Critical Infrastructure Areas Research Articles

PRIVATE-PUBLIC PARTNERSHIPS IN CYBER SPACE AS DETERRENCE TOOLS. THE TRANS-ATLANTIC VIEW

Nowadays technological development has brought new threats and risks that states need to face in cyberspace. Given the multitude of actors, reasons, strategies, various types of attacks, the classical way of viewing the state as the sole security provider no longer functions. In this framework, private companies gain more and more competencies and responsibilities, especially in the areas of critical infrastructure. The present article explores the role of public-private partnerships in the national cybersecurity strategies of each NATO member state as tools of deterrence. The paper starts by analysing the concepts of deterrence and resilience. Secondly, it emphasizes the view of NATO regarding the topic, this aspect being followed by each of the 31 NATO member states’ most recent national cybersecurity strategies, highlighting the objectives, measures, and examples of PPPs that each state has in order to highlight the status-quo at empirical level.

Analysis of Cyber Security Aspects of Data Transmission in Large-Scale Networks Based on the LoRaWAN Protocol Intended for Monitoring Critical Infrastructure Sensors

Cyber security is nowadays synonymous with the reliability of elements connected to the internet. Better control of factories, security systems or even individual sensors is possible through the use of Internet of Things technology. The security of the aforementioned structures and the data they transmit has been a major concern in the development of IoT solutions for wireless data transmission. If we add to this prospect of low-cost end devices, we can seriously consider implementing such solutions in critical infrastructure areas. This article aims to assess the state of the art and experience and identify the main risks and directions for further development in order to improve the cyber security situation of LoRaWAN-based networks. LoRaWAN meets the three key requirements of IoT applications (low cost, large-scale deployability, high energy efficiency) through an open standard and the construction of autonomous networks without third-party infrastructure. However, many research issues remain to be solved/improved such as resource allocation, link coordination, transmission reliability, performance and, above all, security. Thus, we have defined a research gap in the area of LoRaWAN security. The contribution of this work is to structure the knowledge in the field of LoRaWAN security, based on previous publications and our own experience, in order to identify challenges and their potential solutions. This will help move LoRaWAN security research to the next stage.

Resilience Analysis of Australian Electricity and Gas Transmission Networks

Given they are two critical infrastructure areas, the security of electricity and gas networks is highly important due to potential multifaceted social and economic impacts. Unexpected errors or sabotage can lead to blackouts, causing a significant loss for the public, businesses, and governments. Climate change and an increasing number of consequent natural disasters (e.g., bushfires and floods) are other emerging network resilience challenges. In this paper, we used network science to examine the topological resilience of national energy networks with two case studies of Australian gas and electricity networks. To measure the fragility and resilience of these energy networks, we assessed various topological features and theories of percolation. We found that both networks follow the degree distribution of power-law and the characteristics of a scale-free network. Then, using these models, we conducted node and edge removal experiments. The analysis identified the most critical nodes that can trigger cascading failure within the network upon a fault. The analysis results can be used by the network operators to improve network resilience through various mitigation strategies implemented on the identified critical nodes.

Opportunities for the Application of 3D Printing in the Critical Infrastructure System

The present article presents an analysis of the potential application of 3D printing in the critical infrastructure system. An attempt has been made to develop case studies for selected critical infrastructure areas, particularly with reference to the area of energy supply. The need for 3D printing applications is identified based on expert research in the energy industry. It identifies the application schemes determined by the technical and logistical possibilities associated with 3D printing in its broadest sense. A review of additive technologies with a view to their application in selected phases of critical infrastructure operation, including in crisis situations, is also carried out. Furthermore, a methodology for incorporating 3D printing into the existing critical infrastructure system is proposed. As a result, the following research hypothesis is adopted: the use of 3D printing can be an important part of measures to ensure the full functionality and efficiency of critical infrastructures, particularly in crisis situations.

EXPERIMENTAL STUDY OF THE MODEL FOR CALCULATING THE QUANTITATIVE CRITERIA FOR ASSESSING THE SECURITY LEVEL OF INFORMATION AND TELECOMMUNICATION SYSTEMS IN CRITICAL INFRASTRUCTURE OF THE STATE

Global trends in the number and complexity of cyber-attacks have led to the information and telecommunications systems (ITS) protection, in particular, industry, which are critical to society, socio-economic development and information component of national security. Given the needs of national security and the need to introduce a systematic approach to solving the problem of critical infrastructure protection, at the national level, creating a system of protection of such infrastructure is one of the priorities in reforming the defense and security sector of Ukraine. Thus, there is a need to develop methods and models for classifying ITS as a critical infrastructure to ensure Ukraine's national security. The paper studies the model of calculating the quantitative criterion for assessing the security of ITS based on the method of hierarchy analysis, which allowed the processing of expert assessments to obtain a quantitative indicator of ITS security. This made it possible to simplify the procedure for selecting experts, to avoid the specifics of processing expert data, as well as to assess ITS in a limited amount of statistics. The developed model allows to move from qualitative assessment in the form of an ordered series of alphanumeric combinations denoting the levels of implemented services, to quantitative assessment in the form of the ratio of functional security profiles. In addition, specialized software has been developed that implements the studied model, which allowed to conduct experimental research and verification of this model on the example of ITS of the National Confidential Communications System. In further research, the authors plan to investigate the model for calculating the quantitative criterion for assessing the security of ITS in other areas of critical infrastructure (energy, transport etc.).

