International Journal of Critical Infrastructures (9 papers in press)
A Critical Review on Cyber Security and Cyber Terrorism - Threats to Critical Infrastructure in Energy Sector
by Sampath Kumar Venkatachary, Jagdish Prasad, Ravi Samikannu
Abstract: Cyber terrorism and Cyber security are two synonyms. With advancement in ICT technologies and extensive use of it in ICS in energy sector, it has its pros and cons. Energy sector does an excellent job of managing risks facing their operations. However, cyber security and terrorism remains opaque and stubborn to monitor, manage, measure. It is critical that the environment for this be analyzed. In this paper two aspects of Cyber security and cyber terrorism is brought into limelight and discussed. The paper highlights different vectors, algorithms used as means for cyberattack from 2003 on Critical Systems and its impacts
Keywords: Systemic Cyber Event; Syntatic Attack,.
A Fire Management Decision Support Systems to Minimize Economic Losses: A Case Study in a Petrochemical Complex
by Khaled Alutaibi, Abdullah Alsubaie, Jose Marti
Abstract: Fires are very expensive to fight and may result in devastating human, economic, and environmental effects. Due to limited fire management resources and budget constraints, fire management becomes increasingly challenging. The increased interdependencies among existing infrastructure systems make economic losses induced by fires very severe and difficult to predict. Despite recent advances in fire management decision support systems (FMDSSs), economic analysis capabilities have not received enough attention in these systems. Efficient FMDSS incorporates economic considerations to determine optimal fire fighting tactics and strategies. This paper proposes an FMDSS for developing optimal fire management plans. The proposed system adopts the Cost-Plus-Net-Value Change (C + NV C) concept to evaluate the economic efficiency of the plans. In order to capture the net value change of goods and services due to fires, an infrastructure interdependency simulator (i2Sim) is used to incorporate the interaction among infrastructure systems. The proposed FMDSS is capable of developing long-term (strategic) plans and short-term (operational) plans. The applicability of the proposed system is demonstrated using a case study involving multiple fire incidents in a large petrochemical complex.
Keywords: economic efficiency; decision support systems; firernmanagement; critical infrastructures; interdependencies; firefighting;rnindustrial fires.
The impact of partial capacity reduction on network vulnerability against cascading failure
by Kashin Sugishita, Yasuo Asakura
Abstract: Recent natural and man-made disasters have revealed the inherent weakness in mutually dependent critical infrastructures. A potential risk in such complex systems is that an influence of failures in one system can propagate along dependency and multiple systems can be broken simultaneously. Hence it is important to understand risks hidden behind dependency. Under the background, we investigate the impact of partial capacity reduction on network vulnerability against cascading failure. This study demonstrates that the partial capacity reduction increases the vulnerability of the whole network and failures can spread out easily. We also show that how critical nodes whose removals bring about devastating damage on the whole network appear in a network. Our results indicate a possibility that nodes which are located not only inside but also outside of the area of the capacity reduction can turn into critical nodes.
Keywords: cascading failure; critical infrastructures; vulnerability; network risks; capacity reduction; dependency; complex networks.
Analyzing Robustness in Intra-Dependent and Inter-Dependent Networks using a New Model of Interdependency
by Joydeep Banerjee, Kaustav Basu, Arunabha Sen
Abstract: Power and Communication network of a nation are heavily
interdependent on each other. Dependencies exist between the individual
networks, for example, the power network, as well. Failure of certain entities
results in cascading failure leading to widespread power blackouts. Hence it is
critical to understand and model such dependencies. In previous literature, authors
have proposed different models to describe these dependencies. However, these
models are limited to capture the complex dependencies that might exist in a
critical infrastructure. In this paper, firstly we present a Boolean logic based
model called the Implicative Interdependency Model, which overcomes the major
shortcomings of the previous models. Using the model a metric to compute
Robustness of these systems is defined. The computational complexity to compute
this metric is proved to be NP-complete. An optimal Integer Linear program and
a sub-optimal heuristic with polynomial time complexity are provided that solves
the Robustness Computation problem. Using real world data of interdependent
power-communication network and data of different bus systems for power
network the efficacy of the heuristic is compared to the optimal solution.
Keywords: Power Network; Communication Network; Dependency; Interdependency; Robustness.
SMART INFRASTRUCTURE BY (PPPS) WITHIN THE CONCEPT OF SMART CITIES TO ACHIEVE SUSTAINABLE DEVELOPMENT
by Ahmed Selim, Pasent Yousef, Mohmaed Haggag
Abstract: The concept of smart infrastructure is derived from the idea of smart city which is described as a comprehensive system with different elements such as people, governance, environment, economy, mobility and living conditions of a given geographical space with efficient ICT that promote smart sustainable environment.
The improvement of efficiency, quality and affordable costs of providing city services to be a smart city requires huge financial investments therefore; the cooperation between the public, private sectors and civil society become inevitable to cover the cost of this trend. This paper discusses the participation of public- private partnerships (PPPs) with the civil society to provide the finance and (intelligent) technology for the infrastructure by innovative solutions according to the available recourses and technology in the countries to achieve social, environmental and economic sustainability.
