Muutke küpsiste eelistusi

E-raamat: Critical Infrastructure: Understanding Its Component Parts, Vulnerabilities, Operating Risks, and Interdependencies

  • Formaat: 344 pages
  • Ilmumisaeg: 27-Aug-2008
  • Kirjastus: CRC Press Inc
  • Keel: eng
  • ISBN-13: 9781040082744
Teised raamatud teemal:
  • Formaat - EPUB+DRM
  • Hind: 175,50 €*
  • * hind on lõplik, st. muud allahindlused enam ei rakendu
  • Lisa ostukorvi
  • Lisa soovinimekirja
  • See e-raamat on mõeldud ainult isiklikuks kasutamiseks. E-raamatuid ei saa tagastada.
  • Raamatukogudele
  • Formaat: 344 pages
  • Ilmumisaeg: 27-Aug-2008
  • Kirjastus: CRC Press Inc
  • Keel: eng
  • ISBN-13: 9781040082744
Teised raamatud teemal:

DRM piirangud

  • Kopeerimine (copy/paste):

    ei ole lubatud

  • Printimine:

    ei ole lubatud

  • Kasutamine:

    Digitaalõiguste kaitse (DRM)
    Kirjastus on väljastanud selle e-raamatu krüpteeritud kujul, mis tähendab, et selle lugemiseks peate installeerima spetsiaalse tarkvara. Samuti peate looma endale  Adobe ID Rohkem infot siin. E-raamatut saab lugeda 1 kasutaja ning alla laadida kuni 6'de seadmesse (kõik autoriseeritud sama Adobe ID-ga).

    Vajalik tarkvara
    Mobiilsetes seadmetes (telefon või tahvelarvuti) lugemiseks peate installeerima selle tasuta rakenduse: PocketBook Reader (iOS / Android)

    PC või Mac seadmes lugemiseks peate installima Adobe Digital Editionsi (Seeon tasuta rakendus spetsiaalselt e-raamatute lugemiseks. Seda ei tohi segamini ajada Adober Reader'iga, mis tõenäoliselt on juba teie arvutisse installeeritud )

    Seda e-raamatut ei saa lugeda Amazon Kindle's. 

Critical Infrastructure (CI) is fundamental to the functioning of a modern economy, and consequently, maintaining CI security is paramount. However, despite all the security technology available for threats and risks to CI, this crucial area often generates more fear than rational discussion. Apprehension unfortunately prompts many involved in CI policy to default to old-fashioned intuition rather than depend on modern concrete risk assessment as the basis for vital security decisions.

Going beyond definitions, Critical Infrastructure: Understanding Its Component Parts, Vulnerabilities, Operating Risks, and Interdependencies looks at the iron triangle within CI: power, telecom, and finance. It introduces the concept of CI as an industrial and enterprise risk conductor, highlighting the reality that a CI failure can propagate a crisis with far-reaching repercussions.

Focuses on Canada and the US Equally for a Useful Cross-Border Security Analysis

With $2.5 trillion at stake in United States CI alone, supreme standards and metrics are mandatory for solid protection of such a sophisticated and complex area. This powerful volume is dedicated to moving CI security into the 21st century, illustrating the danger in basing critical CI policy decisions on the existing legacy frames of reference. It represents one of the first complete departures from policy, planning, and response strategies based on intuition and anecdotal evidence.

Arvustused

Going beyond definitions, this book looks at all the defined CI sectors and suggests previously overlooked, yet critical, industries for inclusion in revised definitions. Authored by a leading security specialist, this powerful volume includes more than 200 tables and 100 figures that illustrate key concepts, considers all CI sectors for a 360-degree view, and focuses on Canada and the US equally to provide a useful cross-border security analysis. Dedicated to moving CI security into the 21st century, this book illustrates the danger in basing critical CI policy decisions on the existing legacy frames of reference. It represents one of the first complete departures from policy, planning, and response strategies based on intuition and anecdotal evidence.

MCEER, May 2010

Macaulay captures the crux of CI its complex interdependencies but does so in a clear, concise, and compelling way, providing the fundamentals for approaching CI in a manner familiar to security professionals: risk assessment. The text is extremely well-written

J. Kelly Stewart, Certified Forensic Consultant, writing in Security Management, April 2010 Going beyond definitions, this book looks at all the defined CI sectors and suggests previously overlooked, yet critical, industries for inclusion in revised definitions. Authored by a leading security specialist, this powerful volume includes more than 200 tables and 100 figures that illustrate key concepts, considers all CI sectors for a 360-degree view, and focuses on Canada and the US equally to provide a useful cross-border security analysis. Dedicated to moving CI security into the 21st century, this book illustrates the danger in basing critical CI policy decisions on the existing legacy frames of reference. It represents one of the first complete departures from policy, planning, and response strategies based on intuition and anecdotal evidence.