Earthquake-triggered 2018 Palu Valley landslides enabled by wet rice cultivation

The death toll and economic impact of an earthquake can be greatly exacerbated if seismic ground shaking triggers landslides. Earthquake-triggered landslides typically occur in two different contexts: localized failure of steep slopes and resulting landslides that pose a major threat to life in areas below; and lateral spreading of nearly flat sediment plains due to shaking-induced liquefaction, which can damage large areas of critical infrastructure. Unexpected catastrophic landsliding triggered by the 28 September 2018 earthquake at Palu, Indonesia did not occur in either typical context, but produced both destructive outcomes. Here, we show that alluvial ground failure in the Palu Valley was a direct consequence of irrigation creating a new liquefaction hazard. Aqueduct-supported cultivation, primarily of wet rice, raised the water table to near ground level, saturating sandy alluvial soils that liquefied in response to strong ground shaking. Large-displacement lateral spreads occurred on slopes of 1°. Slopes steeper than 1.5° sourced long-runout landslides and debris flows that swept through villages occupying the gentler slopes below. The resulting damage and loss of life would probably not have occurred in the absence of a raised water table. Earthquake-triggered landsliding of gentle, irrigated alluvial slopes is an under-recognized, but avoidable, anthropogenic hazard. Aqueduct-supported cultivation of rice resulted in liquefaction of the alluvial soils that led to the landslides triggered by the Palu 2018 earthquake, according to satellite analyses.

U.S. Healthcare Industry: Cybersecurity Regulatory and Compliance Issues

The health care industry is one of the most vital areas of critical infrastructure in the United States. In recent years, the healthcare industry has faced a barrage of cyberattacks that have disputed vital services and exposed vast amounts of sensitive data. Federal regulations such as HIPPA and the HITECH act were designed to protect this sensitive data, but often are left open for interpretation. For example, HIPPA mandates the protection of personal health information but gives little guidance on how to do it properly. Even with regulatory mandates, the health care industry continues to struggle with complying with current regulations. Various factors such as budgetary constraints and the lack of cybersecurity professionals who understand the security needs of the health care industry affect compliance. Also within the health care industry, there are various sectors which are all governed by different sets of rules and regulations. This can create a level of confusion when trying to create a standard for the industry as a whole. The goal of this paper is to evaluate the current regulatory and compliance landscape of the U.S. health care system.

Eastern Africa's Manufacturing Sector: Promoting Technology, Innovation, Productivity and Linkages

This report assesses major opportunities and constraints for the development of Eastern Africa’s manufacturing sector, considers suitable examples from other regions, and draws lessons to enhance the manufacturing sector’s contribution to Eastern Africa's economic transformation. The report is a regional synthesis based on seven country-level assessments, covering Burundi, Ethiopia, Kenya, Rwanda, Seychelles, Tanzania and Uganda. The report identifies common binding constraints, opportunities and strengths and proposes recommendations in the areas of critical infrastructure, business operating conditions, trade logistics and cluster policies, to complement country-specific recommendations and road maps discussed in each country report.

Water and Wastewater Infrastructure Security Issues: Impacts on Environmental Engineering Research and Design

On September 11, 2001, the possibility of an international terrorist attack within the continental United States became a reality. The most recent terrorist attacks targeting the United States have been directed at constructed facilities and infrastructure e.g., the World Trade Center in New York City, the Pentagon, selected postal facilities and congressional offices . Although these attacks seemed to initiate terrorism in the continental United States, numerous domestic terrorism attacks and incidents have occurred in the United States since the early 1950s. Terrorism can be defined as the unlawful use of force or violence, or threatened use of force or violence, against persons and places for the purpose of intimidating and/or coercing a government, its citizens, or any segment thereof for political or social goals. This definition highlights the following concepts: • Intimidation and fear are the agents of change desired by the terrorists. • The terrorist’s victims may not necessarily be the ultimate targets of the attack. Since the victims are pawns in an attempt to instill fear, those who observe the act are the intended targets. Among the most critical infrastructure areas needing protection are potable water treatment, storage and distribution systems, and wastewater collection and treatment systems. It would be difficult to explain the fear and panic that the people of a community would experience if they were to wake up one morning and find out that they could not use the drinking-water system or wastewater system because of a terrorist attack or vandalism. During such natural disasters as hurricanes, local areas have had to resort to using bottled water and portable toilets for relatively brief periods of time. However, during a widespread terrorist attack, large population areas—including hospitals, nursing homes, schools, and prisons—could be severely affected for extended periods of time. Congress included a drinking-water component in PL 107-188, the Public Health Security and Bioterrorism Preparedness and Response Act, passed in June 2002. This legislation required drinking-water systems serving more than 3,300 people to conduct a vulnerability assessment to help them determine their vulnerability to various threats, including intentional contamination. In addition, this legislation required utilities to revise or prepare an emergency response plan that incorporated the results of the vulnerability assessment. On January 30, 2004, President Bush issued Homeland Security Presidential Directive-9 HSPD-9 . This directive established a national policy to defend the agriculture, water, and food system of the United States against terrorist attacks and other emergencies. It also called on the federal agencies responsible for agriculture, food, and water security to “develop robust, comprehensive and fully coordinated surveillance and monitoring