios in Power Control Systems.- A Structured Approach to Incident Response Management inthe Oil and Gas Industry.- Security Strategy Analysis for Critical Information Infrastructures.- Emerging Information Infrastructures: Cooperation in Disasters.- Service Modeling Language Applied to Critical Infrastructure.- Graded Security Expert System.- Protection of Mobile Agents Execution Using a Modified Self-Validating Branch-Based Software Watermarking with External Sentinel.- Adaptation of Modelling Paradigms to the CIs Interdependencies Problem.- Empirical Findings on Critical Infrastructure Dependencies in Europe.- Dependent Automata for the Modelling of Dependencies.- Application of IPK (Information, Preferences, Knowledge) Paradigm for the Modelling of Precautionary Principle Based Decision-Making.- Disaster Propagation in Heterogeneous Media via Markovian Agents.- A Study on Multiformalism Modeling of Critical Infrastructures.- Simulation of Critical ICT Infrastructure for Municipal Crisis Management.- An Ontology-Based Approach to Blind Spot Revelation in Critical Infrastructure Protection Planning.- Security of Water Infrastructure Systems.- Critical Infrastructures as Complex Systems: A Multi-level Protection Architecture.- Challenges Concerning the Energy-Dependency of the Telecom Infrastructure.- An Effective Approach for Cascading Effects Prevision in Critical Infrastructures.