Resilient Networks Missouri S&T University CPE 6510 Critical Infrastructures

Transcription

1 Resilient Networks Missouri S&T University CPE 6510 Critical Infrastructures Egemen K. Çetinkaya Egemen K. Çetinkaya Department of Electrical & Computer Engineering Missouri University of Science and Technology 6 April 2017 rev Egemen K. Çetinkaya

2 Overview Critical Infrastructures Outline Critical infrastructure interdependency Cyber-physical systems 6 April 2017 MST CPE 6510 Critical Infrastructures 2

3 Overview Critical Infrastructures Overview Critical infrastructure interdependency Cyber-physical systems 6 April 2017 MST CPE 6510 Critical Infrastructures 3

4 Critical Infrastructures Definition Critical infrastructure systems, assets, and networks physical or virtual vital that the incapacity or destruction impacts security, economy, public health or safety, environment any combination federal, state, regional, territorial, or local jurisdiction [DHS2012] 6 April 2017 MST CPE 6510 Critical Infrastructures 4

5 Critical Infrastructures Sectors Telecommunications Electric power systems Natural gas and oil Banking and finance Transportation Water supply systems Government services Emergency services Others? [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 5

6 Food/agriculture Space Critical Infrastructures Sectors Commodities (e.g. iron, steel) Health care industry Educational system Others? [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 6

7 Critical Infrastructures Sectors 1 Chemical Commercial facilities Communications Critical manufacturing Dams Defense industrial base Emergency services Energy 6 April 2017 MST CPE 6510 Critical Infrastructures 7

8 Critical Infrastructures Sectors 2 Financial services Food and agriculture Government facilities Healthcare and public health Information technology Nuclear reactors, materials, and waste Transportation systems Water and wastewater systems 6 April 2017 MST CPE 6510 Critical Infrastructures 8

9 Chemical Commercial facilities Communications Critical Infrastructures Sectors Critical manufacturing Dams Defense industrial base Emergency services Energy New in Financial services Food and agriculture Government facilities Healthcare and public health Information technology Nuclear reactors, materials, and waste Transportation systems Water and wastewater systems 6 April 2017 MST CPE 6510 Critical Infrastructures 9

10 Critical Infrastructures Protection Policy Evolution Presidential Decision Directive (PDD63) May 1998, Bill Clinton Homeland Security Presidential Directive 7 (HSPD-7) December 2003, George W. Bush Presidential Policy Directive 21 (PPD-21) February 2013, Barack Obama [ 6 April 2017 MST CPE 6510 Critical Infrastructures 10

11 Critical Infrastructures Motivation Critical infrastructures are crucial for: security economic prosperity public health and safety environment social well-being 6 April 2017 MST CPE 6510 Critical Infrastructures 11

12 Critical Infrastructures Properties Adaptive complex systems Dependent Interdependent physical interdependency e.g. electric power & railroads cyber interdependency e.g. SCADA & Internet geographic interdependency e.g. bridge damage & fiber and electric cable damage logical interdependency e.g. energy sector & financial markets [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 12

13 Critical Infrastructures Hierarchical Elements Egemen K. Çetinkaya Part smallest component of a system; e.g. valve Unit functionally related collection of parts; e.g. steam generator Subsystem array of units; e.g. secondary cooling unit System grouping of subsystems; e.g. nuclear power plant Infrastructure complete collection of like systems; e.g. power grid Interdependent infrastructures interconnected network of infrastructures [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 13

14 Spatial scales Temporal scales Operational factors Critical Infrastructures Characteristics Organizational considerations [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 14

15 Critical Infrastructures Critical Infrastructure Interdependency Overview Critical infrastructure interdependency Cyber-physical systems 6 April 2017 MST CPE 6510 Critical Infrastructures 15

16 Dependency Critical Infrastructures Dependency vs. Interdependency linkage or connection between two infrastructures state of one infrastructure influences other unidirectional Interdependency bidirectional relationship between two infrastructures two are interdependent when each depend on the other [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 16

17 Critical Infrastructures Power Infrastructure Dependency Example [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 17

18 Critical Infrastructures Infrastructure Interdependency Example [RPK2001] 6 April 2017 MST CPE 6510 Critical Infrastructures 18

