Do you know that The Stuxnet worm, discovered in 2010, succeeded in infecting the most secure nuclear facilities by using physical devices (USB flash drives)?
Do you know in 2016 , two nuclear powerplan in Belgium were locked down by terrorist?
Do you know that on 17-18 December 2016 Ukraine power blackout because cyberattack on powerplan system?
Terrorist attacking workstations and Supervisory Control and Data Acquisition (SCADA) systems. Cyber-attacks (by cyber terrorist or cyber-warframe that international conflicts) against Critical Infrastructures are gaining steam. Because stealth nature and potential to cause physical damage without deploying soldiers or utilizing traditional weapons, in many situations cyber-attack is the preferred method of attack.
Critical infrastructure is an asset or system which is essential for the maintenance of vital societal functions. The damage to a critical infrastructure, its destruction or disruption by natural disasters, terrorism, criminal activity or malicious behaviour, may have a significant negative impact for the security of country and the well-being of its citizens.
The following sectors and industries are widely considered to be critical infrastructure:
| Sectors | Industries |
| Energy | • Electricity
• Natural gas • Oil |
| Information and Communication Technology (ICT) | • Telecommunications (including satellites)
• Broadcasting systems • Software, hardware and networks (including the Internet) |
| Traffic and transportation | • Shipping
• Aviation • Rail transport • Road traffic • Logistics |
| Healthcare | • Healthcare
• Medicines and vaccines • Laboratories |
| Water supply | • Dams
• Storage • Treatment and distribution networks |
| Finance and insurance | • Banks
• Stock exchanges • Insurance companies • Financial services |
| Government and administration | • Government
• Parliament • Legal institutions • Emergency services |
| Nutrition and agriculture | • Food trade
• Agriculture |
| Media and cultural assets | • Radio
• Press • Symbolic buildings |
Source : National Infrastructure Protection Plan (NIPP), p. 109: U.S. Department of Homeland Security.
Cyber-attack or cyber-threat on Critical Infrastructure (CI) it have various type, but usually may include :
- Manipulate system or data – such as malware that exploit vulnerabilities in computer software and hardware components necessary for operation of CI’s;
- Shutdown crucial system – such as DDoS attacks;
- Limit access to crucial systems or information – such as through ransomware attack.
While interconnected and integrated computerized control system have significantly streamlined the way in which CIs operated and increased connectivity that mean also increase the attack surface and therefore expose Cis to a high risk of manipulation. There is table of threat in Industrial Control System :
| No. | Threat | Explanation |
| 1 | Unauthorized use of remote maintenance access points | Maintenance access points are deliberately created external entrances to the ICs network and are often insufficiently secure |
| 2 | Online attacks via office or enterprise networks | Office IT is usually linked to the network in several ways.
In most case, network connection from offices to the ICS network also exist, so attacker can gain access via this route. |
| 3 | Attacks on standard components used in the Cis network | Standard IT components (commercial off-the-shelf) such as systems software, application servers or databases often contain flaws or vulnerabilities, which can be exploited by attackers. If these standard components are also used in the ICs network, the risk of a successful attack on the ICs network increases. |
| 4 | DDoS attacks | Distributed Denial of Services attacks can impair network connection and essential resources and cause systems to fail – in order to disrupt the operation of ICs, for instance. |
| 5 | Human error and sabotage | Intentional deeds – whether by internal or external perpretators – are a massive threat to all protection targets. Negligence and human error are also a great threat, especially in relation to the protection targets confidentiality and availability. |
| 6 | Introducing malware via removable media and external hardware | The use of removable media and mobile IT components of external staff always entails great risk of malware infection. |
| 7 | Reading and writing news in the ICs network | Most control components currently use clear text protocols, so communication is unprotected. This makes it relativelyeasy to read and introduce control commands. |
| 8 | Unauthorized access to resources | Internal perpetrators and subsequent attacks following initial external penetration have it especially easy if services and components in the process network do not utilize authentication methods or if the methods are insecure. |
| 9 | Attacks on network components | Attacekrs can manipulate network component in order to carry out man-in-the-middle attacks or to make sniffing easier, for example. |
| 10 | Technical Malfunctions or force majeure | Outage resulting from extreame weather or technical malfunctions can occur at any time – risk and potential damage can only be minimazes in such cases. |
Source : OSCE 2013
Bims.
I’m curious to find out what blog system you are utilizing?
I’m having some small security problems with my latest site and I’d
like to find something more safeguarded. Do you have any suggestions?
Wow! This blog looks exactly like my old one! It’s on a completely different
subject but it has pretty much the same page layout and design.
Wonderful choice of colors!
Hello! I could have sworn I’ve been to this website before but after reading
through some of the post I realized it’s new to me.
Anyhow, I’m definitely glad I found it and I’ll be book-marking and checking
back frequently!
I think the admin of this website is really working hard for his web
site, as here every data is quality based material.
WOW just what I was looking for. Came here by searching for viagra
I like the valuable information you provide in your articles.
I will bookmark your blog and check again here regularly.
I’m quite certain I’ll learn many new stuff right here!
Best of luck for the next!
Wonderful beat ! I would like to apprentice while you amend your web site, how can i subscribe for a blog web site?
The account aided me a acceptable deal. I had been tiny bit acquainted
of this your broadcast provided bright clear concept
Yes! Finally something about 더킹카지노.
Wow that was strange. I just wrote an very long comment but
after I clicked submit my comment didn’t appear.
Grrrr… well I’m not writing all that over again. Anyway, just wanted to say wonderful blog!
Thanks for sharing your info. I truly appreciate your efforts and I will be waiting for your further write
ups thanks once again.
Wow! Thank you! I constantly needed to write on my
blog something like that. Can I take a part of your post to my website?
It’s an awesome paragraph for all the internet viewers; they will
obtain benefit from it I am sure.
I do not even know how I finished up right here, but I believed this submit was once great.
I do not know who you are but definitely you are
going to a famous blogger for those who aren’t already.
Cheers!
Pretty section of content. I just stumbled upon your web site and in accession capital to assert that I get in fact enjoyed
account your blog posts. Anyway I’ll be subscribing to your augment and even I achievement you access consistently rapidly.
What’s up, I want to subscribe for this blog to take most
up-to-date updates, thus where can i do it please help.
Ahaa, its good conversation regarding this article here at this web site,
I have read all that, so now me also commenting at this place.
WOW just what I was looking for. Came here by searching for BHO
extractor
Appreciating the hard work you put into your website and
in depth information you present. It’s good to come across a blog every once in a while that isn’t the same outdated rehashed information. Great read!
I’ve saved your site and I’m including your RSS feeds to my Google account.
Hello, after reading this amazing article i am also delighted to share
my experience here with mates.
Appreciating the dedication you put into your blog and in depth information you provide.
It’s good to come across a blog every once in a while that isn’t the same out of date
rehashed information. Wonderful read! I’ve bookmarked your site and I’m including your RSS feeds to my Google
account.