Www.oregoninfragard.org. OverviewOverview Critical InfrastructuresCritical Infrastructures Presidential Decision Directive 63Presidential Decision Directive.

www.oregoninfragard.orgwww.oregoninfragard.org

OverviewOverviewOverviewOverview

• Critical Infrastructures Critical Infrastructures • Presidential Decision Directive 63Presidential Decision Directive 63• The National InfraGard ProgramThe National InfraGard Program• Our Local ChapterOur Local Chapter• Oregoninfragard.orgOregoninfragard.org• An Infragard CaseAn Infragard Case• Cyber Crime IssuesCyber Crime Issues

• Critical Infrastructures Critical Infrastructures • Presidential Decision Directive 63Presidential Decision Directive 63• The National InfraGard ProgramThe National InfraGard Program• Our Local ChapterOur Local Chapter• Oregoninfragard.orgOregoninfragard.org• An Infragard CaseAn Infragard Case• Cyber Crime IssuesCyber Crime Issues

Critical InfrastructuresCritical InfrastructuresCritical InfrastructuresCritical Infrastructures

Services so vital that their Services so vital that their incapacity or destruction would incapacity or destruction would have a debilitating impact on the have a debilitating impact on the defense or economic security of defense or economic security of the United States.the United States.

- - Executive Order 13010Executive Order 13010

Services so vital that their Services so vital that their incapacity or destruction would incapacity or destruction would have a debilitating impact on the have a debilitating impact on the defense or economic security of defense or economic security of the United States.the United States.

- - Executive Order 13010Executive Order 13010

Sectors ExpandedSectors Expanded GeneralGeneral AgricultureAgriculture Banking and FinanceBanking and Finance Chemical Chemical Defense Industrial BaseDefense Industrial Base Emergency ServicesEmergency Services Energy Energy FoodFood GovernmentGovernment Information and TelecommunicationsInformation and Telecommunications Postal and ShippingPostal and Shipping Public HealthPublic Health Transportation and Port FacilitiesTransportation and Port Facilities WaterWater

Why InfraGard?Why InfraGard?Why InfraGard?Why InfraGard?

• Presidential Decision Directive 63Presidential Decision Directive 63

• Vulnerability information not always being Vulnerability information not always being shared by owners and operatorsshared by owners and operators

• Cyber & physical Infrastructure expertise Cyber & physical Infrastructure expertise is identified and enhanced is identified and enhanced

• Relationships are established between Relationships are established between private industry and government agenciesprivate industry and government agencies

• Presidential Decision Directive 63Presidential Decision Directive 63

• Vulnerability information not always being Vulnerability information not always being shared by owners and operatorsshared by owners and operators

• Cyber & physical Infrastructure expertise Cyber & physical Infrastructure expertise is identified and enhanced is identified and enhanced

• Relationships are established between Relationships are established between private industry and government agenciesprivate industry and government agencies

INFRAGARDINFRAGARD

Dedicated to increasing the security of the Dedicated to increasing the security of the critical infrastructures of the United States of critical infrastructures of the United States of America.America.

Purpose & Objective: “To increase security Purpose & Objective: “To increase security of the US infrastructures through ongoing of the US infrastructures through ongoing exchanges of information relevant to exchanges of information relevant to infrastructure protection and through infrastructure protection and through education, outreach & similar efforts to education, outreach & similar efforts to increase awareness of infrastructure increase awareness of infrastructure protection issues.”protection issues.”

INFRAGARD INFRAGARD (Continued)(Continued)

Goal: “Enable information flow so that Goal: “Enable information flow so that the owners and operators of the owners and operators of infrastructures can better protect infrastructures can better protect themselves and so the US Government themselves and so the US Government can better discharge it’s law can better discharge it’s law enforcement and national security enforcement and national security objectives.”objectives.”

