Vulnerability Of Critical Infrastructure Research Articles

Climate Resilient Cities Assessing Differential Vulnerability to Climate Hazards in Urban India

This report introduces the Climate Hazard and Vulnerability Assessment (CHVA) framework, which is developed as an accessible tool to focus on the hazards and social factors that create differential vulnerability to climate change in cities. To analyse differential vulnerability, CHVA is divided into three parts: Hazard Identification and Assessment, Exposure Analysis, and Vulnerability Assessment. Using official city-level data that can in some cases be supplemented with alternative local data sources, the CHVA assesses both hazards and the vulnerability of people and critical infrastructure to give a robust and in-depth understanding of urban vulnerability.

Resilient critical infrastructures: An innovative methodological perspective for critical infrastructure (CI) integrated assessment models by inducing digital technologies during multi-hazard incidents

Over the last decade, the notion of community resilience, which encompasses planning for, opposing, absorbing, and quickly recovering from disruptive occurrences, has gained momentum across the world. Critical Infrastructures (CI) are seen as critical to attaining success in today's densely populated countries. Such infrastructures must be robust in the face of multi-hazard catastrophes by implementing appropriate disaster management and recovery plans. Given these facts, it is critical to establish a new methodological perspective with an integrated system for effective disaster management of CI, as well as an intelligent application that will aid in the construction of more resilient and sustainable cities and communities. This perspective proposes a holistic gaming scenario application for assessing the vulnerability and accessibility of critical infrastructures during multi-hazard events, with a primary focus on conducting an integrated assessment for critical infrastructures and their assets. Mainly, the perspective includes a holistic gaming scenario application that will aid in accurately quantifying geographical spatial information and integrating big data into predictive and prescriptive management tools using virtual reality.•Conducting Integrated Assessment Models for evaluating vulnerability of Critical Infrastructures.•Inducing Digital Technologies during Multi-Hazard Incidents for improving Natural hazard assessment models.•Developing an open-world gaming scenario that is considered with high visual motion pictures and scenes.

Vulnerability assessment of critical infrastructures for cascading failures: An application to water distribution networks

Critical infrastructures form the backbone of any nation, and the failures of these infrastructures could lead to economic disruptions and fatal consequences. Assessing the vulnerability of such critical infrastructures has now evolved into a necessary and imperative task for researchers around the world. Water distribution networks form an essential class of critical infrastructures of modern society. The uninterrupted functioning of such networks is crucial for ensuring a nation’s economic development and welfare of society. The objective of this article is to evaluate the vulnerability of nodes for Water Distribution Networks considering cascading failures. The system dynamics of a water network are included in the simulation process to estimate the impacts of cascading failures. Vulnerability metrics based on loss of topological connectivity and supply capability are formulated in this article. The applicability and significance of the proposed methodology are demonstrated using a sample network case study. Identification of different vulnerability zones is done by employing k-means clustering to perform a methodical comparison between the proposed and existing metrics of vulnerability assessment.

A Descriptive Analysis of the Health Care Aspects of Industrial Disasters Around the World

Introduction:Industrial disasters can have a myriad of repercussions ranging from acute deaths, injuries, and long-term adverse health impacts on nearby populations to political fallout and environmental damage. This is a descriptive epidemiological analysis of industrial disasters occurring between 1995 and 2021 which may provide useful insight for health care systems and disaster medicine specialists to better prevent and mitigate the effects of future industrial disasters.Method:Data was collected using a retrospective database search of the Emergency Events Database (EM-DATS) for all industrial disasters occurring between January 1, 1995, and December 31, 2021.Results:1,054 industrial disasters were recorded from 1995 to 2021. The majority of these disasters occurred in Asia (720, 68.3%), with 131 (12.4%) in Africa, 107 (10.2%) in Europe, 94 (8.9%) in the Americas, and 2 (0.2%) in Oceania. Half of these disasters were explosions (533, 50.6%), 147 (13.9%) were collapses, 143 (13.6%) were fires, 46 (4.4%) were chemical spills, 41 (3.9%) were gas leaks, and 34 (3.2%) were poisonings. There were 6 (0.6%) oil spills and 3 (0.3%) radiation events.Conclusion:A total of 29,708 deaths and 57,605 injuries were recorded as a result of industrial disasters and they remain a significant contributor to the healthcare risks of both workers and regional communities. The need for specialized emergency response training, the potential devastation of an industrial accident, and the vulnerability of critical infrastructure as terror targets highlight the need to better understand the potential immediate and long-term consequences of such events and to improve healthcare responses in the future.

