EDM502 Critical Infrastructure
Vulnerability
Module 1
·
Case –
o
Case Assignment
§ For this Case Assignment, you are to answer the following:
§ Explain interconnectivity of infrastructures (e.g., airlines and the
power grid) with specific examples. Do interconnectivities increase the
vulnerability of major infrastructures?
§ Should a CIP management model be centralized, decentralized, or a
combination? Propose a relevant management practice model that supports your
position.
§ Comment on critical infrastructures in your town, state, or area of
deployment. Number, Type(s)? How protected?
o
Assignment Expectations
§ Length: This Case Assignment should be at least 3 pages not counting
the title page and references.
§ References: At least two references should be included from academic
sources (e.g. peer-reviewed journal articles). Required readings are included.
Quoted material should not exceed 10% of the total paper (since the focus of
these assignments is critical thinking). Use your own words and build on the ideas
of others. When material is copied verbatim from external sources, it MUST be
enclosed in quotes. The references should be cited within the text and also
listed at the end of the assignment in the References section (preferably in
APA format).
§ Organization: Subheadings should be used to organize your paper
according to question.
§ Grammar and Spelling: While no points are deducted for minor errors,
assignments are expected to adhere to standards guidelines of grammar,
spelling, punctuation, and sentence syntax. Points may be deducted if grammar
and spelling impact clarity.
§ The following items will be assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Clarity: Writing is concise, understandable, and contains sufficient
detail or examples.
§ Objectivity: Student avoids use of first person and subjective bias.
·
SLP –
o
Critical Infrastructure Vulnerability and Protection: An
Introduction
§ The purpose of this session long project (Modules 1–4) is to provide
you with the opportunity to prepare a paper or report on CIP that is of
particular interest to you community, state, or the United States in general.
The following information is essential in ensuring your success with this
course component.
§ The project is to include at least the following information:
§ Rationale for choosing your topic.
§ Review of the literature.
§ Implications for you community, state, or the United States in
general.
o
Session Long Project
§ For this first module you are to examine the literature (given to
you in background information or search the internet) and consider on what
topic you will focus for your CIP project. Prepare a two (2) page proposal
depicting how you will approach and on what you will be focusing in this
project.
§ To begin your SLP, in this first module, you are to proceed
accordingly:
§ Begin browsing through the literature that relate to your topic of
interest. The topic should be important to you or at least to the United States
in general
§ Finally, develop a preliminary draft introduction to your review in
one or two pages including a reasonably articulated topic to the literature and
a sound rationale or problem statement on why you have selected this topic in
CIP.
§ While your introduction is not “set in stone” and you may
be fine-tuning this along the way, this introduction is to be written in a
scholarly manner–illustrating careful thought and insight toward the focus of
your project.
o
SLP Assignment Expectations
o
To ensure your success and
meaningful learning with this course component, please be sure to read the
following information carefully. Each of the options above is from professional
sources from, for example, scholarly journals, reports, and empirical studies.
o
Approximate number of scholarly
sources from which to draw, cite, and reference is 10.
o
Approximate number of pages: 15
including title page and reference list
o
Writing format and style: APA
formatting is encouraged. The following are just one of the APA formatting
resources: http://www.library.cornell.edu/newhelp/res_strategy/citing/apa.html
o
Organizing your Time
o
The following is a general overview of how you will be submitting
your SLP work. This information is provided for you on each module’s SLP page
in detail.
§ Module 1: Preliminary Introduction to your Review (SLP 1)
§ For this first module you are to examine the literature (given to
you in background information or search the internet) and consider on what
topic you will focus for your CIP project. Prepare a two pages proposal
depicting how you will approach and on what you will be focusing in this
project
§ Module 2: Tentative Reference List of 10 or more scholarly sources
including reports, studies, and-or manuals.
§ Submit a tentative reference list of 10 or more sources that you
will be citing, reviewing, and referencing in your final paper. Briefly
describe the contents of each article in a few sentences (APA formatting
recommended).
§ Choose 5 from the 10 references and explain in some detail its
contents and relevancy to your whole report.
§ Module 3: Draft Paper Submission.
§ Submit your draft copy of your report for a critique prior to final
submission.
§ Module 4: Completed session long project
§ Hand in your project containing a brief introduction, body with the
guiding concepts, and conclusion (15 pages–Including title page and reference
list).
