New Critical Infrastructure Protection Strategies

Document Type : Original Article

Authors

1 tabriz university

2 IHU

Abstract

Nowadays, critical infrastructures are more vulnerable to natural events, malicious physical and cyber-based attacks or intrusions. Since most societal functions rely heavily on critical infrastructures’ functionality, disturbances in any of them, can yield fatal consequences for interdependent infrastructures and subsequently, for the depending society. Therefore, critical infrastructure protection (CIP) has become an important research field in this century. In our country, to strengthen critical infrastructures and reduce the likelihood of willful attacks, possible vulnerabilities and negative consequences, it is imperative to consider the requirement of passive defense. Hence, critical infrastructure protection against any types of threats, as one of the goals of passive defense, would be achieved by developing and expanding appropriate strategies and guidelines. In this paper existing methodologies and national strategies for critical infrastructure protection is described. Resilience as a novel concept in common practices and strategies that have been applied in various countries to establish national protection plans, is investigated. In the concluding remarks, a set of strategic goals and also the most important challenges and requirements for developing critical infrastructure protection frameworks with a futuristic outlook are proposed. Thus, comparative research methodology is used to analyze the primary requirements of our national critical infrastructure protection strategy which could be counted as an effective step in achieving passive defense objectives.

Keywords


 [1]            F. Petit, D. Verner, J. Phillips, and L. P. Lewis, “Critical Infrastructure Protection and Resilience Integrating Interdependencies,” In Security by Design, A. J. Masys, Ed., Cham., Switzerland: Springer, 2018.##
 [2]            R. Ghaffarpour and S. Zamanian, “Determining the Importance of Implementing Passive Defense in 400 KV High Voltage Posts Using Multiple Attribute Decision-Making Methods,” Passive Defense Quarterly, vol. 9, no. 1, pp. 1-8, 2018. (In Persian)##
 [3]            Y. Wang, C. Chen, J. Wang, and R. Baldick, “Research on Resilience of Power Systems Under Natural Disasters—A Review,” IEEE Trans. Power Systems, vol. 31, no. 2, pp. 1604-1613, 2016.##
[4]        جلالی، غلامرضا، چهارگفتار در باب پدافند غیرعامل، قم، محدث، 1391##.
 