Urban Resilience Assessment Using Hybrid MCDM Model Based on DEMATEL-ANP Method (DANP)

Resilience is an essential strategy for building the capacity of communities and cities. There have been many changes in attitudes toward hazards. In effect, the global community's perspective has shifted from focusing on reducing vulnerability to enhancing resilience in times of crisis. This study used a GIS-based DANP model to study the resilience of districts in Tehran to hazards. First, the criteria affecting resilience are selected according to four dimensions (environmental, socioeconomic, physical and institutional) using the Delphi method. After two rounds of selection, 11 criteria included disasters and natural disasters, water resources, environmental pollution, topography, urban infrastructure, land use, green space, employment rate, population and education, health status, and insurance coverage were selected. Then, a DEMATEL model followed by ANP was applied to determine the internal relationship between the criteria. Then, GIS overlay was performed to provide visual output. The DEMATEL results show that disasters and disasters in terms of environment, urban infrastructure in terms of physical aspects and employment rate in terms of socio-economic aspects are the most important criteria affecting the ability to urban resilience. In addition, 54.7% of the total urban area is classified into very low to moderate resilience categories, which need special attention. The results of the sensitivity analysis show that the sub-criteria of the vulnerability of critical infrastructures in the event of earthquake and the vulnerability of structures to an earthquake have the highest rate of change, which will definitely have a greater impact on the results of resilience. Moreover, the sub-criteria of the number of educational centers and life expectancy have the lowest change rates. This research provides new perspectives to help urban planners understand the causal relationship between dimensions and criteria, to better understand resilience.

Gauging the Impact of Satellite & Space Systems on Critical Infrastructure[CI]: Risk Management is Neither an Enigma nor a Mystery for CI Systems Security

Abstract This article summarizes many critical infrastructure vulnerability issues involving connectivity to space platforms and cyber systems. The article emphasizes the importance of rigorous updated risk assessment in these aeas and the urgent need to exercise all phases and aspects of infrastructufe failure, collapse or extended disruption.

Investigating Potential Vulnerability of Critical Infrastructure and Way Forward – Recommendations to Enhance Security and Resilience

In this research, firstly critical infrastructures (CIs) that are found in Ethiopia are identified. Then, potential security vulnerabilities of these CIs are identified by performing strategic and tactical level risk and vulnerability assessments. To perform the stated assessments, questionnaires were prepared using different standards. Moreover, on-site interviews, existing document and literature reviews were conducted. By performing the above research methodologies, the security vulnerabilities of selected CIs were thoroughly investigated. Finally, factors that contribute to the security vulnerabilities are critically identified and way forward recommendations are given to fill the identified security gaps and vulnerabilities.

SYNTHESIS OF THREATS AND RISKS OF CYBER SECURITY OF MONTENEGRO - THE VULNERABILITY ASPECT OF INFORMATION COMMUNICATION INFRASTRUCTURE

That there are no untouchables and that cyber threats are entering Montenegro through the big doors, is indicated by the hacker attack on the Government of Montenegro. Fortunately, the hackers did not get hold of confidential data, but their act itself caused a serious act of endangering state security, especially because they breached the system that is networked with all state bodies. It was not the first time in 2022 that hackers broke into Government IC systems and state and private companies and organizations. Experts from the IT sector have been warning about the vulnerability of the system for a long time, but not loudly enough to be taken seriously. Let’s also mention the attack on Montenegro on the eve of joining NATO, where Montenegro was under increased cyber attacks, and the Ministry of Defense says that it is similar today.Cyber is no longer the world of gamers and geeks, it is increasingly becoming a prefix for terrorism, crime, and other types of threats (Kazerić 2017). Internet trade and the use of electronic services such as e-government are also on the rise. To the global trend, almost everything that was only tangible and materialized in the real world is moving to the virtual community. This brings with it many advantages, but also disadvantages, and one of them is certainly the vulnerability of critical information and communication infrastructure and the danger of cyber attacks. In such circumstances, the issue of security partially shifts the focus to cyber, that is, cyber security. Precisely for this reason, it is necessary to take a critical look at the existing information and communication infrastructure and analyze the existing threats and risks brought by the modern, cybernetic age. The synthesis of threats and risks is necessary so that we can adequately face them and predict the difficulties that may come our way, which could have significant consequences for national security.

