Rebuilding the New Orleans Region: Infrastructure Systems and Technology Innovation Forum

Rebuilding the New Orleans Region:Infrastructure Systems and Technology Innovation Forum

Bernard L. Malone IIITechnical Manager Wireless NetworksContributor to The President’s NSTAC ECITF Task ForcePrivate Sector Advisor – U.S. State Department Delegation OASANSI & IEEE Panel PresenterWork of the Bell Labs Network Reliability & Security Office

September 26, 2006

Perspectives from Critical Industry-Government Fora Wireless Emergency Response Team

(WERT) - saving lives

FCC Mandates for Outage Reporting - collaborative industry analysis

FCC Network Reliability & Interoperability Council (NRIC) - Best Practices

IEEE Technical Committee on Communications Quality & Reliability (CQR) - insights

The President’s National Security Telecommunications Advisory Committee (NSTAC) - priorities

www.nric.org

www.atis.org

www.wert-help.org

WWIRELESS IRELESS EEMERGENCY MERGENCY RRESPONSE ESPONSE TTEAMEAM

C Q Rwww.comsoc.org/~cqr

www.ncs.gov

Preface to A Fundamental Lesson of 9-11

“Terrorism depends on surprise.”

“Failure of imagination.”

[Emphasis Added] National Strategy for Homeland Security, Office of Homeland Security, July 2002, Executive Summary, pages viii.[Emphasis Added] 9/11 Commission Report. 2004. pages 336-339.

Do you want to be responsible for this??

http://911research.wtc7.net/post911/commission/report.html

Some Definitions

Vulnerability- A characteristic of any aspect of the communications infrastructure that renders it, or some portion of it, susceptible to damage or compromise

Threat- Anything with the potential to damage or compromise the communications infrastructure or some portion of it

FCC NRIC VI Homeland Security Physical Security Final Report, December 2003.

Some Characteristics of Ts and Vs

Vulnerabilities (intrinsic) finite fixed and well known only way threats can impact

Threats ~ infinite in number knowledge value is fleeting each has permutations

FCC NRIC VI Homeland Security Physical Security Final Report, December 2003.

A Fundamental Lesson of 9-11

. . . is the need to identify and address vulnerabilities – independent of threat knowledge

• Does NOT mean that you abandon threat and risk analysis

• It means you MUST supplement it, balance it, integrate

. . . this means more science and engineering competencies are needed

8 Ingredients of Communications Infrastructure

HardwareHardwareSoftwareSoftware

EnvironmentEnvironmentPayloadPayload

NetworksNetworks PolicyPolicyHumanHumanPowerPower

CCOMMUNICATIONSOMMUNICATIONS I INFRASTRUCTURENFRASTRUCTURE

TRANSPORTATION ENERGY

FINANCIAL

PUBLIC HEALTH

LAW ENFORCEMENT

Other InfrastructuresOther Infrastructures

. . . Example of Intrinsic VulnerabilitiesHardware

The President’s National Security Telecommunications Advisory Committee (NSTAC) Next Generation Networks

(NGN) Task Force Report, March, 2006

Integrated V-T-BP FrameworkTwo approaches can be integrated

Vuln

erab

ilitie

sVu

lner

abili

ties

ThreatsThreats

EnvironmentEnvironmentaccessibleidentifiablephysical damage

HardwareHardwarevibration / shocktemperature extremeselectromagnetic radiation

PolicyPolicyforeign national ownership

elec

trom

agne

tic

wea

pons

ther

mal

nuc

lear

w

ar

hija

ckin

g of

a

netw

ork

X-111X-999

X-555

X-123X-789

Best PracticesBest Practices that

a) address VulnerabilitiesVulnerabilities

b) address ThreatsThreats

by preventing the exercise of vulnerabilities, and/or mitigating the impact should a vulnerability be exercised

X-222

The Network Reliability Steering Committee's mission is to analyze the industry's major network outages in order to: identify trends make recommendations aimed at improving network reliability make the results publicly available

. . . in order to help ensure a continued high level of reliability of the nation’s public networks.

www.atis.org

Network Reliability Steering Committee Mission

2004 Annual Report

www.atis.org

Network Reliability Steering CommitteeOutage Deep Dive Analysis

NRIC History & Focus

20051992

NRC I NRC II NRIC III NRIC IV NRIC V NRIC VI

Homeland Security

Packet SwitchingY2KInteroperability

(Telecom Act of ’96)Reliability

NRIC VII

Emergency Services

Historic Analogy

Systematic Vulnerability Assessment

Best Practice

Development

NRIC Best Practices - Overview Most authoritative guidance in the world for communications

industry – network reliability, network security, physical security, disaster recovery

Offer what no one company’s SMEs can offer Intended to be implemented voluntarily NRIC VII includes a focus on reliability of Wireless Networks ~800 Best Practices:

