Critical Infrastructure Protection V

1. Front Matter

   Pages I-XIV

   PDF

2. THEMES AND ISSUES

   1. Front Matter

      Pages 1-1

      PDF

   2. Using Deception to Shield Cyberspace Sensors

      • Mason Rice, Daniel Guernsey, Sujeet Shenoi

      Pages 3-18

   3. Botnets as an Instrument of Warfare

      • Eric Koziel, David Robinson

      Pages 19-28

3. CONTROL SYSTEMS SECURITY

   1. Front Matter

      Pages 29-29

      PDF

   2. Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems

      • Jason Reeves, Ashwin Ramaswamy, Michael Locasto, Sergey Bratus, Sean Smith

      Pages 31-46

   3. A Plant-Wide Industrial Process Control Security Problem

      • Thomas McEvoy, Stephen Wolthusen

      Pages 47-56

   4. Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing

      • Rebecca Shapiro, Sergey Bratus, Edmond Rogers, Sean Smith

      Pages 57-72

   5. Security Analysis of VPN Configurations in Industrial Control Environments

      • Sanaz Rahimi, Mehdi Zargham

      Pages 73-88

4. INFRASTRUCTURE SECURITY

   1. Front Matter

      Pages 89-89

      PDF

   2. Implementing Novel Defense Functionality in MPLS Networks Using Hyperspeed Signaling

      • Daniel Guernsey, Mason Rice, Sujeet Shenoi

      Pages 91-106

   3. Creating a Cyber Moving Target for Critical Infrastructure Applications

      • Hamed Okhravi, Adam Comella, Eric Robinson, Stephen Yannalfo, Peter Michaleas, Joshua Haines

      Pages 107-123

   4. An Evidence-Based Trust Assessment Framework for Critical Infrastructure Decision Making

      • Yujue Wang, Carl Hauser

      Pages 125-135

   5. Enhancing the Usability of the Commercial Mobile Alert System

      • Paul Ngo, Duminda Wijesekera

      Pages 137-149

   6. Real-Time Detection of Covert Channels in Highly Virtualized Environments

      • Anyi Liu, Jim Chen, Li Yang

      Pages 151-164

5. INFRASTRUCTURE MODELING AND SIMULATION

   1. Front Matter

      Pages 165-165

      PDF

   2. Analyzing Cyber-Physical Attacks on Networked Industrial Control Systems

      • Bela Genge, Igor Nai Fovino, Christos Siaterlis, Marcelo Masera

      Pages 167-183

   3. Using an Emulation Testbed for Operational Cyber Security Exercises

      • Christos Siaterlis, Andres Perez-Garcia, Marcelo Masera

      Pages 185-199

   4. Analyzing Intelligence on WMD Attacks Using Threaded Event-Based Simulation

      • Qi Fang, Peng Liu, John Yen, Jonathan Morgan, Donald Shemanski, Frank Ritter

      Pages 201-216

The information infrastructure---comprising computers, embedded devices, networks and software systems---is vital to day-to-day operations in every sector: information and telecommunications, banking and finance, energy, chemicals and hazardous materials, agriculture, food, water, public health, emergency services, transportation, postal and shipping, government and defense. Global business and industry, governments, indeed society itself, cannot function effectively if major components of the critical information infrastructure are degraded, disabled or destroyed. Critical Infrastructure Protection V describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include: Themes and Issues, Control Systems Security, Infrastructure Security, and Infrastructure Modeling and Simulation. This book is the 5th volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of 14 edited papers from the 5th Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, held at Dartmouth College, Hanover, New Hampshire, USA in the spring of 2011. Critical Infrastructure Protection V is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security. Jonathan Butts is an Assistant Professor of Computer Science at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

• cyber attacks
• embedded control systems
• intrusion detection
• network security
• virtualized environments
• algorithm analysis and problem complexity

• Air Force Institute of Technology, Wright-Patterson Air Force Base, Dayton, USA

  Jonathan Butts

• Department of Computer Science, University of Tulsa, Tulsa, USA

  Sujeet Shenoi

Policies and ethics