Resilience Analysis of Potable Water Service after Power Outages in the U.S. Virgin Islands.

The two Category-5 hurricanes that impacted the United States Virgin Islands in 2017 exposed critical infrastructure vulnerabilities that must be addressed. While the drinking water utility has first-hand knowledge about how the hurricanes affected their systems, the use of modeling and simulation tools can provide additional insight to aid investment planning and preparedness. This paper provides a case study on resilience analysis for the island's potable water systems subject to long term power outages. Power outage scenarios help quantify differences in water delivery, water quality, and water quantity during and after the disruption. The analysis helps illustrate important differences in system operations and recovery time across the islands. Results from this case study can be used to better understand how the system might behave during future disruptions, provide justification for investment, and provide recommendations to increase resilience of the system. The analysis framework can also be used by other utilities to explore vulnerability to long term power outages.

Protecting Chiller Systems from Cyberattack Using a Systems Thinking Approach

Recent world events and geopolitics have brought the vulnerability of critical infrastructure to cyberattacks to the forefront. While there has been considerable attention to attacks on Information Technology (IT) systems, such as data theft and ransomware, the vulnerabilities and dangers posed by industrial control systems (ICS) have received significantly less attention. What is very different is that industrial control systems can be made to do things that could destroy equipment or even harm people. For example, in 2021 the US encountered a cyberattack on a water treatment plant in Florida that could have resulted in serious injuries or even death. These risks are based on the unique physical characteristics of these industrial systems. In this paper, we present a holistic, integrated safety and security analysis, we call Cybersafety, based on the STAMP (System-Theoretic Accident Model and Processes) framework, for one such industrial system—an industrial chiller plant—as an example. In this analysis, we identify vulnerabilities emerging from interactions between technology, operator actions as well as organizational structure, and provide recommendations to mitigate resulting loss scenarios in a systematic manner.

An approach for analysis of critical infrastructure vulnerability to climate hazards

In recent years, climate change negatively impacts on the resilience of critical infrastructure. This increases the vulnerability of critical infrastructure to climate hazards. In this paper is proposed an approach for analysis of the critical infrastructure vulnerability to climate hazards. It is assumed that the level of vulnerability of the critical infrastructure depends on its levels of sensitivity and exposure to the specific climate hazards in the given geographical region. The approach is consisted from seven steps. For each of the variables related to the vulnerability, four levels are defined (Low, Middle, High, Very high). The usefulness and peculiarities of the proposed approach for analysis of critical infrastructure vulnerability to climate hazards are demonstrated with several examples. The results obtained with the proposed approach for vulnerability analysis can successfully help the stakeholders to make informed decisions about the choice of targeted measures to adapt critical infrastructure to climate change.

Cybersafety: A System-Theoretic Approach to Identify Cyber-Vulnerabilities & Mitigation Requirements in Industrial Control Systems

Recent cyber-physical attacks, such as <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Stuxnet, Triton</i> etc., have invoked an ominous realization about the vulnerability of critical infrastructure, including water, power and gas distribution systems. Traditional IT security-biased protection methods that focus on improving <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cyber hygiene</i> are largely impotent in the face of targeted attacks by advanced cyber-adversaries. Thus, there is an urgent need to analyze the safety and security of critical infrastructure in a holistic fashion, leveraging the <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">physics</i> of the cyber-physical system. System-Theoretic Accident Model & Processes (STAMP) offers a powerful framework to analyze complex systems; hitherto, STAMP has been used extensively to perform safety analyses but an integrated safety and cybersecurity analysis of industrial control systems (ICS) has not been published. This paper uses the electrical generation and distribution system of an archetypal industrial facility to demonstrate the application of a STAMP-based method – called <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Cybersafety</i> – to identify and mitigate cyber-vulnerabilities in ICS. The key contribution of this work is to differentiate the additional steps required to perform a holistic cybersecurity analysis for an ICS of significant size and complexity and to present the analysis in a structured format that can be emulated for larger systems with many interdependent subsystems.