MembershipMembership

• Interest in infrastructure protectionInterest in infrastructure protection

• Commitment to participate and assist Commitment to participate and assist other membersother members

• Pledge to maintain sensitive Pledge to maintain sensitive information as confidentialinformation as confidential

• Signing of membership agreementsSigning of membership agreements

• Forum for members to communicate Forum for members to communicate • Prompt dissemination of threat warningsPrompt dissemination of threat warnings• Help in protecting computer systems Help in protecting computer systems • Education and training on infrastructure Education and training on infrastructure

vulnerabilitiesvulnerabilities• A community that shares information in a A community that shares information in a

trusted environmenttrusted environment

Membership BenefitsMembership Benefits

InfraGard ServicesInfraGard ServicesInfraGard ServicesInfraGard Services

• Secure Web SiteSecure Web Site• Secure Web SiteSecure Web Site

• Alert NetworkAlert Network• Alert NetworkAlert Network

• Chapter ActivitiesChapter Activities• Chapter ActivitiesChapter Activities

• Help DeskHelp Desk• Help DeskHelp Desk

Chapter ActivitiesChapter Activities• Members establish relationships with Members establish relationships with

others interested in Infrastructure others interested in Infrastructure

Protection Protection • Chapter committees are formed to Chapter committees are formed to

focus on local issuesfocus on local issues• Seminars, conferences, Seminars, conferences,

and training sessions are and training sessions are

offered offered

• Members establish relationships with Members establish relationships with

others interested in Infrastructure others interested in Infrastructure

Protection Protection • Chapter committees are formed to Chapter committees are formed to

focus on local issuesfocus on local issues• Seminars, conferences, Seminars, conferences,

and training sessions are and training sessions are

offered offered

Secure Web Site FeaturesSecure Web Site Features Secure Web Site FeaturesSecure Web Site Features • Real-time information on infrastructure Real-time information on infrastructure

protectionprotection• Infrastructure-related informationInfrastructure-related information• Chapter informationChapter information• Chat and conference capability Chat and conference capability • Links to other security sitesLinks to other security sites• Archives of intrusion Archives of intrusion

incidents incidents • Original research on Original research on

security issuessecurity issues

• Real-time information on infrastructure Real-time information on infrastructure protectionprotection

• Infrastructure-related informationInfrastructure-related information• Chapter informationChapter information• Chat and conference capability Chat and conference capability • Links to other security sitesLinks to other security sites• Archives of intrusion Archives of intrusion

incidents incidents • Original research on Original research on

security issuessecurity issues

Alert NetworkAlert NetworkAlert NetworkAlert Network• Member sends an encrypted Member sends an encrypted

message to the FBI via E-mailmessage to the FBI via E-mail• FBI distributes sanitizedFBI distributes sanitized

description to otherdescription to othermembersmembers

• FBI analyzes incidentFBI analyzes incident• Trends identified and reportedTrends identified and reported• Investigation opened ifInvestigation opened if

appropriateappropriate

• Member sends an encrypted Member sends an encrypted message to the FBI via E-mailmessage to the FBI via E-mail

• FBI distributes sanitizedFBI distributes sanitizeddescription to otherdescription to othermembersmembers

• FBI analyzes incidentFBI analyzes incident• Trends identified and reportedTrends identified and reported• Investigation opened ifInvestigation opened if

appropriateappropriate

Oregon Chapter of InfraGardOregon Chapter of InfraGard

Quarterly Chapter MeetingsQuarterly Chapter Meetings– Next Meeting September 2006 – Wireless SecurityNext Meeting September 2006 – Wireless Security

Membership Alliance – Incorporated as a Membership Alliance – Incorporated as a Non-ProfitNon-Profit– Separate from any government entitySeparate from any government entity– Own Board of DirectorsOwn Board of Directors– Designed to better meet the needs of the local Designed to better meet the needs of the local

communitycommunity– Sponsorship and donations allow for better Sponsorship and donations allow for better

service to the membershipservice to the membership– Rental space for meetings, meeting materials, Rental space for meetings, meeting materials,

quality speakers quality speakers

A Membership AllianceA Membership Alliance

www.oregoninfragard.orwww.oregoninfragard.orgg

www.oregoninfragard.cowww.oregoninfragard.commwww.oregoninfragard.nwww.oregoninfragard.netet

