nach oben

Erschienen in:

2013 | OriginalPaper | Buchkapitel

Cyber Security and Resilience of Industrial Control Systems and Critical Infrastructures

verfasst von : Sandro Bologna, Alessandro Fasani, Maurizio Martellini

Erschienen in: Cyber Security

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

“Cyber Security And Resilience Of Industrial Control Systems And Critical Infrastructures”, written by Maurizio Martellini, Sandro Bologna and Alessandro Fasani, it’s a natural follow-up of the previous paper and describes what Industrial Control Systems are, provides an analysis on what are the main vulnerabilities affecting ICS and describes the principal methodologies for attacking them. Then, the paper defines what measures could be taken in order to make ICS and Critical Infrastructures resilient. The document ends outlining what international measures are being taken in order to protect critical infrastructure and their systems.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel From Fortress to Resilience

B. Abolghasem, IAEA Report: The growing resilience of Iran’s nuclear program (Foreign Policy J., 2012), http://www.foreignpolicyjournal.com/2012/02/27/iaea-report-the-growing-resilience-of-irans-nuclear-program/. Accessed 5 May 2013

M. Ahlers, Inside a government computer attack exercise (CNN, 2011), http://edition.cnn.com/2011/10/17/tech/innovation/cyberattack-exercise-idaho/index.html. Accessed 5 May 2013

A. Klimburg (ed.), National cyber security framework manual (NATO CCD COE publication, 2012), http://www.ccdcoe.org/publications/books/NationalCyberSecurityFrameworkManual.pdf. Accessed 5 May 2013

C. Ashton, Press conference on the launch of the EU’s cyber security strategy (2013), http://www.consilium.europa.eu/uedocs/cms_Data/docs/pressdata/EN/foraff/135287.pdf. Accessed 5 May 2013

C. Malmström, Stepping up the fight against cybercriminals to secure a free and open internet (Press conference on the launch of the EU’s cyber security strategy, 2013), http://europa.eu/rapid/press-release_SPEECH-13-105_en.htm. Accessed 5 May 2013

G. Chazan, Cyber saboteurs stalk the oil industry (Financial Times, 2013), http://www.ft.com/cms/s/0/989aa68c-692e-11e2-b254-00144feab49a.html#axzz2Y5HyNmEC. Accessed 5 May 2013

European Commission, Proposal for a regulation of the European parliament and of the council establishing horizon 2020—The framework programme for research and innovation (2014–2020) (European Commission, 2011), http://ec.europa.eu/research/horizon2020/pdf/proposals/com(2011)_809_final.pdf. Accessed on 5 May 2013

European Commission, Cybersecurity strategy of the European Union: an open, safe and secure cyberspace (Euopean Commission, 2013), http://ec.europa.eu/dgs/home-affairs/e-library/documents/policies/organized-crime-and-human-trafficking/cybercrime/docs/join_2013_1_en.pdf. Accessed 5 May 2013

D. Goldman, Hacker hits on U.S. power and nuclear targets spiked in 2012 (CNN, 2013), http://money.cnn.com/2013/01/09/technology/security/infrastructure-cyberattacks/index.html. Accessed 5 May 2013

G. Gritsai et al., Scada safety in numbers. Positive technologies ed. (2013), http://www.ptsecurity.com/download/SCADA_analytics_english.pdf. Accessed 5 May 2013

Idaho National Laboratories, Vulnerability analysis of energy delivery control systems (US DOE publication, 2011), http://energy.gov/sites/prod/files/Vulnerability%20Analysis%20of%20Energy%20Delivery%20Control%20Systems%202011.pdf. Accessed 5 May 2013

N. Kroes, Using cybersecurity to promote European values. Press conference on the launch of the EU’s cyber security strategy (2013), http://europa.eu/rapid/press-release_SPEECH-13-104_en.htm. Accessed May 5 2013

NERC, Cyber attack task force final report (NERC, 2012), http://www.nerc.com/docs/cip/catf/12-CATF_Final_Report_BOT_clean_Mar_26_2012-Board%20Accepted%200521.pdf. Accessed 5 May 2013

Newsroom, Iran ‘fends off new Stuxnet cyber attack (BBC, 2012), http://www.bbc.co.uk/news/world-middle-east-20842113. Accessed 5 May 2013

B. Obama, Improving critical infrastructure cybersecurity—executive order (White House press office, 2013), http://www.whitehouse.gov/the-press-office/2013/02/12/executive-order-improving-critical-infrastructure-cybersecurity. Accessed 5 May 2013

P. Paganini, The importance of security requirements in design of SCADA systems (PenTest auditing and standards, 2012:06)

D. Sanger, Obama order sped up wave of cyberattacks against Iran (The New York Times, 2012), http://www.nytimes.com/2012/06/01/world/middleeast/obama-ordered-wave-of-cyberattacks-against-iran.html?pagewanted=all&_r=0. Accessed 5 May 2013

SHODAN Search Engine (2009), http://www.shodanhq.com/. Accessed 5 May 2013

US Department of Homeland Security: Common cybersecurity vulnerabilities in industrial control systems (2011), http://ics-cert.us-cert.gov/sites/default/files/DHS_Common_Cybersecurity_Vulnerabilities_ICS_2010.pdf. Accessed 5 May 2013

US Department of Homeland Security: ICS–CERT incident response summary report 2009–2011 (2011), http://scadahacker.com/library/Documents/ICS_Events/ICS-CERT%20Incident%20Response%20Summary%20Report.pdf. Accessed 5 May 2013

US Department of Homeland Security: ICS–CERT monthly monitor Oct–Dec 2012 (2011), http://ics-cert.us-cert.gov/pdf/ICS-CERT_Monthly_Monitor_Oct-Dec2012.pdf. Accessed 5 May 2013

US National Communication Systems: Technical information bulletin 04-1, supervisory control and data acquisition (SCADA) systems (2004), http://www.ncs.gov/library/tech_bulletins/2004/tib_04-1.pdf. Accessed 5 May 2013

N. Weinstein, Stuxnet attacks Iran again, reports say (CNET, 2012), http://news.cnet.com/8301-1009_3-57560799-83/stuxnet-attacks-iran-again-reports-say/. Accessed 5 May 2013

J. Weiss, Assuring industrial control system (ICS) cyber security. CSIS ed. (2008), http://csis.org/files/media/csis/pubs/080825_cyber.pdf. Accessed 5 May 2013

K. Zetter, Vulnerability lets hackers control building locks, electricity, elevators and more (Wired US, 2013), http://www.wired.com/threatlevel/2013/02/tridium-niagara-zero-day/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%253A+wired27b+%2528Wired%253A+Blog+-+Threat+Level%2529. Accessed on 5 May 2013

Titel: Cyber Security and Resilience of Industrial Control Systems and Critical Infrastructures
verfasst von: Sandro Bologna
Alessandro Fasani
Maurizio Martellini
Verlag: Springer International Publishing
Buch: Cyber Security
Print ISBN: 978-3-319-02278-9

Electronic ISBN: 978-3-319-02279-6

Copyright-Jahr: 2013
DOI: https://doi.org/10.1007/978-3-319-02279-6_6

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"