·
Discussion –
o
There are many examples of
failures in cybersecurity including the Stuxnet computer virus interfering with
the Iranian uranium enrichment process; Wall Street (NASDAQ); and Identity
Theft from banks and on-line retailers and corporations.
o
What are some of the measures
that can be employed to protect our banking, defense and critical
infrastructure from cyber-assault?
·
Course Material –
o
Required Reading
§ A generic national framework for critical information infrastructure
protection (CIIP) (2007). Manual Suter Center for Security Studies, ETH,
Zurich. Retrieved from: http://www.itu.int/ITU-D/cyb/cybersecurity/docs/generic-national-framework-for-ciip.pdf
§ Digital Attack Map: Distributed Denial of Service (DDoS) Website: http://www.digitalattackmap.com/
§ Obama, B. (2013). Presidential Policy Directive: Critical
infrastructure security and resilience, White House. Retrieved from: https://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil
§ Resiliency rules: 7 Steps for critical infrastructure protection.
(2007). Slideserve. Retrieved from https://www.slideserve.com/sierra/resiliency-rules
§ Student manual. (2013). The National Infrastructure Protection Plan:
An Introduction. FEMA. Retrieved from: https://training.fema.gov/EMIWeb/IS/courseOverview.aspx?code=IS-860.b
§ The National Cybersecurity and Communications Integration
Center: Website: http://www.dhs.gov/about-national-cybersecurity-communications-integration-center
o
Recommended Reading
§ Parks, R. (2007). Guide to critical infrastructure protection,Cyber
Vulnerability Protection. Retrieved from:
http://energy.gov/sites/prod/files/oeprod/DocumentsandMedia/26-CIP_CyberAssessmentGuide.pdf
§ The future of the electric grid (2011). MIT Energy Initiative.
Retrieved from: http://web.mit.edu/mitei/research/studies/the-electric-grid-2011.shtml
o
Recommended Sites
§ Journal of National Security Law and
Policy.http://www.jnslp.com/read.asp
§ United States Cyber Command – Cybersecurity:http://www.defense.gov/home/features/2010/0410_cybersec/
Module 2
·
Case –
o
Case Assignment
§ This Case Assignment examines Critical Infrastructure Protection
(CIP) and intergovernmental approaches to safeguarding and to responses to
natural disasters.
§ Read pp. 71-75. National Infrastructure Protection Plan (2009).
§ A category five hurricane hit the town of Jacksonville, Florida devastated the town crippling infrastructure
including power to homes and businesses. The telephone lines were also destroyed.
To add to the monumental task of locating, triaging, and securing the safety of
citizens, looters have been stealing cooper from the inactive power lines.
Motorists no longer guided by traffic lights, have been negotiating pedestrians
and massive debris in the streets; the town is in chaos.
§ Explain the coordinated responses necessary to protect critical
infrastructure and key resources (CIKR). Which agencies would be involved to
restore normalcy in the Florida town? Note: There is no one answer.
§ Go to GIS Lounge. Look up explanation of GIS and Remote Sensing.
§
§ Discuss the combination of Remote Sensing (RS) and Geospatial
Information System (GIS) in the transportation infrastructure protection, and
flood risks of major rivers.
o
Assignment Expectations
§ Length: This Case Assignment should be at least 3-5 pages not
counting the title page and references.
§ References: At least two references should be included from academic
sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted
material should not exceed 10% of the total paper (since the focus of these
assignments is critical thinking). Use your own words and build on the ideas of
others. When material is copied verbatim from external sources, it MUST be
enclosed in quotes. The references should be cited within the text and also
listed at the end of the assignment in the References section (preferably in
APA format).
§ Organization: Subheadings should be used to organize your paper
according to question.
§ Grammar and Spelling: While no points are deducted for minor errors,
assignments are expected to adhere to standards guidelines of grammar,
spelling, punctuation, and sentence syntax. Points may be deducted if grammar
and spelling impact clarity.
§ The following items will be assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Clarity: Writing is concise, understandable, and contains sufficient
detail or examples.
§ Objectivity: Student avoids use of first person and subjective bias.
·
SLP–
o
Natural Disasters and Infrastructure Damage
§ Tentative Reference List of 10 or more scholarly sources including
reports, studies, and-or manuals. Please avoid non-scholarly sources such as
Wikipedia, newspaper articles, and blogs. Choose 5 from the 10 references that
you submitted in the previous SLP and explain in some detail its contents and
relevancy to your whole report.