Flood vulnerability of the critical infrastructure in Poland

The purpose of this article is to examine the significance of the flood hazard for the functioning of the critical infrastructure in Poland and to suggest adequate methods and strategies for reducing the vulnerability of critical infrastructure to flooding. The main research method used is institutional and legal analysis, which shows how critical infrastructure is protected in Poland. The context of climate change is taken into account, the consequences of which may trigger increased threat, and its significance is discussed. It is also shown that river floods of a pluvial character constitute the greatest hazard in Poland, as they pose a threat to urban areas where most critical infrastructure is located. The author lists methods which can be used to protect critical infrastructure from flooding. Examples of systems are also provided. A conclusion is formed that the approach to this problem should be comprehensive and make use of methods related to flood prevention, flood defence and flood mitigation, and above all, the relocation of elements of the critical infrastructure. It is evident that the best time to reduce the susceptibility of specific systems to floods is when they are developed or modernised by taking into account the flood risk. Lastly, the biggest problem of the critical infrastructure in Poland is highlighted, namely its identification once it is already built, which means its location had not been thought through.

Cybersecurity Threats to and Cyberattacks on Critical Infrastructure: a Legal Perspective

Over the years cybersecurity threats to and cyberattacks on the critical infrastructure by state and non-state actors have escalated in intensity and sophistication. Cyberattacks, such as the 2017 NotPetya ransomware attack, the 2020 SolarWinds software supply chain attack and the 2021 Colonial Pipeline ransomware attack, illustrate the vulnerability of critical infrastructure to cyberattacks.&#x0D; &#x0D; Most cyberattacks are committed across borders involving criminal hackers or state supported hackers. Furthermore, critical infrastructure is increasingly interconnected and interdependent. Connectivity brings about the risk of a cyberattack, demonstrated by the 2021 Colonial Pipeline ransomware attack. Interconnectedness also means that the compromise of one critical infrastructure asset can have a domino effect that degrades or disrupts others and results in cascading consequences across the economy and national security. Operational continuity is essential and this may have been one of the reasons why Colonial Pipeline paid a ransom to cyber-attackers.&#x0D; &#x0D; A cyberattack on the critical infrastructure of a state cannot be seen in isolation as the consequences of the attack may impact other states, this was illustrated by the 2017 WannaCry and NotPetya ransomware attacks. The level of sophistication of cyberattacks has increased over the years as shown by the 2020 SolarWinds software supply chain attack. The escalation of attacks has served as a catalyst for governments to address the risk to critical infrastructure. Countries need to have strong government bodies which supervise cybersecurity in their country and work together with their counterparts in other countries by sharing information regarding threats and attacks against critical infrastructure.&#x0D; &#x0D; The discussion focuses on the challenges that threats to and attacks on critical infrastructure present, the possible solutions a government may implement in addressing cyberattacks on critical infrastructure and the accountability of state and non-state actors of cyberattacks on critical infrastructure. The issues are discussed from a legal perspective.&#x0D;

Critical infrastructure vulnerability: a research note on adaptation to climate change in the Nordic countries

ABSTRACT This research note reviews recent literature on the vulnerability of critical infrastructures caused by climate change with a focus on the Nordic countries. We integrate literature from three research areas: the role of critical infrastructures in the functioning of society, infrastructural vulnerabilities, and the long-term impacts of climate change. Focusing on climate change adaptation in the Nordic countries as a pivotal case, we discuss the mutually constitutive interrelationships between these three areas. The studies reviewed bring together social science and humanities research on infrastructure systems, their vulnerabilities, and climate change. By highlighting interdisciplinary perspectives on infrastructures, climate change, and societal security, this research note discusses a Nordic model of infrastructure provision and links the Nordic debate to a burgeoning European discussion on the role of the social sciences and humanities in addressing societal challenges related to climate change and the role of infrastructures in providing welfare.