19 Employs 1 million people Chemical Overview Revenues Billion $ Segments: basic chemicals specialty chemicals agricultural chemicals pharmaceuticals consumer products 6 April 2017 MST CPE 6510 Critical Infrastructures 19

20 Chemical Dependence/Interdependence Food and agriculture Communications Critical manufacturing Emergency Services Energy Healthcare and public health Information technology Transportation systems Water 6 April 2017 MST CPE 6510 Critical Infrastructures 20

21 Segments: Commercial Facilities Overview public assembly e.g., arenas, stadiums, zoos, museums sports leagues e.g., professional sports leagues gaming e.g., casinos $5.7 billion taxes in 2008 lodging e.g., hotels, motels, conference centers outdoor events e.g., theme and amusement parks, parades entertainment and media e.g., motion picture studios real estate e.g., office and apartment buildings, self-storage retail e.g., retail centers and districts, shopping malls $4.6 trillion in annual sales in April 2017 MST CPE 6510 Critical Infrastructures 21

22 Commercial Facilities Dependence/Interdependence Egemen K. Çetinkaya Critical manufacturing Banking and finance National monuments and icons Communications Water Emergency Services Energy Healthcare and public health Transportation systems Food and agriculture 6 April 2017 MST CPE 6510 Critical Infrastructures 22

23 Communications Overview Critical among critical infrastructures Enabling function across all infrastructure sectors Segments: wireline, e.g. PSTN, SS7, VoIP wireless, e.g. wireless cellular satellite cable broadcasting, 14,000 radio and 1,700 TV b-cast facilities 6 April 2017 MST CPE 6510 Critical Infrastructures 23

24 Depends on energy Communications Dependence/Interdependence information technology water and wastewater systems critical manufacturing All sectors depends on communications infrastructure 6 April 2017 MST CPE 6510 Critical Infrastructures 24

25 Critical Manufacturing Overview 11.7 M. workforce, 13% of US GDP Core industries primary metal manufacturing iron, aluminium production and processing machinery manufacturing engine and turbine manufacturing electrical equip., appliance, and component manufacturing electric motor, transformer, and generator manufacturing transportation equipment manufacturing vehicles and parts manufacturing 6 April 2017 MST CPE 6510 Critical Infrastructures 25

26 Critical Manufacturing Dependence/Interdependence Transportation systems Energy Emergency Services Information technology Defense industrial base Communications Chemical Water and wastewater 6 April 2017 MST CPE 6510 Critical Infrastructures 26

27 Dams Overview Over 87,000 dams in the United States Hydropower dams generates 8-12% of US energy Approximately 65% is privately owned Usage: hydroelectric power river navigation water supply wildlife habitat waste management flood control recreation 6 April 2017 MST CPE 6510 Critical Infrastructures 27

28 Dams Dependence/Interdependence Emergency services relies on dams for firefighting water supply, emergency water supply Food and agriculture sector utilizes dams source of water for irrigation and water management Transportation systems uses dams and locks to manage navigable waters throughout inland waterways Water and wastewater systems relies on dams to provide water to concentrated populations commercial facilities in the United States 6 April 2017 MST CPE 6510 Critical Infrastructures 28

29 Dams Dependence/Interdependence Dams sectors depends on critical manufacturing to provide critical parts Dams depend on communications to coordinate energy and water utilization Dams depend on IT for effective control 6 April 2017 MST CPE 6510 Critical Infrastructures 29

30 Defense Industrial Base Overview R&D, production, maintenance of US military req. More than 100,000 companies 6 April 2017 MST CPE 6510 Critical Infrastructures 30

31 Defense Industrial Base Dependence/Interdependence Oil and natural gas Electricity Water Information Technology (IT) Communication Transportation systems Commercial facilities Critical manufacturing 6 April 2017 MST CPE 6510 Critical Infrastructures 31

32 Emergency Services Overview It serves all infrastructures save lives protect property and the environment assist communities impacted by disasters aid recovery from emergencies Disciplines law enforcement fire and emergency services emergency management emergency medical services public works 6 April 2017 MST CPE 6510 Critical Infrastructures 32

33 Emergency Services Specialized Capabilities Hazardous Materials (HAZMAT) Search and Rescue (SAR) Explosive Ordnance Disposal (EOD) Special Weapons and Tactics (SWAT) Aviation units Public Safety Answering Points (PSAPs) 6 April 2017 MST CPE 6510 Critical Infrastructures 33