§ For Module 2 SLP: Submit a tentative reference list of 10 or more
sources (in alphabetical order) that you will be citing, reviewing, and
referencing in your final paper. Briefly describe the contents of each article
in a few sentences (APA formatting recommended).
§ As your SLP begins to take shape, be sure to revisit the Session
Long Project Overview at the SLP page of module 1 to keep you going on the
right direction.
o
SLP Assignment Expectations
§ Sources are to be presented in alphabetical order.
§ Sources are to be formatted in an academic writing style (e.g.,
APA).
§ Sources must be scholarly.
·
Discussion –
o
Active Duty and National Guard
units have been used in the past during natural disaster response operations
domestically and internationally.
Discuss the capabilities and limitations of: 1) Active Duty, and 2)
National Guard being used to support disaster relief efforts.
·
Course Material –
o
Required Reading
§ Emergency planning for nuclear disasters (2011). Union of Concerned
Scientists. Retrieved from https://www.ucsusa.org/nuclear-power/nuclear-power-accidents/emergency-planning#.WqFMtOjwZPY.
Click Fact Sheet “Emergency Planning and Preparedness for Nuclear Disasters”
found on page 1.
§ Miller, R. (2007). Hurricane Katrina: Communications and
Infrastructure Impacts. US Army War College. Retrieved from: https://blackboard.angelo.edu/bbcswebdav/institution/LFA/CSS/Course%20Material/BOR4301/Readings/Hurricane%20Katrina%20Communications%20%26%20Infrastructure%20Impacts.pdf
§ National infrastructure protection plan (2009). [Read 5.1 A.
Coordinated National Approach to the Homeland Security Mission, pp. 71-75].
Retrieved from:http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf
§ National infrastructure protection plan Website (2013). Retrieved
from: https://www.dhs.gov/national-infrastructure-protection-plan
§ Transportation Systems Sector: https://www.dhs.gov/transportation-systems-sector
§ Grass GIS: https://grass.osgeo.org/
o
Recommended Sites
§ Disaster and Emergency Management on the Internet.http://www.keele.ac.uk/depts/por/disaster.htm
§ Global Disaster Alert and Coordination System.http://www.gdacs.org/
§ Natural Disaster News. http://www.topix.com/news/natural-disasters
§ NOAA National Severe Storms Laboratory. http://www.nssl.noaa.gov/
Module 3
·
Case –
o Infrastructure Protection, Vulnerability Analysis, and Network
Architectures
o Case Assignment
§ Read the required literature and
especially review the videos.
§ Critical Infrastructure Protection Module: Energy Supply
Chain
§ Energy Vulnerability Analysis
§ Critical Infrastructure: Vulnerability Analysis and
Protection: SCADA Structure
§ SCADA Vulnerability Analysis
§ Permission granted by Naval Postgraduate School, Center for Homeland
Defense and Security, 28JAN11.
§ Read the required literature, especially National Infrastructure
Protection Plan (2009), pp. 76-79; and, Sector-Specific Plans (SSPs),
Department of Homeland Security.
§ Answer the following:
§ Why are refinery and storage stages more vulnerable than at other
supply chain components?
§ IT-ISAC: Explain what this is and its role in IT and computer
products.
§ “SCADA protection is scattered among governmental agencies and
commercial groups.” Give some examples of overlap.
§ Explain the relationship of National Infrastructure Protection Plan
(NIPP) and Sector-Specific Plans (SSPs). Also, their relationship with
Department of Homeland Security.
§ Explain the function of an SSP; choose a particular SSP and describe
its purpose. Also, why did you choose that particular plan?
o Assignment Expectations
§ Length: This
Case Assignment should be at least 5-8 pages not counting the title page and
references.
§ References: At least two references should be included from academic
sources (e.g. peer-reviewed journal articles). Required readings are included.
Quoted material should not exceed 10% of the total paper (since the focus of
these assignments is critical thinking). Use your own words and build on the
ideas of others. When material is copied verbatim from external sources, it
MUST be enclosed in quotes. The references should be cited within the text and
also listed at the end of the assignment in the References section (preferably
in APA format).
§ Organization: Subheadings should be used to organize your paper according to
question.
§ Grammar and Spelling: While no points are deducted for minor errors, assignments are
expected to adhere to standards guidelines of grammar, spelling, punctuation,
and sentence syntax. Points may be deducted if grammar and spelling impact
clarity.
