CI-3 Dependency and Interdependency Considerations for Critical Infrastructure Prepared for: GovSec West 2011 Critical Infrastructure and Key Assets Protection & Response November 15, 2011 Lori Eaton Infrastructure Analyst Associate Infrastructure Assurance Center Argonne National Laboratory Argonne, IL
45
Embed
CI-2 Dependency and Interdependency Considerations for ...download.101com.com/gig/pdf/govsec2012sessions/CI-3_Eaton.pdf · Risk and resilience methodology development and assessment
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
CI-3 Dependency and Interdependency Considerations for Critical Infrastructure
Prepared for:
GovSec West 2011
Critical Infrastructure and Key Assets Protection & Response
November 15, 2011
Lori EatonInfrastructure Analyst Associate
Infrastructure Assurance Center
Argonne National Laboratory
Argonne, IL
Argonne National Laboratory
Go to ”Insert (View) | Header and Footer" to add your organization, sponsor, meeting name here; then, click "Apply to All"
2
■
Multi‐program science and research center
managed by The University of Chicago for the
U.S. Department of Energy
■
Located 25 miles southwest of
Chicago
■
Staff of about 4,000 (1,800 scientists and
engineers)
■
Active infrastructure assurance programs for 15
years
■
Infrastructure Assurance Center helps to protect
and assure critical infrastructures and key
resources
Argonne Infrastructure Assurance Center (IAC)
■
Goal – to provide methodologies,
information, analyses, tools, and
technologies to inform decisions about
infrastructure protection and resilience
■
Capabilities built on 20+ years of critical
infrastructure protection support to
DOE, DoD, President’s Commission on
Critical Infrastructure Protection
(PCCIP), EMP Commission, DHS, and
other organizations
■
Part of Transition Team to standup DHS
■
Large interdisciplinary staff to support
infrastructure assurance work
Go to ”Insert (View) | Header and Footer" to add your organization, sponsor, meeting name here; then, click "Apply to All"
3
Information
Tools
Methodologies
Analyses
Technologies
InfrastructureProtection andResilience
■ Engineers
■ Computer scientists
■ Information and cyber security specialists
■ Geospatial analysts
■ Economists
■ Social scientists
■ Lawyers
■ Regulatory analysts and public policy experts
■ Risk management professionals
■ Decision analysts
■ Educators
Argonne Staff, Other National Labs, Academia, Research Centers, Private Sector, …
■ Engineers
■ Computer scientists
■ Information and cyber security specialists
■ Geospatial analysts
■ Economists
■ Social scientists
■ Lawyers
■ Regulatory analysts and public policy experts
■ Risk management professionals
■ Decision analysts
■ Educators
Argonne Staff, Other National Labs, Academia, Research Centers, Private Sector, …
Core Capabilities and Expertise Applied to Infrastructure Protection
■
Risk and resilience methodology
development and assessment
■
Metrics development and analysis
■
Infrastructure and
interdependencies modeling &
analysis
■
GIS/visualization tools
■
Decision support systems
■
Training (e.g., risk analysis)
Go to ”Insert (View) | Header and Footer" to add your organization, sponsor, meeting name here; then, click "Apply to All"
4
NAVAL SUBMARINE BASEKINGS BAY
Substation
230-kV Transmission Line
115-kV Tranmission Line
LEGEND
FLORIDA
GEORGIA
CROOKED-RIVER-115
ST.-MARYS-115
US-NAVAL-SUB-SUPPLY-#2-230
US-NAVAL-SUB-SUPPLY-#1-230
KINGSLAND-230/115
COLERAIN-SWITCH-STN.-230
National
LocalRegional
NAVAL SUBMARINE BASEKINGS BAY
Substation
230-kV Transmission Line
115-kV Tranmission Line
LEGEND
FLORIDA
GEORGIA
CROOKED-RIVER-115
ST.-MARYS-115
US-NAVAL-SUB-SUPPLY-#2-230
US-NAVAL-SUB-SUPPLY-#1-230
KINGSLAND-230/115
COLERAIN-SWITCH-STN.-230
National
LocalRegional
Presentation Outline
Definition of Dependencies and Interdependencies
Importance to Risk
Interdependencies are Complex
Types of Interdependencies
Effects of Interdependencies
Illustrative Infrastructure Interdependencies
Interdependencies Lessons Learned
Current Interdependencies Research
GIS demo
Go to ”Insert (View) | Header and Footer" to add your organization, sponsor, meeting name here; then, click "Apply to All"
5
Infrastructure Outages Have Caused “Interdependence”
Problems
The Interdependencies Concern …
Intentional exploitation of these
new vulnerabilities could have
severe consequences for our
economy, security, and
way of life
A series of incidents could
interact (cascade) across critical
infrastructures to degrade the
service upon which all depend
Interdependencies lead to the
possibility that our
infrastructures may be
vulnerable in ways they never
have been before
Threats Complexity
Physical Cyber
Interdependencies
Infrastructure Interdependencies
Dependency
and Interdependency
are related “Dependency”
refer to the a linkage or connection between two infrastructures
through which the state of one influences the state of the other
“Interdependencies”
refers to a bidirectional relationship between
infrastructures dependent on the other—creating a “systems of systems”