MCEER, May 2010

Macaulay captures the crux of CI its complex interdependencies but does so in a clear, concise, and compelling way, providing the fundamentals for approaching CI in a manner familiar to security professionals: risk assessment. The text is extremely well-written J. Kelly Stewart, Certified Forensic Consultant, writing in Security Management, April 2010

Preface xiii
Acknowledgments xvii
Author xix
Chapter 1 Critical Infrastructure: What, Who Cares, and Why 1
Introduction to Critical Infrastructure
1
Antithesis
2
Chaos Theory and Critical Infrastructure
5
Who Should Read This Book?
6
How to Read This Book?
8
What Are Critical Infrastructures?
8
NAICS-Based CI Definitions
9
What Is Interdependency?
12
Cascading Impacts: First Order, Second Order, and Tertiary
12
Interdependency and Metrics
13
Applying Metrics to Critical Infrastructure Interdependency
14
National Input–Output Statistics
15
Data Dependency Metrics
15
Requirement for Covariance and Correlation in Critical Infrastructure Interdependency Assessment
17
Interdependency and Critical Infrastructure Risks
19
Strengths and Limits of This Book
20
Chapters to Come
22
Conclusion
23
Chapter 2 Econometrics and Critical Infrastructure Interdependency 25
Introduction
25
CI Sectors and Econometric Interdependency Analysis
26
Limits of This Approach
27
Mapping NAICS to CI Sectors
27
Canadian I-O Economic Interdependency Mapping
32
Sector-by-Sector I-O (Use versus Make)
35
Energy Sector in Canada
36
Dependency Observations
36
Non-CI Sector Inputs to Energy
36
Key Observations Related to Non-CI Sector Inputs
37
Communications and IT Sector in Canada
38
Dependency Observations
39
Non-CI Sector Inputs to Communications and IT
39
Key Observations
40
Finance Sector in Canada
41
Dependency Observations
42
Non-CI Sector Inputs to Finance
42
Key Observations
42
Health Sector in Canada
43
Dependency Observations
44
Non-CI Sector Inputs to Communications and IT
44
Key Observations
45
Food Sector in Canada
45
Dependency Observations
46
Non-CI Sector Inputs to Food
46
Key Observations
46
Water Sector in Canada
47
Dependency Observations
48
Non-CI Sector Inputs to Water
48
Key Observations
48
Transport Sector in Canada
49
Dependency Observations
50
Non-CI Sector Inputs to Transport
50
Key Observations
51
Safety and Government Sector in Canada
51
Dependency Observations
52
Non-CI Sector Inputs to Safety and Government
52
Key Observations
52
Manufacturing Sector in Canada
53
Dependency Observations
53
Non-CI Sector Inputs to Manufacturing
54
Key Observations
54
Canadian I-O CI Sector Economic Dependency Matrixes
55
U.S. I-O Sector Economic Interdependency Mapping
57
Sector-by-Sector I-O (Use versus Make)
60
Energy Sector in the United States
61
Dependency Observations
62
Non-CI Sector Inputs to Energy
62
Observations Related to Non-CI Sector Inputs
63
Communications and IT Sector in the United States
63
Dependency Observations
64
Non-CI Sector Inputs to Communications and IT
64
Observations
64
Finance Sector in the United States
65
Dependency Observations
66
Non-CI Sector Inputs to Finance
67
Observations
67
Health Sector in the United States
68
Dependency Observations
69
Non-CI Sector Inputs to U.S. Health Sector
69
Observations
70
Food Sector in the United States
70
Dependency Observations
70
Non-CI Sector Inputs to Food
71
Observations
71
Water Sector in the United States
72
Dependency Observations
73
Non-CI Sector Inputs to Water
74
Key Observations
74
Transport Sector in the United States
75
Dependency Observations
75
Non-CI Sector Inputs to Transport
76
Key Observations
76
Safety and Government Sector in the United States
77
Dependency Observations
78
Non-CI Sector Inputs to Safety and Government
78
Observations
79
Manufacturing Sector in the United States
79
Dependency Observations
79
Non-CI Sector Inputs to Manufacturing
80
Observations
81
U.S. I-O CI Sector Economic Dependency Matrix
81
Comparison of Canada–U.S. CI Sectors by I-O Ratio
84
Energy
84
Communications and IT
85
Finance
86
Health
86
Food
87
Water
88
Transportation
89
Safety and Government
90
Manufacturing
90
Undesignated Industries
91
Canadian Indications of Critical, Undesignated Industries
91
U.S. Indications of Critical, Undesignated Industries
93
Professional and Technical Services
95
Conclusions and Indicated Risks
95
Canadian Indications
95
U.S. Indications
98
Chapter 3 Information and Data Dependency Analysis 101
Introduction
101
Information Operations and Data Dependency
102
Information and Data Dependency Assessment Methodology
103
Boundaries of Analysis
105
Shared Network Infrastructure
105
A Word about Voice
108
Analysis of Survey Data
108
Defining Inbound and Outbound Dependency among CI Owners