The Oregon Chapter of InfraGard The Oregon Chapter of InfraGard Website…Website…

Links to the website’s

many features• Our Mission Statement

• The InfraGard Board Members

• Member Sign Up Form

• Benefits of Membership

• History of InfraGard

• Online Forum

Quick Links to other

Features

• Homeland Security Homepage

• Current National Membership

• A List of All InfraGard Chapters

• NIPC Homepage

• Our Oregon InfraGard Incident Report (under construction)

• The FBI Homepage

How to Contact Us

• Our Mailing Address

• Email Address

• Phone Numbers

Current Homeland Security Advisory Level

Up-to-date News And Announcements From the Oregon

Chapter

A Place for New Members to Join

Web Site HelpWeb Site Help

Visit the Visit the “Ask Tech Support”“Ask Tech Support” Forum Forum OnlineOnline

Or Call SA Phil R. Slinkard at Or Call SA Phil R. Slinkard at 503.528.3344503.528.3344

InfraGard Case ReferralInfraGard Case Referral

540,000 Volts540,000 Volts

540,000 Volts…540,000 Volts…

October 20, 2003October 20, 2003– A man is seen with a large ratchet wrench A man is seen with a large ratchet wrench

removing bolts from a transmission tower removing bolts from a transmission tower in Klamath County, Oregonin Klamath County, Oregon

– 7 Bolts of the 11 Bolts are removed7 Bolts of the 11 Bolts are removed– Man flees in a pickup truck once he is Man flees in a pickup truck once he is

spottedspotted

540,000 Volts…540,000 Volts…

Tower Remains StandingTower Remains Standing The InfraGard Program is contactedThe InfraGard Program is contacted

– InfraGard alerts state and local authoritiesInfraGard alerts state and local authorities– InfraGard Contacts Power Transmission InfraGard Contacts Power Transmission

CompaniesCompanies– Coordination is begun with the Electricity Coordination is begun with the Electricity

Sector – Information Sharing & Analysis Sector – Information Sharing & Analysis (ES-ISAC)(ES-ISAC)

– Further information sharing with Further information sharing with authorities in Washington, Idaho, Oregon authorities in Washington, Idaho, Oregon and Californiaand California

540,000 Volts…540,000 Volts…

A comprehensive search of A comprehensive search of transmission towers beginstransmission towers begins

Several other towers found sabotagedSeveral other towers found sabotaged– Towers located in Washington, Oregon Towers located in Washington, Oregon

and Californiaand California

540,000 Volts…540,000 Volts…

ES-ISAC issues several reports and ES-ISAC issues several reports and holds several industry conference calls holds several industry conference calls to alert officials of the developing to alert officials of the developing incidents.incidents.

Suggested protective measures issued Suggested protective measures issued by InfraGard and ES-ISACby InfraGard and ES-ISAC

Quick actions resulted in no loss of Quick actions resulted in no loss of towers or transmission capabilitiestowers or transmission capabilities

Michael Devlyn PoulinMichael Devlyn Poulin

““I guess I’m trying to alert the fact that you don’t throw stones I guess I’m trying to alert the fact that you don’t throw stones from glass houses”from glass houses”

Michael Devlyn PoulinMichael Devlyn Poulin

27 Months in Prison27 Months in Prison

$37,000 in Restitution$37,000 in Restitution

ConclusionConclusion• The threats to our nation’s infrastructures The threats to our nation’s infrastructures

are real and growingare real and growing

• There is a need for a greaterThere is a need for a greateralliance between public andalliance between public andprivate sectorsprivate sectors

• Cooperation and informationCooperation and informationsharing will enhance ansharing will enhance aneffective responseeffective response

www.oregoninfragard.orgwww.oregoninfragard.org