Network Reliability

Physical Security

Cyber Security

Disaster Recovery

Public Safety

Throughout LifecycleThroughout Lifecycle

PlanningPlanning

& Design& Design

Provisioning& Installation

Operation & Administration

Repair &Decommission

All ElementsAll Elements







CCOMMUNICATIONSOMMUNICATIONS IINFRASTRUCTURENFRASTRUCTURE

VP VP VP

C E O

ThroughoutThroughoutOrganization Organization Functions & Functions &

LevelsLevels

Across Network Across Network TypesTypes

User-Friendly Access User-Friendly Access with Keywordswith Keywords

Wide Applicability

Best Practices, Standards or Regulations ? Regulations

– legal process; technical expertise may be compromised– speed: S L O W t o a d j u s t– posture: mandated behavior

Standards

– competitive process; influence of strongest competitor wins– speed: M E D I U M t o a d j u s t– posture: ranges from voluntary to mandated

Best Practices

– expert process; expertise and experience are trump – speed: FAST to adjust– posture: implementation is voluntary

K. F. Rauscher

November 2004

C Q R C Q R C Q R

IEEECOMMUNICATIONS SOCIETY

3 Options to Avoid Communications Service Outages

timetime

Commercial Power Outage Duration

Com

mun

icat

ions

Net

wor

k B

ack-

Up

Pow

er C

apab

ility

Minimal

Calibrated

Infinite

Power

Restoration

Enhanced

Calibrated

Example of Proactive Posture in Addressing Emergency Power Gap

K. F. Rauscher

November 2004

C Q R C Q R C Q R

IEEECOMMUNICATIONS SOCIETY

The Wagon Wheel

water transportation

government

natio

nal m

on.

finan

ce

manufa

cturin

g

first responders

health care

ENERGY COMMUNICATIONS

E & C

C Q RC Q RC Q RC Q R

WERT Mission

1. Lead advanced wireless expertise, technology and infrastructure support for Search & Rescue operations in national crises

2. Conduct focused research and report key learnings to industry, government and the public

3. Provide emergency guidance for 911 centers, law enforcement, wireless service providers and family members

From time to time, WERT may also use its unique wireless capabilities and expertise to address other critical needs of society.


WERT – Pictures form Ground Zero Search and Rescue


Hurricane Katrina WERT Activation

Bell Labs Personnel deployed to New Orleans with the BSR six days after Katrina BSR mounted on USCG Helicopter for SAR Operations Unique stand-alone network established over the city Over 50 GSM cell phones identified and contacted Coast Guard observers say: “BSR could be a critical tool in Search and Rescue”


9/11 WERT Participants include . . .AG Communications Systems

American TowerArch Wireless

Argonne National LaboratoryAT&T

AT&T WirelessBellSouth

CTIACingular WirelessEDO Corporation

EricssonFBIFCC

IEEE CQR Lucent Technologies Bell Labs

Spectrasite Communications Sprint PCSState of NJ

Telcordia TechnologiesT-Mobile

Triton PCSTruePosition

Union CellularU.S. Department of EnergyU.S. Marshals Service, ESU

U.S. Secret ServiceUTstarcom

VerizonVerizon Wireless

Wheat International

Metrocall

Motorola

NCS / NCC

NRSC

NRIC

Nextel

NYPD

NYC Mayor’s Office

Nortel Networks

Pennsylvania State Police

PCIA

Qualcomm

Qwest Wireless

SkyTel


Katrina/Rita WERT Participants include . . .


Argonne National Labratory

AT&T

BellSouth

Cingular

Congressman Ed Royce

CTIA

Dept Homeland Security

Ericsson

FCC

FEMA

Louisiana Public Svc. Comm.

Louisiana Parish Govts.

Louisiana State Police

Lucent Technologies

MCI

Motorola

NCS/NCC

NRSC

NRIC

Nortel Networks

Qualcomm

Sprint/Nextel

T-Mobile

Telcordia Technologies

TruePosition

University of Texas

U.S. Coast Guard

U.S. Department of Energy

U.S. Department of Justice

U.S. Marshals Service

U.S. Northern Command

Verizon

Verizon Wireless

WERT Vision

Connect the best minds and resources

of the wireless industry

to the most vital needs of its subscribers.


“Take Away’s” A Fundamental Lesson of 9-11 is the need to identify and address vulnerabilities – independent of threat knowledge

An optimum balance of core competencies requires more integration of the science and engineering disciplines into rebuilding planning, investments and policies

The private sector is very motivated from business and/or human interest reasons

– Expertise– Flexibility– Speed– Innovation

Rebuilding the New Orleans Region: Infrastructure Systems and Technology Innovation Forum

Documents

govnetwork reliability

office of homeland security

network reliabilitymake

national strategy

vs vulnerabilities

exercise of vulnerabilities

commission report

compromise threat