34 Emergency Services Public Safety Answering Points Call center responding for police, fire, ambulance PSAP evolution basic 911: 1960s calls directly going to emergency center enhanced 911: 1980s automated E911 adapted: 1990s includes cellular calls Next Generation NG911: 2010s partial deployment with partial services NG911 in US and NG112 in EU IP-based, including social media? [ 6 April 2017 MST CPE 6510 Critical Infrastructures 34

35 Emergency Services Dependence/Interdependence Egemen K. Çetinkaya Energy Water and wastewater Dams Chemical Food and agriculture Healthcare and public health Information technology Communications/IT Transportation systems Critical manufacturing 6 April 2017 MST CPE 6510 Critical Infrastructures 35

36 Energy Overview Energy is enabling function for critical infrastructures Segments electricity petroleum natural gas Production of electricity (2010 data) 48% by combusting coal (primarily transported by rail) 20% by nuclear power plants 22% by combusting natural gas 6% by hydroelectric plants 1% by oil 3% renewable sources (solar, wind, and geothermal) 6 April 2017 MST CPE 6510 Critical Infrastructures 36

37 Production of electricity 4 Trillion kwh Energy 2016 Data Overview 65% fossil fuels (coal, natural gas, petroleum) 20% nuclear 15% renewables [ 6 April 2017 MST CPE 6510 Critical Infrastructures 37

38 Yearly US Per capita Consumption by Fuel Source Yearly US Per capita Consumption (kwh) by Fuel Source Year Populati on(m) Fossil Fuel Coal Oil Gas sub total Nuclear Renewable Hydro Geo Thermal Solar Wind Wood Bio other sub Total Misc Total , ,571 8,626 2, , , , ,599 8,686 2, , , , ,944 8,841 2, , , , ,267 8,886 2,518 1, , , , ,230 9,321 2, , , , ,034 8,881 2, , , , ,939 9,616 2, , , , ,018 9,922 2, , , , ,782 9,663 2, , , , ,618 9,838 2, , , , ,475 9,639 2, , , , ,292 9,502 2, , , , ,441 9,486 2, , , , ,274 9,390 2, , , , ,179 9,542 2, , , , ,045 9,209 2,610 1, , ,345 [ 6 April 2017 MST CPE 6510 Critical Infrastructures 38

39 Energy Dependence/Interdependence Essential for all sectors Transportation systems Information technology Communications Finance Government facilities 6 April 2017 MST CPE 6510 Critical Infrastructures 39

40 Financial Services Overview 18,800 federally insured depository institutions 18,440 investment company complexes 7,948 domestic U.S. insurers Products deposit funds and make payments to other parties provide credit and liquidity to customers invest funds for both long and short periods transfer financial risks between customers 6 April 2017 MST CPE 6510 Critical Infrastructures 40

41 Energy Financial Services Dependence/Interdependence Transportation systems Information technology Communications Commercial facilities Water and wastewater 6 April 2017 MST CPE 6510 Critical Infrastructures 41

42 2.1 million farms 935,000 restaurants Food and Agriculture Overview 200,000 manufacturing, processing, storage facilities ~20% of US economic activity 6 April 2017 MST CPE 6510 Critical Infrastructures 42

43 Food and Agriculture Dependence/Interdependence Egemen K. Çetinkaya Water and wastewater systems for clean irrigation and processed water Transportation systems for movement of products and livestock Energy to power the equipment needed for agriculture production Financial services Chemical Dams Emergency services Healthcare and public health 6 April 2017 MST CPE 6510 Critical Infrastructures 43

44 Government Facilities Overview Buildings located in the United States and overseas owned or leased by federal, state, local, and tribal govern. Examples: general-use office buildings special-use military installations embassies, courthouses national laboratories Includes cyber elements and individuals Subsectors education facilities national monuments and icons 6 April 2017 MST CPE 6510 Critical Infrastructures 44

45 Energy Communication Government Facilities Dependence/Interdependence Information technology Transportation systems Water and wastewater Commercial facilities 6 April 2017 MST CPE 6510 Critical Infrastructures 45

