Cyber-Physical Attack Recovery Procedures

1. Front Matter

   Pages i-xx

   PDF

2. Cyber-Physical Attack Recovery Procedures

   • Luis Ayala

   Pages 1-14

3. Threats and Attack Detection

   • Luis Ayala

   Pages 15-26

4. Prevent Hackers from Destroying a Boiler

   • Luis Ayala

   Pages 27-32

5. Prevent Hackers from Destroying a Pressure Vessel

   • Luis Ayala

   Pages 33-34

6. Prevent Hackers from Destroying Chillers

   • Luis Ayala

   Pages 35-36

7. Prevent Hackers from Destroying a Gas Fuel Train

   • Luis Ayala

   Pages 37-37

8. Prevent Hackers from Destroying a Cooling Tower

   • Luis Ayala

   Pages 39-39

9. Prevent Hackers from Destroying a Backup Generator

   • Luis Ayala

   Pages 41-42

10. Prevent Hackers from Destroying Switchgear

    • Luis Ayala

    Pages 43-44

11. Eight Steps to Defending Building Control System

    • Luis Ayala

    Pages 45-46

12. Block Hacker Surveillance of Your Buildings

    • Luis Ayala

    Pages 47-48

13. Cyber-Physical Attack Recovery Procedures Template

    • Luis Ayala

    Pages 49-155

14. Back Matter

    Pages 157-159

    PDF

This book provides a template with step-by-step instructions on how to respond and recover when hackers get into your SCADA system and cause building equipment to act erratically or fail completely. When hackers shut off the water, turn off the building power, disable the sewage effluent pumps and activate the fire alarm, you have to do something quick. It is even more alarming that hackers can do all those things at the same time—even from the other side of the planet.

Not every equipment failure or power outage is a cyber-physical attack. When your building is attacked, you probably won’t suspect it was a hacker—until you see a pattern. The building control system (BCS) will act "squirrelly" and you will know—it really is a cyber-physical attack.

Once a cyber-physical attack occurs, it can mean years of court cases, job losses, higher insurance rates, and maybe even criminal litigation. It also takes years to overcome the loss of safety credibility to your employees and the local community. Cyber-Physical Attack Recovery Procedures provides a detailed guide to taking the right steps ahead of time, and equipping your facility and employees with the training, knowledge, and tools they need and may save lives.

The book contains:

• A one-of-a-kind action plan describing how hackers attack building equipment, the extent of damage possible, and how to respond when a cyber-physical attack occurs.
• Detailed descriptions of cyber-physical attacks directed against SCADA systems or building controls, as well as cyber booby traps 
• Invaluable appendices, including: Emergency Procedures, Team Staffing and Tasking, Alternate Site Procedures, a Documentation List, Software and Hardware Inventories, Vendor Contact Lists, External Support Agreements, and much more.

What you’ll learn

• Possible ways hackers cancause building equipment to fail.
  
• How to quickly assess the threat to his facilities in real time, how to stop a cyber-physical attack.
  
• How to restore equipment operation without doing any more damage.
  

Who This Book Is For

Architects, Engineers, Building Managers, Students, Researchers and Consultants interested in cybersecurity-attacks against facilities in the real world. Also for IT professionals getting involved in cybersecurity responsibilities.

• Cybersecurity
• Cyber-Physical Attack
• SCADA Systems
• Building control
• Industrial Control Systems
• Cyber Booby-Trap
• Cyber drone attack
• Cyber Attack vectors
• Cyber Attack detection

• Fredericksburg, USA

  Luis Ayala

Luis Ayala worked over 25 years for the Department of Defense with the past 11 years at the Defense Intelligence Agency. Prior to his appointment as a Defense Intelligence Senior Leader in 2008, he held several leadership positions at the Branch and Division levels.

His tenure culminated with the position as Senior Technical Expert (facilities/construction). Mr. Ayala earned his Bachelor of Architecture degree from Pratt Institute and he received his Master of Science and Technology Intelligence from the National Intelligence University. NIU is the Intelligence Community’s sole accredited, federal degree granting institution. His Master’s thesis titled “Cybersecure Facilities for the Intelligence Community” is classified. Mr. Ayala was awarded the DIA Civilian Expeditionary Medal and the Civilian Combat Support Medal.

Policies and ethics