Critical Infrastructure Protection XIII: 13th IFIP WG 11.10 International Conference, ICCIP 2019, Arlington, VA, USA, March 11–12, 2019, Revised Selected Papers

Description

The information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to operations in every sector: chemicals, commercial facilities, communications, critical manufacturing, dams, defense industrial base, emergency services, energy, financial services, food and agriculture, government facilities, healthcare and public health, information technology, nuclear reactors, materials and waste, transportation systems, and water and wastewater systems. Global business and industry, governments, indeed society itself, cannot function if major components of the critical information infrastructure are degraded, disabled or destroyed. Critical Infrastructure Protection XIII describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include: Themes and Issues; Infrastructure Protection; Vehicle Infrastructure Security; Telecommunications Infrastructure Security; Cyber-Physical Systems Security; and Industrial Control Systems Security. This book is the thirteenth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of sixteen edited papers from the Thirteenth Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, held at SRI International, Arlington, Virginia, USA in the spring of 2019. Critical Infrastructure Protection XIII is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security. Front Matter ....Pages i-xvi Front Matter ....Pages 1-1 Quantifying the Costs of Data Breaches (Siddharth Dongre, Sumita Mishra, Carol Romanowski, Manan Buddhadev)....Pages 3-16 Front Matter ....Pages 17-17 A Comparative Analysis Approach for Deriving Failure Scenarios in the Natural Gas Distribution Infrastructure (Michael Locasto, David Balenson)....Pages 19-50 An Attack-Fault Tree Analysis of a Movable Railroad Bridge (Matthew Jablonski, Yongxin Wang, Chaitanya Yavvari, Zezhou Wang, Xiang Liu, Keith Holt et al.)....Pages 51-71 Converting an Electric Power Utility Network to Defend Against Crafted Inputs (Michael Millian, Prashant Anantharaman, Sergey Bratus, Sean Smith, Michael Locasto)....Pages 73-85 Cyber Security Modeling of Non-Critical Nuclear Power Plant Digital Instrumentation (Trevor MacLean, Robert Borrelli, Michael Haney)....Pages 87-100 Front Matter ....Pages 101-101 Electronic Control Unit Discrimination Using Wired Signal Distinct Native Attributes (Rahn Lassiter, Scott Graham, Timothy Carbino, Stephen Dunlap)....Pages 103-121 Vehicle Identification and Route Reconstruction via TPMS Data Leakage (Kenneth Hacker, Scott Graham, Stephen Dunlap)....Pages 123-136 Modeling Liability Data Collection Systems for Intelligent Transportation Infrastructure Using Hyperledger Fabric (Luis Cintron, Scott Graham, Douglas Hodson, Barry Mullins)....Pages 137-156 Front Matter ....Pages 157-157 Securing Wireless Coprocessors from Attacks in the Internet of Things (Jason Staggs, Sujeet Shenoi)....Pages 159-178 Vulnerability Assessment of InfiniBand Networking (Daryl Schmitt, Scott Graham, Patrick Sweeney, Robert Mills)....Pages 179-205 Front Matter ....Pages 207-207 Leveraging Cyber-Physical System Honeypots to Enhance Threat Intelligence (Michael Haney)....Pages 209-233 Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins (J. Peter Brady, Sergey Bratus, Sean Smith)....Pages 235-252 Data-Driven Field Mapping of Security Logs for Integrated Monitoring (Seungoh Choi, Yesol Kim, Jeong-Han Yun, Byung-Gil Min, Hyoung-Chun Kim)....Pages 253-268 Front Matter ....Pages 269-269 Modeling and Machine-Checking Bump-in-the-Wire Security for Industrial Control Systems (Mehdi Sabraoui, Jeffrey Hieb, Adrian Lauf, James Graham)....Pages 271-288 Defining Attack Patterns for Industrial Control Systems (Raymond Chan, Kam-Pui Chow, Chun-Fai Chan)....Pages 289-309 An Incident Response Model for Industrial Control System Forensics Based on Historical Events (Ken Yau, Kam-Pui Chow, Siu-Ming Yiu)....Pages 311-328