Cyber Attacks And Its Effects On Critical Infrastructure Essay

Introduction: - for my research project, I would like to explore about the cyber security measures. Cybersecurity covers the fundamental concepts underlying the construction of secure systems from the hardware to the software to the human computer interface, with the use of cryptography to secure interactions. These concepts are easily augmented with hands-on exercises involving relevant tools and techniques. We have different types of computer related crimes, cybercrimes, computer related offenses, federal approaches defenses. The information resources management has the technical matters for which IT are widely known. Cyber resources and cyber power as well as cyber security. We have spent a lot of time talking about many different high level critical infrastructure protection concepts we have general rule stayed away from cyber security explaining the ins and out of how the NIPP and NRF work together to ensure that we can live our daily live in relative comfort.

The Internet, as we all know, has rapidly spread around since its commercialization in the 1990s. It is evident that cybersecurity attacks are not going anywhere, and that government will continue to remain a target. In addition, the Internet of Things (IoT) growth will lead to more devices being connected to the networks. Therefore, with technology moving forward and hackers being more motivated as ever, the government finds itself struggling to keep up with effective cybersecurity measures and with filling up the designated positions in the Cybersecurity department.

A critical infrastructure is defined as any facility, system, or function which provides the foundation for national security, governance, economic vitality, reputation, and way of life. (http://www.dhs.gov/xlibrary/assets/NIPP_InfoSharing.pdf)In short, critical infrastructure is by definition essential for the survival of the nation. The USA PATRIOT Act specifically defines critical infrastructure as "systems and assets, whether physical or virtual, (Jena Baker McNeill and Richard Weitz, 2010) so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating

Sophisticated hackers have expanded their threat matrix to include cyber-attacks on the computer systems used to operate the world’s pipelines. Supervisory Control and Data Acquisition (“SCADA”) systems are increasingly subject to targeted attacks. Cyber-attacks can be perpetrated over the Internet from anywhere in the world and are capable of disrupting safe pipeline operation causing spills, explosions, or fires. The 2008 explosion on the Baku-Tbilisi-Ceyhan oil pipeline in Turkey was reportedly caused by a cyber-attack.

The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT ) is part of the Department of Homeland Security (DHS) and their primary goal is “is to build a long-term common vision where effective risk management of control systems security can be realized through successful coordination efforts.” (ics-cert.us-cert.gov) When the Stuxnet threat was identified the ICS-CERT provided onsite incident response and used the NIST SP 800-61 incident response process during the Stuxnet attacks to mitigate the threat.

With the Protected Critical Infrastructure Information (PCII) Program, it improves the sharing information voluntarily between owners of infrastructure, operators, and the government. However, with The Department of Homeland Security (DHS) along with Federal, tribal, state, and local analysts, they use the (PCII) program to analyze, identify vulnerabilities, enhances recovery preparedness of measures, develop risk assessments, secure critical infrastructure and protect systems (dhs.gov). The (PCII) also provides information that authorizes a level of protection made easier for DHS to work directly to identify mitigation strategies, vulnerabilities with the infrastructure owners and operators. With the (PCII) protection plan, it increases the

America’s critical infrastructure encompasses a large number of sectors such as agriculture, food, water, public health and emergency sectors as well as providing the essential goods and services Americans need to survive.

The vulnerabilities attacks in Critical Infrastructure can be very common; and attacks by hackers to this infrastructure can be deadly. There are 25 vulnerabilities have been identified in critical infrastructure. These are problematic in our society as these hackers are easy to gain infiltration and take control of the entire critical

Critical Infrastructure is any system or service that is essential to the function of a society. A more comprehensive definition would include the finance, energy, technology, chemical, water systems, and the health and emergency services.

Below we outline the core elements of such a successful national strategy for infrastructure resilience.

Critical infrastructure vulnerability is the in-depth analysis of the degree of loss of a given item of the list of foundations at a risk resulting from a given threat at a certain level of severity. In this case, the support includes objects such as public service water systems, transportation, telecommunication, and energy supply. The analysis in this paper shows how the major infrastructural systems are connected to come up with an extensive system free of vulnerability. To achieve that objective, the writer will see the details of acceptable CIP management models to explain the importance of interconnectivity then provide specific examples for demonstration.

Businesses today must manage growing risks to their mission critical networks from attacks such as

Critical Infrastructure Protection is not just a national issue but also a global responsibility. Perl Report introduces the importance of International Cooperation. The accrued benefits increase the desired need to form agreements between nations to share necessary scientific knowledge helpful in mitigating vulnerability. For example, the agreement between German and Homeland Security of the United States provides collaborative measures and internal controls that govern interaction between the two parties. Likewise, Secretary Napolitano’s Letter of Intent projects possible bilateral trade agreements between USA and Qatar, therefore, enlisting mutual benefits. Finally, the paper indicates the effects of the latest natural disaster occurrence. The Federal government has adopted some of the recommendations in the Perl’s Report to deal with the catastrophic situation.

There are three main areas identified as threat vectors for cyber security in relation to CIP: IT networks, insider threats, and equipment and software. Normally, ICS operate on an internal network, called OT (Operational Technology). Occasionally, this isolated network requires a connection to the organization’s corporate network (IT) for routine operation and management. As displayed in the Ukraine blackout, cyber threats infiltrate an organization’s IT systems in order to access ICS networks on the OT network. The methods used to achieve access are often not complex procedures and “can be achieved using a wide array of methods, such as spear phishing, malicious URLs, drive-by attacks” (p. 1). Upon infiltration of an IT network, the threat searches for a lapse in the cyber security program in order to access the OT networks that regulate CI.

According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.