46 Healthcare and Public Health Overview Constitutes 17% of the GDP Vast majority assets are privately owned Healthcare tends to be delivered and managed locally Population health is managed by government national, state, regional, local, tribal, and territorial 6 April 2017 MST CPE 6510 Critical Infrastructures 46

47 Healthcare and Public Health Dependence/Interdependence Communications Emergency services Energy Food and agriculture Chemical Information technology Transportation systems Water and wastewater systems Nuclear 6 April 2017 MST CPE 6510 Critical Infrastructures 47

48 Information Technology Overview Central to critical infrastructures Virtual and distributed systems including the Internet Critical functions produce and provide IT products and services DNS services provide content routing: IP and BGP incident management capabilities 6 April 2017 MST CPE 6510 Critical Infrastructures 48

49 Communications Energy Information Technology Dependence/Interdependence Critical manufacturing Chemical 6 April 2017 MST CPE 6510 Critical Infrastructures 49

50 Nuclear Overview Generates 20% of US electricity 99 commercial nuclear reactors licensed to operate at 61 nuclear power plants Sector includes nuclear power plants non-power nuclear reactors for research, testing, training manufacturers of nuclear reactors or components radioactive materials used in medical, industrial, academics nuclear fuel cycle facilities decommissioned nuclear power reactors transportation, storage, disposal of radioactive waste 6 April 2017 MST CPE 6510 Critical Infrastructures 50

51 Chemical Nuclear Dependence/Interdependence as a consumer of hazardous chemicals at fuel cycle facilities Energy as a supplier of electricity to the electrical grid Healthcare and public health as a supplier of nuclear medicine radiopharmaceuticals sterilization of blood and surgical supplies Transportation systems through the movement of radioactive materials 6 April 2017 MST CPE 6510 Critical Infrastructures 51

52 Aviation Transportation Systems Overview Highway infrastructure and motor carrier Maritime transportation system Mass transit and passenger rail Pipeline systems Freight rail Postal and shipping 6 April 2017 MST CPE 6510 Critical Infrastructures 52

53 Transportation Systems Dependence/Interdependence Energy Communications Information technology Dams Critical manufacturing Water and wastewater Defense industrial base Emergency services Food and agriculture 6 April 2017 MST CPE 6510 Critical Infrastructures 53

54 Water and Wastewater Systems Overview 153,000 public drinking water systems 16,000 publicly-owned wastewater treatment sys. 80% of US population receives their potable water 75% of US population has its sanitary sewerage treated by these wastewater systems 6 April 2017 MST CPE 6510 Critical Infrastructures 54

55 Water and Wastewater Systems Dependence/Interdependence Emergency services firefighting and hospitals Healthcare and public health Chemical Energy Food and agriculture Transportation systems Dams 6 April 2017 MST CPE 6510 Critical Infrastructures 55

56 Critical Infrastructures Most Dependence Which critical infrastructures we most depend? Egemen K. Çetinkaya 6 April 2017 MST CPE 6510 Critical Infrastructures 56

57 Framework Analysis Method Graph-theoretic framework to analyse interdependencies among networks/nodes Model interdependencies as directed graphs: unidirectional: A B bidirectional: A B Investigate flow robustness of graphs: fraction of nodes remain connected after node/link attacks Attacks based on graph centrality metrics: degree, betweenness, closeness, eigenvector adaptive: recalculation after each iteration Utilise Python NetworkX library [PYÇ2015] 6 April 2017 MST CPE 6510 Critical Infrastructures 57

58 Dataset Department of Homeland Security CI Sectors Chemical Commercial facilities Communications Critical manufacturing Dams Defense industrial base Emergency services Energy Financial services Food and agriculture Government facilities Healthcare and public health Information technology Nuclear reactors, materials, and waste Transportation systems Water and wastewater systems 6 April 2017 MST CPE 6510 Critical Infrastructures 58

59 Dataset US Critical Infrastructures [PYÇ2015] Complex critical infrastructure interdependencies 16 sectors and 113 links (57 uni- and 28x2 bi-links) 6 April 2017 MST CPE 6510 Critical Infrastructures 59

60 Results Node Centrality Attacks Adaptive attacks based on node centrality [PYÇ2015] 6 April 2017 MST CPE 6510 Critical Infrastructures 60

