book

Critical Infrastructure Security

Name: Critical Infrastructure Security
Author: Soledad Antelada Toledano
ISBN: 9781837635030

by Soledad Antelada Toledano

May 2024

Beginner to intermediate

270 pages

7h 53m

English

Packt Publishing

Read now

Unlock full access

Critical Infrastructure Security
ContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Part 1: Introduction to Critical Infrastructure and Cybersecurity Concepts
Chapter 1: What is Critical Infrastructure?
Chemical sectorImpact of a compromised chemical sectorCyberattack scenarios in the chemical sectorCommercial facilities sectorImpact of a compromised commercial facilities sectorCyberattack scenarios in the commercial facilities sectorCommunications sectorImpact of a compromised communications sectorCyberattack scenarios in the communications sectorCritical manufacturing sectorImpact of a compromised critical manufacturing sectorCyberattack scenarios in the critical manufacturing sectorDams sectorImpact of a compromised dams sectorCyberattack scenarios in the dams sectorDefense industrial base sectorImpact of a compromised defense industrial base sectorCyberattack scenarios in the defense industrial base sectorEmergency services sectorImpact of a compromised emergency services sectorCyberattack scenarios in the emergency services sectorEnergy sectorImpact of a compromised energy sectorCyberattack scenarios in the energy sectorPreventing and mitigating cyberattacksFinancial services sectorImpact of a compromised financial services sectorCyberattack scenarios in the financial services sectorFood and agriculture services sectorImpact of a compromised food and agriculture sectorCyberattack scenarios in the food and agriculture services sectorGovernment facilities sectorImpact of a compromised government facilities sectorCyberattack scenarios in the government facilities sectorHealthcare and public health sectorImpact of a compromised healthcare and public health sectorCyberattack scenarios in the healthcare and public health sectorInformation technology sectorImpact of a compromised information technology sectorCyberattack scenarios in the information technology sectorNuclear reactors, materials, and waste sectorImpact of a compromised nuclear reactor sectorCyberattack scenarios in the nuclear reactor sectorTransportation system sectorImpact of a compromised transportation system sectorCyberattack scenarios in the transportation system sectorWater and wastewater sectorImpact of a compromised water and wastewater sectorCyberattack scenarios in the water and wastewater sectorSummaryReferences
Chapter 2: The Growing Threat of Cyberattacks on Critical Infrastructure
A brief history of CI protection and attacksThe impact of the 9/11 attacks on CISame old attacks throughout historyExecutive order 13010Evolution of a nation’s CI protection postureEvolution of cyberattacks and countermeasuresThe state of CI in the face of cyberattacksCOVID-19-period cyberattack landscapeThe Colonial Pipeline ransomware attackAttacks in 2023National cybersecurity strategiesSummaryReferences
Chapter 3: Critical Infrastructure Vulnerabilities
Understanding the difference between threat, vulnerability, and riskVulnerabilityThreatRiskVulnerability assessmentScope definitionAsset inventoryThreat modelingVulnerability scanningManual assessmentRisk prioritizationRemediation planningVerification and validationOngoing monitoringReporting and documentationSecurity vulnerability management life cycleDiscoveryAssessment and prioritizationNotificationRemediation or mitigationVerification and validationMonitoring and continuous assessmentEnd of lifeMost common vulnerabilities and threats in CIInadequately secured industrial control systems (ICS)Common vulnerabilities in industrial control systems (ICS)Ransomware targeting CISupply chain attacks on CI componentsLegacy systems and lack of security updatesPhysical security breachesInternet of Things (IoT) vulnerabilitiesSummaryReferences
Part 2: Dissecting Cyberattacks on CI
Chapter 4: The Most Common Attacks Against CI
DDoS attackVolumetric attacksReflection and amplification attacksResource depletion attacksProtocol-based attacksApplication layer attacksRansomware attackInfectionEncryptionRansom noteRansom paymentData recoveryNo guarantee of data recoverySupply chain attackScope of attackAttack vectorStealth and persistenceData exfiltrationSoftware supply chain attacksHardware supply chain attacksImpersonation and trust exploitationMitigation challengesNotable examplesAPTPhishingThe anatomy of a phishing attackImpersonation and trust exploitationPretexting and urgencyMimicking authority figuresDeception and lureMalicious links and attachmentsWhy do phishing tactics persist?Common unpatched vulnerabilitiesThe significance of timely patchingSummaryReferences
Chapter 5: Analysis of the Top Cyberattacks on Critical Infrastructure
Stuxnet attack on Iran’s nuclear program (2010)Ukrainian power grid attack (2015)Dyn attack on internet infrastructure (2016)WannaCry (2017)NotPetya (2017)SolarWinds attack (2020)Colonial Pipeline ransomware attack (2021)SummaryReferences
Part 3: Protecting Critical Infrastructure