Detecting Vulnerabilities in Critical Infrastructures by Classifying Exposed Industrial Control Systems Using Deep Learning

Industrial control systems depend heavily on security and monitoring protocols. Several tools are available for this purpose, which scout vulnerabilities and take screenshots of various control panels for later analysis. However, they do not adequately classify images into specific control groups, which is crucial for security-based tasks performed by manual operators. To solve this problem, we propose a pipeline based on deep learning to classify snapshots of industrial control panels into three categories: internet technologies, operation technologies, and others. More specifically, we compare the use of transfer learning and fine-tuning in convolutional neural networks (CNNs) pre-trained on ImageNet to select the best CNN architecture for classifying the screenshots of industrial control systems. We propose the critical infrastructure dataset (CRINF-300), which is the first publicly available information technology (IT)/operational technology (OT) snapshot dataset, with 337 manually labeled images. We used the CRINF-300 to train and evaluate eighteen different pipelines, registering their performance under CPU and GPU environments. We found out that the Inception-ResNet-V2 and VGG16 architectures obtained the best results on transfer learning and fine-tuning, with F1-scores of 0.9832 and 0.9373, respectively. In systems where time is critical and the GPU is available, we recommend using the MobileNet-V1 architecture, with an average time of 0.03 s to process an image and with an F1-score of 0.9758.

Multi-level approach to assessing the resilience of road network infrastructure

A two-step method to assess the resilience of road network infrastructures is developed to support resilience capacity building. The first step exploits the DMCI (dynamic functional modelling of vulnerability and interdependency of critical infrastructure) modelling approach for transportation network characterisation. DMCI reveals the cascading effects under disruption (due to interdependencies), and ranks the road sections according to their criticality (vital node analysis - VNA). The second step uses a quantitative coping capacity index (CCI) to assess in more detail the capacity of operators and first responders to cope with an incidental event coordinating all available resources, in order to respond and rapidly recover service operations managing all the relevant interdependencies. The combination of the two levels of analysis offers more comprehensive insights on a transportation network resilience and its intended use is to guide resilience planning within capacity building programs, at both intra- and inter-organisational levels.

Ранкритериальные модели управления безопасностью межсистемных взаимодействий критических инфраструктур на урбанизированных территориях.

The paper considers the features of using criteria models in security management of intersystem interactions of critical infrastructures. Criteria-based modeling and evaluation of criteria-based risks prevent cognitive distortions, biases and errors in the assessment of the state of security and the presence of possible vulnerabilities in critical infrastructures of urbanized areas. Within the framework of the presented approach, the combined use of apparatus of the set theory and the developed special apparatus of criteria-based modeling is proposed. Examples of solving practical problems of security control with the use of constantly developing and improving, in 102the course of research, software systems for automating the application of criteria modeling for security management in urban areas are given.

Jihadist attacks on Critical Infrastructure

Besides its function to maintain the social and economic well-being of a nation, operating critical infrastructure serves as a proof of the ability of the state to provide protection to its citizens. Hence, a successful terrorist attack targeting critical infrastructure - in addition to generating fear and panic in the ranks of society undermines the operational character of the state. In recent years, several terrorist incidents in Europe have highlighted the vulnerability of critical infrastructure and, consequently, the importance of protecting it. Bearing this in mind, the protection of critical infrastructure has become a high priority for Western states, in parallel with the growing trend of risks, challenges and threats posed by international terrorism. Recently Europe has seen an increase in terrorist attacks against members of law enforcement as well as the armed forces. This paper argues that such attacks should also be considered as attacks on critical infrastructure, as it is ultimately the human resources being responsible for the well-functioning of those agencies. Further, the paper aims to examine the religious justification of Jihadist terrorist attacks against critical infrastructure.

Cybersafety Analysis of Industrial Control Systems: Chiller Systems (Revised)

Recent world events and geopolitics have brought the vulnerability of critical infrastructure to cyberattacks by advanced cyber-adversaries to the forefront. While there has been continued and growing attention to vulnerabilities in our energy generation and distribution systems, there are many other types of industrial control systems, ranging from manufacturing facilities to refineries to water treatment plants, that are also at significant risk based on their unique physical characteristics. In this paper, we take a holistic view of one such complex system – the chiller plant – in an archetypal industrial setting to identify vulnerabilities emerging from interactions between technology, operator actions as well as organizational structure and provide recommendations to mitigate resulting loss scenarios.