61 Results Centrality Attacks Adaptive attacks based on link and node centrality [PYÇ2015] 6 April 2017 MST CPE 6510 Critical Infrastructures 61

62 Results Ranking of Node Centralities [PYÇ2015] Rank Degree centrality Closeness centrality Betweenness centrality Eigenvector centrality 1 Energy Food and agriculture Energy Energy 2 Water and wastewater Energy Water and wastewater Communications 3 Communications Emergency services Critical manufacturing IT 4 IT Healthcare Commercial facilities Water and wastewater 5 Transportation systems Commercial facilities Food and agriculture Critical manufacturing 6 Food and agriculture Critical manufacturing Chemicals Transportation systems 7 Critical manufacturing Defense industrial base Transportation systems Chemicals 8 Chemicals Chemicals Healthcare Dams 9 Emergency services Financial services Emergency services Food and agriculture 10 Healthcare Nuclear IT Healthcare 11 Commercial facilities Transportation systems Communications Emergency services 12 Dams Government facilities Financial services Financial services 13 Financial services Water and wastewater Government facilities Government facilities 14 Nuclear Dams Nuclear Nuclear 15 Government facilities Communications Dams Commercial facilities 16 Defense industrial base IT Defense industrial base Defense industrial base 6 April 2017 MST CPE 6510 Critical Infrastructures 62

63 Critical Infrastructure Sectors Important Sectors DHS emphasises following sectors: energy, communication, transport Rankings vary based on the attack strategy Our ranking of energy is consistent Some rankings are interesting: water and wastewater for degree and betweenness food and agriculture for closeness 6 April 2017 MST CPE 6510 Critical Infrastructures 63

64 Overview Critical Infrastructures Cyber-Physical Systems Critical infrastructure interdependency Cyber-physical systems 6 April 2017 MST CPE 6510 Critical Infrastructures 64

65 Cyber-Physical Systems Overview Integration of computing, communication, control To achieve resilience in dealing with physical systems Many application domains: smart electric grid smart transportation smart buildings smart medical technologies next-generation air traffic management advanced manufacturing 6 April 2017 MST CPE 6510 Critical Infrastructures 65

66 Smart Grid Topology Overview Change in topology: centralized distributed [F2010] 6 April 2017 MST CPE 6510 Critical Infrastructures 66

67 Smart Grid Security Primarily about smart metering Enabling remote and large-scale attacks meter worms Privacy Google PowerMeter Integrity service is discontinued attack: modify subscriber usage information 6 April 2017 MST CPE 6510 Critical Infrastructures 67

68 References and Further Reading [PYÇ2015] Srinath Pinnaka, Rajgopal Yarlagadda, and Egemen K. Çetinkaya, Flow Robustness of Multilevel Networks, IEEE/IFIP DRCN, Kansas City, MO, March 2015, pp [RPK2001] Steven M. Rinaldi, James P. Peerenboom, and Terrence K. Kelly, Identifying, Understanding, and Analyzing Critical Infrastructure Interdependencies, IEEE Control Systems Magazine, Volume 21, Issue 6, pp , December [SHG2012] Siddharth Sridhar, Adam Hahn, and Manimaran Govindarasu, Cyber-Physical System Security for the Electric Power Grid, Proceedings of the IEEE, Volume 100, Issue 1, pp , January [YQS+2012] Ye Yan, Yi Qian, Hamid Sharif, and David Tipper, A Survey on Cyber Security for Smart Grid Communications, IEEE Communications Surveys & Tutorials, Volume 14, Issue 4, pp , 4th Quarter April 2017 MST CPE 6510 Critical Infrastructures 68

69 References and Further Reading [DHS2012] Strategic Plan: ," Office of Infrastructure Protection, Department of Homeland Security, August [L2008] Edward A. Lee, Cyber Physical Systems: Design Challenges, Proceedings of ISORC, Orlando, FL, pp , May Proceedings of the IEEE May 2012 issue Proceedings of the IEEE January 2012 issue (CPS specific) [F2010] Hassan Farhangi, The path of the smart grid, IEEE Power and Energy Magazine, Volume 8, Issue 1, pp , [SG] 6 April 2017 MST CPE 6510 Critical Infrastructures 69

70 End of Foils 6 April 2017 MST CPE 6510 Critical Infrastructures 70