§ The following items will be
assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Clarity: Writing is concise, understandable, and contains sufficient
detail or examples.
§ Objectivity: Student avoids use of first person and subjective bias.
§
·
SLP –
o
INFRASTRUCTURE PROTECTION, VULNERABILITY ANALYSIS, AND NETWORK
ARCHITECTURES
§ Draft Paper Submission
§ Submit your draft copy of your report for a critique prior to final
submission.
§ The Draft copy will not be critiqued for English or punctuation.
Suggestions will be made to incorporate in the final report.
o
SLP Assignment Expectations
§ Length: This Case Assignment should be at least 10 pages not
counting the title page and references.
§ References: At least two references should be included from academic
sources (e.g. peer-reviewed journal articles). Required readings are included.
Quoted material should not exceed 10% of the total paper (since the focus of
these assignments is critical thinking). Use your own words and build on the
ideas of others. When material is copied verbatim from external sources, it
MUST be enclosed in quotes. The references should be cited within the text and
also listed at the end of the assignment in the References section (preferably
in APA format).
§ Organization: Subheadings should be used to organize your paper
according to question.
§ The following items will be assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Objectivity: Student avoids use of first person and subjective bias.
o
·
Discussion –
o
Hurricanes and
Tornados have a significant impact on both Public Safety Radio systems (Police,
Fire, EMS, etc.) and Cellular Communications. What can be done to ensure
communications do not fail following a severe wind event? Remember to cite your
sources and list your references.
·
Course Material –
o
Required Reading
§ Common cyber-security vulnerabilities observed in control system
assessments by the INL NSTB program (2008), Department of Energy. Retrieved
from: http://energy.gov/oe/downloads/common-cyber-security-vulnerabilities-observed-control-system-assessments-inl-nstb
§ National infrastructure protection plan (2009). [Read 5.2 The CIKR
Protection Component of the Homeland Security Mission, and 5.3 Relationship of
the NIPP and SSPs to Other CIKR Plans and Programs, pp. 76-79]. Retrieved from:
http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf
§ Sector-specific plans (SSPs), Department of Homeland Security.
Retrieved from: http://www.dhs.gov/critical-infrastructure-sectors
o
Required Videos
§ *Lewis, T. (2004). Critical infrastructure protection module: Energy
supply chain. 15 minute video: https://www.chds.us/coursefiles/cip/lectures/energy/cip_energy_supplychain/player.html
§ * Lewis, T. (2004). Energy vulnerability analysis-Part 1. 25 minute
video: https://www.chds.us/coursefiles/cip/lectures/energy/cip_energy_vulnerabilityanalysis_p01/player.html
§ * Lewis, T. (2004). Critical infrastructure: Vulnerability analysis
and protection, SCADA structure. 17 minute video: https://www.chds.us/coursefiles/cip/lectures/scada/cip_SCADA/player.html
§ * Lewis, T. (2004). SCADA vulnerability analysis. 25 minute video: https://www.chds.us/coursefiles/cip/lectures/scada/cip_SCADA_vulnerabilityanalysis/player.html
o
Optional Reading
§ Bomb Making Materials Awareness Program, Department of Homeland
Security. http://www.dhs.gov/files/programs/gc_1259938444548.shtm
§ National Infrastructure Simulation and Analysis Center (NISAC), Los
Alamos. http://www.sandia.gov/nisac/
§ National Infrastructure Coordinating Center, Department of Homeland
Security. http://www.dhs.gov/national-infrastructure-coordinating-center
Module 4
·
Case –
o International Cooperation
o Case Assignment
§ After reading the required
literature, comment on two of the following:
§ Read Resolution 2341 of United Nations Security Council on the
protection of critical infrastructure from terrorist attacks. Answer the
following: Who are the member countries of the UNSC? Comment on the UNSC’s
handling of Iran’s nuclear program.
§ Go to required website: International Engagement Results,
Department of Homeland Security. Click “International Partnerships.” From the
list of agreements, pick one and comment, using examples such as an agreement
with a specific country.
§ Read What Is Container Security Initiative (CSI) and How Does It
Work? Answer the following: What are the possible ways shipping containers
pose a security risk? A critical infrastructure risk?
§ Comment on the most recent natural
or man-made disaster and the effects on critical infrastructure, answering:
When? Where? What? Why? How?
o Assignment Expectations
§ Length: This
Case Assignment should be at least 3 pages not counting the title page and
references.