Infrastructure linkages vary significantly in scale and complexity
The “new economy”
(Internet, e‐commerce) has important interdependence
implications
Understanding interdependencies requires identifying how each infrastructure
depends on, or is supported by, each of the other infrastructures
Definition of Interdependencies
The multi‐
or bi‐directional reliance of an asset, system,
network, or collection thereof, within or across sectors, on
input, interaction, or other requirement from other sources in
order to function properly*
Infrastructure j Infrastructure k
Goods/Services
Goods/Services
*United States Department of Homeland Security National Infrastructure Protection Plan
Dependencies vs. Interdependencies
Interdependencies – Bidirectional
Dependencies— Unidirectional
Synergies emerge when large sets of components interact with one
another
Complexity makes prediction of what will happen difficult to predict
Interdependencies Are Complex
Normal
Stressed/
Disrupted
Repair/
Restoration
State of
Operation
Types of
InterdependenciesEnvironment
Social/
Political
Business
Legal/
Regulatory
TechnicalHealth/Safety
Security
Coupling
and
Response
Behavior
Type of Failure
Inflexible
Linear/
Complex
Loose/
Tight
Adaptive
Physical
Cyber
Logical
Geographi
c
PublicPolicyCascading
InfrastructureCharacteristics
SpatialTemporal
Operational
Organizational
Common
Cause
Economic
Escalatin
g
Dimensions of Interdependencies
Types of Infrastructure Interdependencies
Physical
(e.g., output of one infrastructure used
by another)
Cyber
(e.g., electronic, informational linkages)
Geographic
(e.g., common corridor)
Logical
(e.g., dependency through financial
markets)
Physical Interdependencies
14
Coal Power Plant
Railroads
Coal for fuel
Delivers repair parts
Electricity –
signals,
switches, control centers
Locomotives
(electrified rail)
Physical Linkage
Cyber Interdependency
Computerized Systems
Monitors
Collects Data
Controls
SCADA ‐
Supervisory Control And Data
Acquisition system
Geographic Interdependency (Common Corridor)
16
Close spatial proximityPipeline & Electric
Transmission Lines
Pipeline & Highway
Rail &
Transmission
Lines
Airport
Tank
Farms
Telecom & Sewer
Logical Interdependency
17
No direct physical, cyber or geographic connection
Seasonal weather conditions
Human decisions/habitual
behaviors
Public Policy (i.e. environmental
regulations)
Economic Impacts:
Government Regulations
• consumer prices
• utility companies
External market prices
Lack of investments to meet
growing demand
(i.e. 2001 California
Energy Crisis)
Illustrative Petroleum Dependencies
Three Effects of Interdependency Failures
Common cause failure
– A disruption of two or more
infrastructures at the same time because of a common
cause
Cascading failure
– A disruption in one infrastructure
causes a disruption in a second infrastructure
Escalating failure
– A disruption in one infrastructure
exacerbates a disruption of a second infrastructure
Private
Microwave
Network
Generating
Plant
Transmission
Substation
Distribution
Substation
Commercial
Loads
Industrial
Loads
Control
Center
Transportation
Loads
Disruptions Could CASCADECASCADE
Through the Electric Infrastructure
12
3
Public Networks
Private
Microwave
Network
Generating
Plant
Transmission
Substation
Distribution
Substation
Commercial
Loads
Industrial
Loads
Control Center
Transportation
Loads
Disruptions Could ESCALATEESCALATE
(Increase) Repair and Restoration Times
3
Repair Crews
DELAY
Public Networks
1
2
1
■
Agriculture/Food
■
Water
■
Public Health
■
Emergency Services
■
Defence Industrial Base
■
Information Technology
■
Telecommunications
Critical Infrastructure Sectors
■
Energy
■
Transportation Systems
■
Banking and Finance
■
Chemical
■
Postal and Shipping
■
National Monuments and Icons
Key Resources
■
Commercial Nuclear Reactors
■
Dams
■
Government Facilities
■
Commercial Facilities
Multiple Infrastructures Need to be Considered*
*Homeland Security Presidential Directive 7
Significant Electric Power Interdependencies
Nuclear Power Plants
Cooling Water –
controlled shutdown within one
day
Transmission
–
sudden loss of transmission
capacity can cause plant shutdown
Process Control ‐
will shut down (if possible)
Fossil‐Fuel Power Stations
Fuel Supply – may reduce or shut down power
plant
Cooling Water, Transmission , Process Control –
as above
Transmission
Telecommunication – important for substation
and dispatch center
operations
Distribution
Similar to Transmission
Significant Commercial Building Interdependencies
Utilities
Electric Power – most large commercial
buildings have single distribution circuit
from single utility substation
Potable Water – many buildings have only
one source of potable water, typically
supplied by municipality, inadequate on‐
site water storage
Sewer – may require building evacuation
if shut down
Telecommunications ‐
only if no
redundant external sources are
unavailable
Check for redundancy and emergency backup
capability
25
Interdependencies Can be Considered at Multiple Levels