discussion

 

This defense in depth discussion scenario is an intentional cybersecurity attack on the water utility’s SCADA system. It occurs during the fall after a dry summer in Fringe City. The water utility’s Information Technology (IT) person did not receive an expected pay raise and decides to reprogram the SCADA system to shut off the high-lift pumps. The operator’s familiarity with the SCADA system allows him to reprogram the alarms that typically notify operators of a high-lift pump failure. In addition, he prevents access to the SCADA system by others. A wildfire breaks out on the outskirts of the city. Please identify what type(s) of new countermeasures should have been implemented to prevent this cyber attack from occurring.

Don't use plagiarized sources. Get Your Custom Essay on
discussion
Just from $13/Page
Order Essay

Start a discussion thread and discuss what type(s) of new countermeasures should have been implemented to prevent the cyber attack described above from occurring. Be specific in recommending countermeasures for this scenario.

1

Copyright © 2012, Elsevier Inc.

All Rights Reserved

Chapter

6

Depth

Cyber Attacks
Protecting National Infrastructure, 1st ed.

2

• Any layer of defense can fail at any time, thus the
introduction of defense in depth

• A series of protective elements is placed between an
asset and the adversary

• The intent is to enforce policy across all access points

Copyright © 2012, Elsevier Inc.

All rights Reserved

C
h
a
p
te

r 6

D
e
p
th

Introduction

3

Fig. 6.1 – General defense in depth
schema

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

4

• Quantifying the effectiveness of a layered defense is
often difficult

• Effectiveness is best determined by educated guesses

• The following are relevant for estimating
effectiveness
– Practical experience

– Engineering analysis

– Use-case studies

– Testing and simulation

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Effectiveness of Depth

5

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.2 – Moderately effective single
layer of protection

6

• When a layer fails, we can conclude it was either
flawed or unsuited to the target environment

• No layer is 100% effective—the goal of making layers
“highly” effective is more realistic

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th
Effectiveness of Depth

7

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.3 – Highly effective single layer of
protection

8

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.4 – Multiple moderately effective
layers of protection

9

• A national authentication system for every citizen
would remove the need for multiple passwords,
passphrases, tokens, certificates, and biometrics that
weaken security

• Single sign-on (SSO) would accomplish this
authentication simplification objective

• However, SSO access needs to be part of a
multilayered defense

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Layered Authentication

10

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.5 – Schema showing two layers of
end-user authentication

11

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.6 – Authentication options
including direct mobile access

12

Layered E-Mail Virus and Spam
Protection

• Commercial environments are turning to virtual, in-
the-cloud solutions to filter e-mail viruses and spam

• To that security layer is added filtering software on
individual computers

• Antivirus software helpful, but useless against certain
attacks (like botnet)

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

13

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.7 – Typical architecture with
layered e-mail filtering

14

• Layering access controls increases security

• Add to this the limiting of physical access to assets

• For national infrastructure, assets should be covered
by as many layers possible
– Network-based firewalls

– Internal firewalls

– Physical security

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Layered Access Controls

15

Fig. 6.8 – Three layers of protection
using firewall and access controls

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

16

• Five encryption methods for national infrastructure
protection
– Mobile device storage

– Network transmission

– Secure commerce

– Application strengthening

– Server and mainframe data storage

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Layered Encryption

17

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.9 – Multple layers of encryption

18

• The promise of layered intrusion detection has not
been fully realized, though it is useful

• The inclusion of intrusion response makes the
layered approach more complex

• There are three opportunities for different intrusion
detection systems to provide layered protection
– In-band detection

– Out-of-band correlation

– Signature sharing

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Layered Intrusion Detection

19

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

Fig. 6.10 – Sharing intrusion detection
information between systems

20

• Developing a multilayered defense for national
infrastructure would require a careful architectural
analysis of all assets and protection systems
– Identifying assets

– Subjective estimations

– Obtaining proprietary information

– Identifying all possible access paths

Copyright © 2012, Elsevier Inc.
All rights Reserved
C
h
a
p
te
r 6

D
e
p
th

National Program of Depth

What Will You Get?

We provide professional writing services to help you score straight A’s by submitting custom written assignments that mirror your guidelines.

