This defense in depth discussion scenario is an intentional cybersecurity attack on the water utility’s SCADA system. It occurs during the fall after a dry summer in Fringe City. The water utility’s Information Technology (IT) person did not receive an expected pay raise and decides to reprogram the SCADA system to shut off the high-lift pumps. The operator’s familiarity with the SCADA system allows him to reprogram the alarms that typically notify operators of a high-lift pump failure. In addition, he prevents access to the SCADA system by others. A wildfire breaks out on the outskirts of the city. Please identify what type(s) of new countermeasures should have been implemented to prevent this cyber attack from occurring.
Start a discussion thread and discuss what type(s) of new countermeasures should have been implemented to prevent the cyber attack described above from occurring. Be specific in recommending countermeasures for this scenario.
1
Copyright © 2012, Elsevier Inc.
All Rights Reserved
Chapter
6
Depth
Cyber Attacks
Protecting National Infrastructure, 1st ed.
2
• Any layer of defense can fail at any time, thus the
introduction of defense in depth
• A series of protective elements is placed between an
asset and the adversary
• The intent is to enforce policy across all access points
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Introduction
3
Fig. 6.1 – General defense in depth
schema
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
4
• Quantifying the effectiveness of a layered defense is
often difficult
• Effectiveness is best determined by educated guesses
• The following are relevant for estimating
effectiveness
– Practical experience
– Engineering analysis
– Use-case studies
– Testing and simulation
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Effectiveness of Depth
5
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.2 – Moderately effective single
layer of protection
6
• When a layer fails, we can conclude it was either
flawed or unsuited to the target environment
• No layer is 100% effective—the goal of making layers
“highly” effective is more realistic
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Effectiveness of Depth
7
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.3 – Highly effective single layer of
protection
8
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.4 – Multiple moderately effective
layers of protection
9
• A national authentication system for every citizen
would remove the need for multiple passwords,
passphrases, tokens, certificates, and biometrics that
weaken security
• Single sign-on (SSO) would accomplish this
authentication simplification objective
• However, SSO access needs to be part of a
multilayered defense
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Layered Authentication
10
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.5 – Schema showing two layers of
end-user authentication
11
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.6 – Authentication options
including direct mobile access
12
Layered E-Mail Virus and Spam
Protection
• Commercial environments are turning to virtual, in-
the-cloud solutions to filter e-mail viruses and spam
• To that security layer is added filtering software on
individual computers
• Antivirus software helpful, but useless against certain
attacks (like botnet)
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
13
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.7 – Typical architecture with
layered e-mail filtering
14
• Layering access controls increases security
• Add to this the limiting of physical access to assets
• For national infrastructure, assets should be covered
by as many layers possible
– Network-based firewalls
– Internal firewalls
– Physical security
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Layered Access Controls
15
Fig. 6.8 – Three layers of protection
using firewall and access controls
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
16
• Five encryption methods for national infrastructure
protection
– Mobile device storage
– Network transmission
– Secure commerce
– Application strengthening
– Server and mainframe data storage
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Layered Encryption
17
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.9 – Multple layers of encryption
18
• The promise of layered intrusion detection has not
been fully realized, though it is useful
• The inclusion of intrusion response makes the
layered approach more complex
• There are three opportunities for different intrusion
detection systems to provide layered protection
– In-band detection
– Out-of-band correlation
– Signature sharing
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Layered Intrusion Detection
19
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
Fig. 6.10 – Sharing intrusion detection
information between systems
20
• Developing a multilayered defense for national
infrastructure would require a careful architectural
analysis of all assets and protection systems
– Identifying assets
– Subjective estimations
– Obtaining proprietary information
– Identifying all possible access paths
Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6
–
D
e
p
th
National Program of Depth
We provide professional writing services to help you score straight A’s by submitting custom written assignments that mirror your guidelines.
Get result-oriented writing and never worry about grades anymore. We follow the highest quality standards to make sure that you get perfect assignments.
Our writers have experience in dealing with papers of every educational level. You can surely rely on the expertise of our qualified professionals.
Your deadline is our threshold for success and we take it very seriously. We make sure you receive your papers before your predefined time.
Someone from our customer support team is always here to respond to your questions. So, hit us up if you have got any ambiguity or concern.
Sit back and relax while we help you out with writing your papers. We have an ultimate policy for keeping your personal and order-related details a secret.
We assure you that your document will be thoroughly checked for plagiarism and grammatical errors as we use highly authentic and licit sources.
Still reluctant about placing an order? Our 100% Moneyback Guarantee backs you up on rare occasions where you aren’t satisfied with the writing.
You don’t have to wait for an update for hours; you can track the progress of your order any time you want. We share the status after each step.
Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.
Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.
From brainstorming your paper's outline to perfecting its grammar, we perform every step carefully to make your paper worthy of A grade.
Hire your preferred writer anytime. Simply specify if you want your preferred expert to write your paper and we’ll make that happen.
Get an elaborate and authentic grammar check report with your work to have the grammar goodness sealed in your document.
You can purchase this feature if you want our writers to sum up your paper in the form of a concise and well-articulated summary.
You don’t have to worry about plagiarism anymore. Get a plagiarism report to certify the uniqueness of your work.
Join us for the best experience while seeking writing assistance in your college life. A good grade is all you need to boost up your academic excellence and we are all about it.
We create perfect papers according to the guidelines.
We seamlessly edit out errors from your papers.
We thoroughly read your final draft to identify errors.
Work with ultimate peace of mind because we ensure that your academic work is our responsibility and your grades are a top concern for us!
Dedication. Quality. Commitment. Punctuality
Here is what we have achieved so far. These numbers are evidence that we go the extra mile to make your college journey successful.
We have the most intuitive and minimalistic process so that you can easily place an order. Just follow a few steps to unlock success.
We understand your guidelines first before delivering any writing service. You can discuss your writing needs and we will have them evaluated by our dedicated team.
We write your papers in a standardized way. We complete your work in such a way that it turns out to be a perfect description of your guidelines.
We promise you excellent grades and academic excellence that you always longed for. Our writers stay in touch with you via email.