Smart infrastructure for cities is adapted by introducing technology and builds smarter solutions to meet the requirements of society to avoid exploding of the existing infrastructure because of the expected tremendous pressure on it. This paper focuses on the smart city infrastructure and PPPS process to achieve smart infrastructure.
Keywords: Smart Infrastructure – Public-Private Partnership (PPPS) – Smart Cities – Sustainable Development.
Design and validation of the Medusa supply chain risk assessment methodology and system
by Spyridon Papastergiou, Nineta Polemi, Panayiotis Kotzanikolaou
Abstract: Supply chains (SC) can be viewed as complex interconnected systems that play a vital role of the transportation and delivery of goods and services. SC usually involves various critical infrastructures, mainly in the transportation sector and exhibit intra-sector and cross-border dependencies with various business entities. Although efforts have been made to standardise supply chain risk assessment (SCRA) approaches, there is a lack of targeted methodologies. In our previous work (Polemi and Kotzanikolaou, 2015) we have proposed a preliminary version of the Medusa SCRA methodology, compliant with ISO28001. The primary goal of Medusa is to assess the risks of an SC rising from the interconnections and interdependencies between the various entities within it. In this paper, we significantly extend our previous work, in order to define all specific details of the Medusa SC RA, such as estimations of threat levels, consequences, risk scales, cascading risks; generation of a baseline SC security policy and identification of security controls. Furthermore, we validate our methodology based on real case scenarios, derived from the pilot operations of the Medusa project and we provide implementation details of the Medusa collaborative system which hosts the methodology and offers SC RA services to the involved BPs.
Keywords: supply chain; risk assessment; critical infrastructures; dependency graphs; experimental validation.
Exploring the effect of national policies on the safety level of tunnels that belong to the trans-European road network: a comparative analysis
by Panagiotis Ntzeremes, Konstantinos Kirytopoulos, Ioannis Benekos
Abstract: The trans-European road network (TERN) was defined to improve EUs road network guarantee users a high and uniform level of safety. TERNs tunnels must be designed to serve these purposes. To this respect, the EU introduced the Directive 2004/54/EC. The Directive imposed minimum infrastructure and equipment requirements for all TERNs tunnels attributing high importance to risk assessment method. This paper illustrates that the variety of the methods adopted by each member state do not guarantee the same level of safety for all TERNs tunnels. Presenting the general principles of EU methods, two methods, which share a high degree of similarity, are used to study the same fire accident at the same tunnel. The differences occurred in the estimated level of safety raises skepticism, as the tunnel has different safety level depending on the method and national policies used. The outcome illustrates the need to improve policy formulation on this matter.
Keywords: road network; transportation; road tunnel; Directive 54/2004/EC; risk assessment; infrastructure safety.
Developing a model and instrument to measure the resilience of critical infrastructure sector organisations
by Tracy Hatton, Charlotte Brown, Robert Kipp, Erica Seville, Peter Brouggy, Michelle Loveday
Abstract: Societies are highly reliant on uninterrupted critical infrastructure services. Until recently, the focus has been on the physical resilience of hard assets such as pipes, cables and buildings. Attention is now also turning to a systems approach, considering the capabilities of, and interconnections between, the organisations responsible for developing, maintaining and running those infrastructures. This paper draws on existing research into organisational resilience to develop a model and measurement instrument for whole of sector resilience for selected critical infrastructure sectors, in order to identify sector resilience strengths and weaknesses, and to develop and evaluate the effectiveness of their resilience strategies and investments. The model is intended as a 'conversation starter' to prompt further research on how critical infrastructure organisations can best address their significant co-dependencies to ensure the overall sector's ability to survive and thrive, even in times of crisis.
Keywords: model development; instrument development; measuring resilience; critical infrastructure resilience; CIR; organisational resilience; sector resilience; critical infrastructure organisations; resilience strategies.
A deterministic approach for systems-of-systems resilience quantification
by Ilyas Ed-daoui, Mhamed Itmi, Abdelkhalak El Hami, Nabil Hmina, Tomader Mazri
Abstract: With recent advances in systems-of-systems, reliability analysis becomes a very challenging research topic. One of the most pressing issues is to figure out a plan to handle resilience. On this basis, we propose, in this paper, a structural deterministic approach to quantitatively measure systems resilience. This approach is based on a three-step method. First, evaluate the functional dependencies between groups by considering a system-of-systems as a large-scale interconnected network of systems distributed into interdependent groups. This leads us to better understand the overall connections and process continuity. Next, analyse how much the global architecture of the system-of-systems depends on every group. Last, estimate its structural resilience by measuring the impact of each system's failure on the other systems forming the global system and building the process. Two case studies are provided to experiment our approach. The results are cross-compared and evaluated.
Keywords: critical infrastructures; criticality; failure impact; reliability; resilience; systems-of-systems.