Risks of Terrorism to Information Technology and to Critical Interdependent Infrastructures

Chittester Clyde G. and Haimes Yacov Y.
Additional contact information
Chittester Clyde G.: Software Engineering Institute, Carnegie Mellon University
Haimes Yacov Y.: University of Virginia

Journal of Homeland Security and Emergency Management, 2004, vol. 1, issue 4, 22

Abstract: Coupled with the improved economic efficiency that information technology (IT) has generated are the adverse national impacts. A markedly increased reliance on IT and on the Internet has increased the complexity of our information systems because of the added interconnectedness and interdependencies between and among the infrastructures. This reliance has reduced the operational buffer zone in most infrastructures because of the ever-increasing adherence to the "just-in-time" philosophy as a vehicle for cost reduction and efficient operation, and it has enhanced accessibility of would-be terrorists to our telecommunications, defense, banking and financial institutions, as well as to other critical infrastructures.When the operability of IT-based controls and equipment is affected by acts of terrorism, then the performance of critical interdependent infrastructures such as railroads, electric power grids, or oil and gas pipelines is profoundly affected. Such information technology includes supervisory control and data acquisition (SCADA) systems, the global positioning system (GPS), and satellites.A detailed discussion is presented on the SCADA system and its use by railways. Hierarchical holographic modeling (HHM) and control objectives for information and related technology (CobiT) are introduced and used to identify sources of risk to SCADA systems in the railroad sector. The vulnerabilities to terrorist attacks of IT, SCADA, GPS, and satellites are explored. The risk assessment and risk management process is demonstrated on a railway system. In quantifying the probability of an attack, the intent and capabilities of terrorists are used as surrogates. The following terms are defined: vulnerability, threat, risk, intent, and capability.Given the growing interdependency among our critical infrastructures and sectors of the economy, increasing Internet capability and user reliance on it, and on commercial-off-the shelf (COTS) products, SCADA, geographical positioning systems (GPS), and satellites systems, the trade-offs between efficiency (reliance on technology) and reliability, availability, and security may have to be reevaluated, and appropriate risk assessment and management strategies must be developed.

Keywords: Risk assessment; Risk management; SCADA; Terrorism; Railways; HHM; CobiT; Information technology; Internet; COTS; GPS; Satellites (search for similar items in EconPapers)
Date: 2004
References: Add references at CitEc
Citations:

Downloads: (external link)
https://doi.org/10.2202/1547-7355.1075 (text/html)
For access to full text, subscription to the journal or payment for the individual article is required.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bpj:johsem:v:1:y:2004:i:4:p:22:n:7

Ordering information: This journal article can be ordered from
https://www.degruyter.com/journal/key/jhsem/html

DOI: 10.2202/1547-7355.1075

Access Statistics for this article

Journal of Homeland Security and Emergency Management is currently edited by Irmak Renda-Tanali

More articles in Journal of Homeland Security and Emergency Management from De Gruyter
Bibliographic data for series maintained by Peter Golla ().