Critical Infrastructure Vulnerability

Introduction: - for my research project, I would like to explore about the cyber security measures. Cybersecurity covers the fundamental concepts underlying the construction of secure systems from the hardware to the software to the human computer interface, with the use of cryptography to secure interactions. These concepts are easily augmented with hands-on exercises involving relevant tools and techniques. We have different types of computer related crimes, cybercrimes, computer related offenses, federal approaches defenses. The information resources management has the technical matters for which IT are widely known. Cyber resources and cyber power as well as cyber security. We have spent a lot of time talking about many different high level critical infrastructure protection concepts we have general rule stayed away from cyber security explaining the ins and out of how the NIPP and NRF work together to ensure that we can live our daily live in relative comfort.

It is essential to understand America’s critical infrastructure and key resources (CIKR) and National Infrastructure Protection Program (NIPP) to ensure survivability of its critical assets, while maintaining security for America. “The plans are carried out in practice by an integrated network of Federal departments and agencies, State and local government agencies, private sector entities, and a growing number of regional consortia (DHS, 2009, p. I).” Several agencies work together to mitigate attacks on CIKR to protect public safety and security of the nation. A terrorist may stop at nothing to carry out an attack on CIKR. If an attack or natural disaster does transpire, each agency working together to restore the damage must be timely. Additionally, NIPP helps to identify hazards associated with the various sectors, and provides necessary security measures to harden resources (DHS,

One of the Department of Homeland Security’s (DHS) most important missions is protecting critical infrastructure. Assessing CI vulnerabilities is critical to strengthening their capabilities and ensuring resiliency. Since most of them are privately owned, the Department partners with the private sector in conducting voluntary, non-regulatory vulnerability assessments (“Critical Infrastructure”, 2015). According to Homeland Security (2015), vulnerability assessments are the foundation National Infrastructure Protection Plan (NIPP) which outlines how the government and the private sector work together to manage risks to achieve security and resiliency goals (“Critical Infrastructure”, 2015). Protecting America’s electrical power grid is especially complicated because all of the other CIs depend on the energy sector’s

A critical infrastructure is defined as any facility, system, or function which provides the foundation for national security, governance, economic vitality, reputation, and way of life. (http://www.dhs.gov/xlibrary/assets/NIPP_InfoSharing.pdf)In short, critical infrastructure is by definition essential for the survival of the nation. The USA PATRIOT Act specifically defines critical infrastructure as "systems and assets, whether physical or virtual, (Jena Baker McNeill and Richard Weitz, 2010) so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating

Also, the homeland is safeguarded against acts of terrorism, manmade or natural disasters, and focused on actions to protect the citizens, residents, visitors, critical assets, systems, and networks against the Nation’s greatest risks, by enhancing Protection through cooperation and collaboration with all sectors of society to create conditions for a safer, more secure, and more resilient Nation. Furthermore, the Protection capabilities are achieved through specific, but are not limited to, critical infrastructure protection, cybersecurity, border security, immigration security, protection of key leadership and events, maritime security, transportation security, defense of agriculture and food, defense against weapons of mass destruction threats, and health security (National Preparedness…, 2011). Due to the fact that the private sector owns approximately 85 percent of the nation’s critical infrastructure (banking and financial institutions, telecommunications networks, energy production,and transmission facilities) there is greater emphasis now on public and private sectors forming effective partnerships for protection. A series of Information Sharing and Analysis Centers is one new feature of infrastructure protection, which are public-private partnerships designed to provide members of

Homeland security can be seen as a loosely based term as it is still a relatively new area of the United States strategy. Since its creation, post September 11, 2001, there has been a plethora of additions and revisions. The homeland mission lies not only within a specific agency, but demands collected participation from U.S. agencies and foreign entities to remain strong, efficient and innovative. One can examine homeland security as having the responsibility of maintaining and protecting the United States by keeping focus within the U.S. while homeland defense is responsible for maintaining the U.S. by keeping focus outside the U.S. Homeland security and homeland defense are different, but both can assist each other in certain aspects. The following paragraphs will compose of accurate definitions regarding homeland security, homeland defense and in end will discuss an in depth summary of the critical infrastructure program. These mentioned areas each have a requirement to be treated as specific in nature in order to not sacrifice their specific definition.