109
Inbound Data Dependency
109
Outbound Data Dependency
109
Dependency Matrixes
110
Data Dependency Metrics
111
Inbound Data Dependency Chart
112
Outbound Data Dependency Chart
114
Information and Data Dependency Maps
117
Sector-Specific Dependency Analysis
120
Tornado Diagrams and Inbound/Outbound Dependency Ratio
120
Energy Sector Data Dependencies
121
Finance Sector Data Dependencies
123
Communications and IT Sector Data Dependencies
124
Health Sector Data Dependencies
126
Food Sector Data Dependencies
127
Water Sector Data Dependencies
129
Transportation Sector Data Dependencies
130
Safety Sector Data Dependencies
132
Government Sector Data Dependencies
133
Manufacturing Sector Data Dependencies
135
Conclusions and Indicated Risks
136
Indications from Data
136
Acknowledgment
139
Chapter 4 Correlation, Dependency Latency, and Vulnerabilities of Critical Infrastructure 141
Introduction
141
Objective
142
Correlation of Interdependency Metrics
144
Time and Dependency Latency
145
Canadian Correlated Dependency Metrics
146
Sector Dependency Latency and Cascading Threats
147
U.S. Correlated Interdependency Metrics
189
Sector Dependency Latency and Cascading Threats
190
Conclusions and Indicated Risks
231
Cascading Impact Concentrations
235
Correlated Dependency Maps
240
Canada
240
United States
243
Chapter 5 Critical Infrastructure Threat–Risk 247
Introduction
247
Lay Perceptions of Risk
248
Scale and Breadth
248
Deep Dive into Universal Risk
251
Existing Methodologies
251
Real Threat Metrics
251
Prevention versus Response
251
Attributes of Good Universal Risk Management
252
Universal Risk Methodology for CIP
253
Pragmatic Threat–Risk Analysis Methodology
253
Relativistic Threat Analysis
255
Real-Time Risk
255
Critical Analysis
255
Contextual Concepts of Risk Management
257
Precautionary Approach
258
Threat Events
259
Threat Perspective
259
Threats-From
259
Threats-To
260
Threat-Vector
260
Importance of Threat Agents in Forming a Predictive Analysis
260
Threat Agents
260
Threat Action
261
Impact Limitations
261
Threat Limitations
261
Managing Uncertainty
262
Infrastructure Risk Mitigation Errors
262
Threat in 2008
263
Counterpoint on Cyber Threat–Risk
264
Threat–Risk Convergence
264
Conclusions
266
Chapter 6 Critical Infrastructure Interdependency Case Studies 267
Introduction
267
Objectives
268
Structure of Case Studies
269
Case Study 1: Pandemic and Influenza
269
Scenario
269
Literature Review
270
Findings: CI Interdependency Vulnerability and Risk Analysis under Pandemic Conditions
276
Summary Analysis
276
Detailed Risk Analysis of Sector Interdependency under Pandemic Conditions
277
Health Dependency on Energy
278
Health Dependency on Other Health Sector Entities
279
Health Dependency on Safety and Government
279
Health Dependency on Communications and IT
280
Health Dependency on Water
282
Health Dependency on Transportation
283
Health Dependency on Food
284
Health Dependency on Finance
285
Health Dependency on Manufacturing
285
Outbound Cascading Impacts under Pandemic Conditions
286
Energy Dependency on Health
286
Comments
286
Safety and Government Dependency on Health
287
Comments
287
Communications and IT Dependency on Health
288
Comments
288
Water Dependency on Health
288
Comments
288
Transportation Dependency on Health
289
Comments
289
Food Dependency on Health
290
Comments
290
Finance Dependency on Health
291
Comments
291
Manufacturing Dependency on Health
291
Comments
292
AssetRank Assessment Algorithm
292
Case Study 2: Cyber-Attack on Water Infrastructure
295
Scenario
295
Literature Review
295
Findings: CI Interdependency Vulnerability and Risk Analysis under Wastewater Management Crisis Conditions
297
Detailed Risk Analysis of Sector Interdependency under Pandemic Conditions
298
Water Dependency on Water
298
Water Dependency on Energy
300
Water Dependency on Safety and Government
301
Water Dependency on Communications and IT
302
Water Dependency on Health Sector Entities
303
Water Dependency on Transportation
304
Water Dependency on Manufacturing
305
Water Dependency on Food
305
Water Dependency on Finance
306
Outbound Cascading Impacts under Cyber-Attack Conditions
307
Health Dependency on Water
307
Comments
307
Energy Dependency on Water
308
Comments
308
Safety and Government Dependency on Water
308
Comments
309
Communications and IT Dependency on Water
309
Comments
310
Food Dependency on Water
310
Comments
310
Finance Dependency on Water
311
Comments
311
Transportation Dependency on Water
312
Comments
312
Manufacturing Dependency on Water
312
Comments
313
AssetRank Assessment Algorithm
313
Further Case Studies
316
Index 317
CISSIP, CISA, ISSPCS, Ottawa, Ontario, Canada