§ References:At least two references should be included from academic sources
(e.g. peer-reviewed journal articles). Required readings are included. Quoted
material should not exceed 10% of the total paper (since the focus of these
assignments is critical thinking). Use your own words and build on the ideas of
others. When material is copied verbatim from external sources, it MUST be
enclosed in quotes. The references should be cited within the text and also
listed at the end of the assignment in the References section (preferably in
APA format).
§ Organization: Subheadings should be used to organize your paper according to
question.
§ Grammar and Spelling: While no points are deducted for minor errors, assignments are
expected to adhere to standards guidelines of grammar, spelling, punctuation,
and sentence syntax. Points may be deducted if grammar and spelling impact
clarity.
§ The following items will be
assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Clarity: Writing is concise, understandable, and contains sufficient
detail or examples.
§ Objectivity: Student avoids use of first person and subjective bias.
o
·
SLP –
o
INTERNATIONAL COOPERATION
o
Your final report is due. Please check your spelling, punctuation,
and grammar prior to submission.
o
SLP Assignment Expectations
§ Length: This Case Assignment should be at least 10-15 pages not
counting the title page and references.
§ References: At least two references should be included from academic
sources (e.g. peer-reviewed journal articles). Required readings are included.
Quoted material should not exceed 10% of the total paper (since the focus of
these assignments is critical thinking). Use your own words and build on the
ideas of others. When material is copied verbatim from external sources, it
MUST be enclosed in quotes. The references should be cited within the text and
also listed at the end of the assignment in the References section (preferably
in APA format).
§ Organization: Subheadings should be used to organize your paper
according to question.
§ The following items will be assessed in particular:
§ Relevance: All content is connected to the question.
§ Precision: Specific question is addressed. Statements, facts, and
statistics are specific and accurate.
§ Depth of discussion: Student presents and integrates points that
lead to deeper issues.
§ Breadth: Multiple perspectives and references, multiple issues and
factors considered.
§ Evidence: Points are well-supported with facts, statistics and
references.
§ Logic: Presented discussion makes sense, conclusions are logically
supported by premises, statements, or factual information.
§ Objectivity: Student avoids use of first person and subjective bias.
o
·
Discussion –
o
Global and regional conflicts
can greatly affect several critical infrastructure sectors in the United States.
Discuss the importance of international agreements in protecting U.S.
infrastructure given current conflicts in the Middle East and Africa. Remember
to cite your sources and list your references.
·
Reflections –
o
Assignment Expectations:
§ Address concept A and B in about 150 words each.
§ You will be graded on how well you demonstrate knowledge and
understanding of the concept, and critical thinking pertaining to the
applicability of the concept to your professional practice. Points awarded will
follow breakdown below.
§ You will neither be required to, nor graded on responses to your
peers. One posting will suffice.
o
The Assignment: Given the
readings and assignments in the course, identify and discuss two concepts or
lessons learned that you believe will be most applicable to your professional
discipline.
o
Concept A (points 10/20):
§ Identify /define (points 4/20): …
§ Your professional discipline: …
§ How applicable (points 6/20): …
o
Concept B (points 10/20):
§ Identify /define (points 4/20): …
§ Your professional discipline: …
§ How applicable (points 6/20): …
o
All information in the postings
can be shared by all for the betterment of your project.
·
Course Material –
o
Required Reading
§ International Engagement Results, Department of Homeland Security. https://www.dhs.gov/international-engagement-results
Click “International Partnerships” and review the list of agreements.
§ Key Private and public cyber expectations need to be consistently addressed
(2010). GAO, Report to Congressional Requestors. Retrieved from: http://www.gao.gov/new.items/d10628.pdf
§ Resolution 2341 of United Nations Security Council on the protection
of critical infrastructure from terrorist attacks. (2017). Derechos.org.
Retrieved from http://www.derechos.org/terrorism/doc/unterror54.html
§ What is container security initiative (CSI) and how does it work?
(2016). Retrieved from: http://www.marineinsight.com/marine-safety/what-is-container-security-initiative-csi-and-how-does-it-work/
o
Required Sites
§ International Critical Infrastructure Engagement: https://www.dhs.gov/international-critical-infrastructure-engagement
§ International Strategy for Disaster Reduction. Geneva, Switzerland. http://www.unisdr.org/