Premium Quality

Get result-oriented writing and never worry about grades anymore. We follow the highest quality standards to make sure that you get perfect assignments.

Experienced Writers

Our writers have experience in dealing with papers of every educational level. You can surely rely on the expertise of our qualified professionals.

On-Time Delivery

Your deadline is our threshold for success and we take it very seriously. We make sure you receive your papers before your predefined time.

24/7 Customer Support

Someone from our customer support team is always here to respond to your questions. So, hit us up if you have got any ambiguity or concern.

Complete Confidentiality

Sit back and relax while we help you out with writing your papers. We have an ultimate policy for keeping your personal and order-related details a secret.

Authentic Sources

We assure you that your document will be thoroughly checked for plagiarism and grammatical errors as we use highly authentic and licit sources.

Moneyback Guarantee

Still reluctant about placing an order? Our 100% Moneyback Guarantee backs you up on rare occasions where you aren’t satisfied with the writing.

Order Tracking

You don’t have to wait for an update for hours; you can track the progress of your order any time you want. We share the status after each step.

image

Areas of Expertise

Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.

Areas of Expertise

Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.

image

Trusted Partner of 9650+ Students for Writing

From brainstorming your paper's outline to perfecting its grammar, we perform every step carefully to make your paper worthy of A grade.

Preferred Writer

Hire your preferred writer anytime. Simply specify if you want your preferred expert to write your paper and we’ll make that happen.

Grammar Check Report

Get an elaborate and authentic grammar check report with your work to have the grammar goodness sealed in your document.

One Page Summary

You can purchase this feature if you want our writers to sum up your paper in the form of a concise and well-articulated summary.

Plagiarism Report

You don’t have to worry about plagiarism anymore. Get a plagiarism report to certify the uniqueness of your work.

Free Features $66FREE

  • Most Qualified Writer $10FREE
  • Plagiarism Scan Report $10FREE
  • Unlimited Revisions $08FREE
  • Paper Formatting $05FREE
  • Cover Page $05FREE
  • Referencing & Bibliography $10FREE
  • Dedicated User Area $08FREE
  • 24/7 Order Tracking $05FREE
  • Periodic Email Alerts $05FREE
image

Our Services

Join us for the best experience while seeking writing assistance in your college life. A good grade is all you need to boost up your academic excellence and we are all about it.

  • On-time Delivery
  • 24/7 Order Tracking
  • Access to Authentic Sources
Academic Writing

We create perfect papers according to the guidelines.

Professional Editing

We seamlessly edit out errors from your papers.

Thorough Proofreading

We thoroughly read your final draft to identify errors.

image

Delegate Your Challenging Writing Tasks to Experienced Professionals

Work with ultimate peace of mind because we ensure that your academic work is our responsibility and your grades are a top concern for us!

Check Out Our Sample Work

Dedication. Quality. Commitment. Punctuality

Categories
All samples
Essay (any type)
Essay (any type)
The Value of a Nursing Degree
Undergrad. (yrs 3-4)
Nursing
2
View this sample

It May Not Be Much, but It’s Honest Work!

Here is what we have achieved so far. These numbers are evidence that we go the extra mile to make your college journey successful.

0+

Happy Clients

0+

Words Written This Week

0+

Ongoing Orders

0%

Customer Satisfaction Rate
image

Process as Fine as Brewed Coffee

We have the most intuitive and minimalistic process so that you can easily place an order. Just follow a few steps to unlock success.

See How We Helped 9000+ Students Achieve Success

image

We Analyze Your Problem and Offer Customized Writing

We understand your guidelines first before delivering any writing service. You can discuss your writing needs and we will have them evaluated by our dedicated team.

  • Clear elicitation of your requirements.
  • Customized writing as per your needs.

We Mirror Your Guidelines to Deliver Quality Services

We write your papers in a standardized way. We complete your work in such a way that it turns out to be a perfect description of your guidelines.

  • Proactive analysis of your writing.
  • Active communication to understand requirements.
image
image

We Handle Your Writing Tasks to Ensure Excellent Grades

We promise you excellent grades and academic excellence that you always longed for. Our writers stay in touch with you via email.

  • Thorough research and analysis for every order.
  • Deliverance of reliable writing service to improve your grades.
Place an Order Start Chat Now
image

Order your essay today and save 30% with the discount code Happy