Since the September 11, 2001 events, the United States of America gravitated towards a more aggressive approach in its security. The result of the tragic events was the establishment of homeland security. The White House, the federal government and the Congress joined together to establish it. On September 20, 2001, President George W. Bush issued an executive order 13228 to establish an Office of Homeland Security within the White House and assigning the Governor of Pennsylvania, Tom Ridge as its Director (Bullock, Haddow, & Coppola, 2013, p. 4). Ever since, the United States (U.S.) Department of Homeland Security diversified and evolved the way it is today. The Homeland Defense was also integrated into Homeland Security to protect the U.S. soil and its territories. However, what are Homeland Security and Homeland Defense? This paper will address those question as well as covering their missions/goals, tasks, duties, and responsibilities. In addition, a section of this paper is the assessment of the critical infrastructure protection programs of the U.S. The assessment will also include the overall capability of the nation’s critical infrastructure protection program to ensure the survivability of its critical infrastructure.

When it comes to the protection and mitigating of any structure or organization risk analysis and vulnerability assessments must be conducts so as to know what’s to be protected, the threats manmade or natural disaster, ranking the potential of threat as well as the probability. In terms of critical infrastructure the risk analysis and vulnerability assessment has guidelines from Homeland Security Presidential Directive Number 7(HSPD-7).

Critical infrastructure is actively what moves the United States forward as a world dominating force. Critical infrastructure is also the life-blood that maintains the nation’s way of life. Each one of these organizations gives strength to the country’s wealth, health and security. We use them every day in our lives, it is the bridges we cross when we go to work, and it is the planes, trains, and automobiles that move the citizens throughout the nation. It is these types of critical infrastructure that keep our homes lit at night, the water we bathe in and drink, and it provides a multitude of communication structures that help us stay in touch with our loved ones.

Critical infrastructures are interdependent on other infrastructures and if one fails the other will also (Kamien, 2012). For example, transportation is an infrastructure that has a significant linkage between resources and facilities. The Department of Homeland Security states “The nation's transportation system quickly, safely, and securely moves people and goods through the country and overseas.” How is transportation critical? A highway/bridge can provide emergency transportation access to a hospital. Should the bridge collapse, resources are not being reached to the hospital. The protection of our critical infrastructures is a shared responsibility of state, local, and federal governments. However, not all infrastructures are critical.

The “Critical infrastructure, or CI, is a subcategory of infrastructure that includes those assets, systems, and networks, whether physical or virtual, which are so vital that their failure or destruction would have a debilitating impact on security, governance, public health and safety, public confidence, commerce, or other societal factors” (Bullock, Haddow, Coppola, 2016). According to the 2013 US National Infrastructure Protection Plan (NIPP) there are 16 of these sectors and throughout this paper we will discuss a cyber attack on the water supply sector. The best way to discuss the above will be through the evaluation of the impact that a cyber-attack could have on our water supply, and the probable third and fourth order effects from

Presidential Decision Directive (PDD) Number 63 was signed by President Clinton in 1998 establishing the Critical Infrastructure Protection (CIP). 1997’s exercise performed by the National Security Agency (NSA) revealed significant vulnerabilities among 36 of the government’s 40,000 networks. The weakness and potential harm to the national security was obvious. In 1997, CIP initiative issued its initial report “calling for a national effort to assure the security of the United States’ increasingly vulnerable and interconnected infrastructures” (Merkow, 2006). In the year of 2001 the world nations realized the strengthening power and opposing threat from the leading terrorist organizations. In the United States the events of September 11 had changed the society forever. The citizens were left felt vulnerable to the attacks and demanded a response from the federal government. The response came in the number of organizational and legislative measures to increase safety of the nation and its citizens. Among all the safety of the nation’s information infrastructure was identified by President George W. Bush among the top priorities to protect the citizens.

The term Critical Infrastructure did not come into use until the mid-1990’s. Since the 1970’s there have been 2,723 terrorist attacks that have taken place in the United States, causing a total of 3,570 deaths. About seventy-five (75) percent of those attacks targeted critical infrastructures. Critical Infrastructures (CI) and systems constitute high-value targets (Forest & Howard, 2013). Executive order EO 13010 Critical Infrastructure Protection was issued by president Bill Clinton on July 15th, 1996. This executive order addressed the concerns

United States’ national infrastructure are resources that are vital to keep commerce operating. Technology have allowed the governments and the private sector to share vital information with them. The nation well-being depend on each of the critical infrastructures, the big question is on how to maintain all of our infrastructure sectors operative without any problem. There a big wave of threats to our nation and if one of this threads go through, it can created a multidimensional problem to the infrastructure system of the country. The main concerns that exist in protecting the U.S. against any attacks to any U.S. infrastructure and in the same time on how to have a system that work well with other agencies. For example; is important to

A lot of opinions and meanings has been given to the word “Cyberterrorism”. Some of these meanings and definitions varies. In this light, Gordon and Ford (2003) are concerned that when 10 people define cyberterrorism and nine of the given answers are different, and these 10 people represent different government agencies tasked with safeguarding national assets and infrastructure, then it becomes a critical issue.