C Y B E R S E C U R I T Y Johnson CYBERSECURITY Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare The World Economic Forum regards the threat of cyber attack as one of the top fve global risks confronting nations of the world today. Cyber attacks are increasingly targeting the core functions of the economies in nations throughout the world. The threat to attack critical infrastructures, disrupt critical services, and induce a wide range of damage is becoming more diffcult to defend against. This book examines the current cyber threat landscape and discusses the strategies being used by governments and corporations to protect against these threats. CYBERSECURITY The book frst provides a historical reference, detailing the emergence of viruses, worms, malware, and other cyber threats that created the need for the cybersecurity feld. It then discusses the P r o t e c t i n g C r i t i c a l I n f r a s t r u c t u r e s vulnerabilities of our critical infrastructures, the broad arsenal of cyber attack tools, and the various engineering design issues involved in protecting our infrastructures. It goes on to cover cyber f r o m C y b e r A t t a c k a n d C y b e r W a r f a r e intelligence tactics, recent examples of cyber confict and warfare, and the key issues in formulating a national strategy to defend against cyber warfare. The book also discusses how to assess and measure the cost of cybersecurity. It examines the many associated cost factors and presents the results of several important industry-based economic studies of security breaches that have occurred within many nations. The book concludes with a look at future trends in cybersecurity. It discusses the potential impact of industry-wide transformational changes, such as virtualization, social media, cloud computing, structured and unstructured data, big data, and data analytics. Features: • Examines the threat spectrum of cyberspace attacks and cyber weapons • Defnes the arsenal of cyber tools and new sophisticated attacks • Discusses the need for an architecture of cloud computing for cyber and counter intelligence • Emphasizes the Department of Defense’s role and the expansion of new mission forces to battle in cyberspace • Covers the US and international legal aspects of cybersecurity • Describes the diffculty of calculating the costs of defending against cyber attacks Edited by K 2 3 2 6 3 Thomas A. Johnson 6 0 0 0 B r o k e n S o u n d P a r k w a y , N W S u i t e 3 0 0 , B o c a R a t o n , F L 3 3 4 8 7 7 1 1 T h i r d A v e n u e a n i n f o r m a b u s i n eN2s ePs wa r Yko Srqk u, aNrYe ,1 M0 0i l1t7o n P a r k w w w . c r c p r e s s . c o m A b i n g d o n , O x o n O X 1 4 4 R N ,w U Kw w . c r c p r e s s . c o m CYBERSECURITY CYBER- SECURITY Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare CYBER- SECURITY Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare Edited by Thomas A. Johnson Webster University St. Louis, Missouri, USA Boca Raton London New York CRC Press is an imprint of the Taylor & Francis Group, an informa business CRC Press Taylor & Francis Group 6000 Broken Sound Parkway NW, Suite 300 Boca Raton, FL 33487-2742 © 2015 by Taylor & Francis Group, LLC CRC Press is an imprint of Taylor & Francis Group, an Informa business No claim to original U.S. Government works Version Date: 20150206 International Standard Book Number-13: 978-1-4822-3923-2 (eBook - PDF) This book contains information obtained from authentic and highly regarded sources. Reasonable efforts have been made to publish reliable data and information, but the author and publisher cannot assume responsibility for the validity of all materials or the consequences of their use. The authors and publishers have attempted to trace the copyright holders of all material reproduced in this publication and apologize to copyright holders if permission to publish in this form has not been obtained. If any copyright material has not been acknowledged please write and let us know so we may rectify in any future reprint. Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmitted, or utilized in any form by any electronic, mechanical, or other means, now known or hereafter invented, including photocopying, microfilming, and recording, or in any information stor- age or retrieval system, without written permission from the publishers. For permission to photocopy or use material electronically from this work, please access www.copy- right.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that pro- vides licenses and registration for a variety of users. For organizations that have been granted a photo- copy license by the CCC, a separate system of payment has been arranged. Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identification and explanation without intent to infringe. Visit the Taylor & Francis Web site at http://www.taylorandfrancis.com and the CRC Press Web site at http://www.crcpress.com For her sage counsel, generous advice, and assistance, this book is gratefully dedicated to my wife, Colleen Rose Johnson. Contents Preface ix Acknowledgments xi Editor xiii Contributors xv 1 Historical Reference Points in the Computer Industry and Emerging Challenges in Cybersecurity 1 THOMAS A. JOHNSON 2 Critical Infrastructures, Key Assets: A Target- Rich Environment 33 THOMAS A. JOHNSON 3 Protection and Engineering Design Issues in Critical Infrastructures 67 FRED COHEN 4 Cyber Intelligence, Cyber Conficts, and Cyber Warfare 155 THOMAS A. JOHNSON 5 Cybersecurity: A Primer of U.S. and International Legal Aspects 199 JULIE LOWRIE 6 Economic Cost of Cybersecurity 255 THOMAS A. JOHNSON 7 Cybersecurity Threat Landscape and Future Trends 287 THOMAS A. JOHNSON vii