Chapter 6: Protecting Critical Infrastructure – Part 1
Network security and continuous monitoringNetwork segmentationAccess controlIntrusion detection and prevention systemsVirtual private networks (VPNs)Security audits and penetration testingHoneypots and deception technologiesZero trust architectureSecurity monitoringSecurity policy and frameworksNIST cybersecurity frameworkISO/IEC 27001 and ISO/IEC 27002NERC CIPThe Department of Homeland Security (DHS) critical infrastructure security frameworkHITRUST CSFCIS ControlsSummaryReferences
Chapter 7: Protecting Critical Infrastructure – Part 2
Systems security and endpoint protectionAntivirus/antimalware protectionFirewallsHost IDS/IPSEDRApplication securitySecure software development life cycleCode reviews and static analysisAuthentication and authorization hardeningData encryptionSession managementSecurity patching and updatesPenetration testingLogging and monitoringIR and data recoverySummaryReferences
Chapter 8: Protecting Critical Infrastructure – Part 3
Incident response (IR)IR historyIR planningSecurity culture and awarenessInterconnectivity of critical infrastructureCascading effects of a cyberattackResponsibility to safeguard critical assetsInsider threatsTeamwork and information sharingExecutive ordersExecutive Order 13010 – Critical Infrastructure Protection (1996)Executive Order 13231 – Critical Infrastructure Protection in the Information Age (2001)Homeland Security Presidential Directive 7 (HSPD-7) – Critical Infrastructure Identification, Prioritization, and Protection (2003)Executive Order 13636 – Improving Critical Infrastructure Cybersecurity (2013)Presidential Policy Directive 21 (PPD-21) – Critical Infrastructure Security and Resilience (2013)Executive Order 13873 – Securing the Information and Communications Technology and Services Supply Chain (2019)Executive Order 13870 – America’s Cybersecurity Workforce (2019)Executive Order 13865 – Coordinating National Resilience to Electromagnetic Pulses (2019)Executive Order 13905 – Strengthening National Resilience through Responsible Use of Positioning, Navigation, and Timing Services (2020)Executive Order 14028 – Improving the Nation’s Cybersecurity (2021)Executive Order 14110 – Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (2023)SummaryReferences
Part 4: What’s Next
Chapter 9: The Future of CI
Increment and innovation of cybersecurity measuresMore robust encryption implementationHuman factor and trainingPPPsResilience and recoveryIntegration of IoT and smart technologiesSupply chain securityAdvancements in threat detection technologiesGreater regulatory and compliance requirementsCross-sector collaborationSummaryConclusionReferences
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from Critical Infrastructure Security

7 Protecting Critical Infrastructure – Part 2

This chapter follows the foundational groundwork established in the previous chapter, where we explored network security, continuous monitoring, and the development of security policies and frameworks. This chapter takes a deeper dive, building on how to protect critical infrastructure comprehensively, covering systems security and endpoint protection. It aims to provide an extensive understanding of how to safeguard the various components of critical infrastructure against sophisticated and evolving cyber threats. Emphasizing the importance of robust endpoint security, the effectiveness of antivirus and antimalware solutions, endpoint detection and response (EDR), and several aspects of application ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781837635030

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Critical Infrastructure Security

by Soledad Antelada Toledano

7

Protecting Critical Infrastructure – Part 2

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.