 [5]            B. Allenby and J. Fink, “Toward Inherently Secure and Resilient Societies,” Science, vol. 309, pp. 1034-1036, 2005.
 [6]            T. C. Sharkey, B. Cavdaroglu, H. Nguyen, J. Holman, J. E. Mitchell, and W. A. Wallace, “Interdependent Network Restoration: On the Value of Information-Sharing,” Eur. J. Oper. Res., vol. 244, pp. 309-321, 2015.##
 [7]            R. Francis and B. Bekera, “A Metric and Frameworks for Resilience Analysis of Engineered and Infrastructure Systems,” Reliab. Eng. Syst. Safe., vol. 121, pp. 90-103, 2014.##
 [8]            A. Wenger and V. Mauer, Eds., International CIIP Handbook 2006: An Inventory of 20 National and 6 International Critical Information Infrastructure Protection Policies, Zurich, Switzerland: ETH (Swiss Federal Institute of Technology), vol. 1, 2006.##
 [9]            The Report of the President’s Commission on Critical Infrastructure Protection, “Critical Foundations: Protecting America’s Infrastructures,” Washington, DC, 1997.##
[10]            G. M. Brown, M. Carlyle, J. Salmeron, and K. Wood, “Defending Critical Infrastructure,” Interfaces, vol. 36, no. 6, pp. 530–544, 2006.##
[11]            C. Pursiainen, “The Challenges for European Critical Infrastructure Protection,”  J. Eur. Integr., vol. 31, no. 6, pp. 721-739, 2009.##
[12]            P. W. Parfomak, “Vulnerability of Concentrated Critical Infrastructure: Background and Policy Options,” CRS Report for Congress, Congressional Research Service, Washington, DC, USA, 2007.##
[13]            T. D. O'Rourke, “Critical Infrastructure, Interdependencies and Resilience,”                 Bridge-Washington-National Academy of Engineering, vol. 37, no.1, pp. 22-29, 2007.##
[14]            Commission of the European Communities, “Proposal for a Directive of the Council on Identification and Designation of European Critical Infrastructure and the Assessment of the Need to Improve Their Protection,” Brussels, 2006.##
[15]            European Council, “On the Identification and Designation of European Critical Infrastructures and the Assessment of the Need to Improve Their Protection,” Official Journal of the European Union, Council Directive 2008/114/EC, Dec. 2008.##
[16]            M. Lindström and S. Olsson, “The European Programme for Critical Infrastructure Protection,” in Crisis Management in the European Union: Cooperation in the Face of Emergencies, S. Olsson, Ed., Heidelberg, Berlin: Springer, 2009.##
[17]            C. Pursiainen and P. Gattinesi, “Towards Testing Critical Infrastructure Resilience,” EUR—Scientific and Technical Research reports, European Commission, Joint Research Center, Luxembourg, Rep. EUR 26575 EN, Feb. 2014.##
[18]            J. D. Moteff, “Critical infrastructure resilience: the evolution of policy and programs and issues for Congress,” Washington DC, USA, CRS Report no. R42683, 2012. [Online]. Available: https://cyberwar.nl/d/R42683.pdf##
[19]            Department of Homeland Security, “NIPP 2013: Partnering for Critical Infrastructure Security and Resilience,” United States Department of Homeland Security (DHS), Washington, DC, USA, 2013. [Online]. Available: https://www.dhs.gov/publication/nipp-2013-partnering-critical-infrastructure-security-and-resilience
[20]            European Commission, “Commission Staff Working Document on the Review of the European Programme for Critical Infrastructure Protection (EPCIP),” Brussels, Belgium, Rep. SWD (2012) 190 final, 2012. [Online]. Available: https://ec.europa.eu/home-affairs/sites/homeaffairs/files/pdf/policies/crisis_and_terrorism/epcip_swd_2012_190_final.pdf##
[21]            Unite Nations General Assembly, “Report of the Open-Ended Intergovernmental Expert Working Group on Indicators and Terminology Relating to Disaster Risk Reduction,” UNISDR, New York, NY, USA, 2016.##
[22]            A. Boin and A. McConnell, “Preparing for critical infrastructure breakdowns: the limits of crisis management and the need of resilience,” J. Conting. Crisis Man., vol. 15, pp. 50–59, 2007.##
[23]            E. Zio, “Challenges in the Vulnerability and Risk Analysis of Critical Infrastructures,” Reliab. Eng. Syst. Safe., vol. 152, pp. 137-150, 2016.##
[24]            J. Landstedt and P. Holmström, “Electric Power Systems Blackouts and the Rescue Services: The Case of Finland,” Emergency Services College of Finland and State Provincial Office of Western Finland, Finland, 2007.##
[25]            N. Petrakos and P. Kotzanikolaou, “Methodologies and Strategies for Critical Infrastructure Protection,” In Critical Infrastructure Security and Resilience, D. Gritzalis, M. Theocharidou, and G. Stergiopoulos, Eds., Cham, Switzerland: Springer, 2019.##
[26]            White House, “Presidential Decision Directive 63: Protecting America’s Critical Infrastructures,” Washington, DC, USA, 1998. [Online]. Available: http://www.fas.org/irp/offdocs/pdd-63.htm.##
[27]            White House, “Presidential Policy Directive (PPD) 21: Critical Infrastructure Security and Resilience, Washington, DC, USA, 2013. [Online]. Available: https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil##
[28]            The Danish Emergency Management Agency, “National Risk Profile,” DEMA, Denmark, 2013. [Online]. Available: https://brs.dk/viden/publikationer/Documents/National_Risk_Profile_(NRP)_-_English-language_version.pdf##
[29]            The Danish Emergency Management Agency, “Crisis Management in Denmark,” DEMA, Denmark, 2015. [Online]. Available: https://brs.dk/viden/publikationer/Documents/Crisis%20Management%20in%20Denmark_UK.pdf##
[30]            The Danish Emergency Management Agency, “National Risk Profile for Denmark” DEMA, Denmark, 2018. [Online]. Available: https://brs.dk/viden/publikationer/Documents/Danes%20perception%20of%20risk.pdf##
[31]            The Norwegian Directorate for Civil Protection, “National Risk Analysis 2014,” DSB, Norway, 2014. [Online]. Available: https://www.dsb.no/globalassets/dokumenter/rapporter/nrb_2014_english.pdf##
[32]            The Norwegian Directorate for Civil Protection, “Vital Functions in Society,” DSB, Norway, 2017. [Online]. Available: https://www.dsb.no/globalassets/dokumenter/rapporter/kiks-ii_english_version.pdf##
[33]            C. Pursiainen, Ed., “Towards a Baltic Sea Region Strategy in Critical Infrastructure Protection,” Nordic Centre for Spatial Development (Nordrgio), Stockholm, Sweden, Nordrgio Rep. 2007:5, 2007. [Online]. Available:
https://www.divaortal.org/smash/get/diva2:700420/FULLTEXT01.pdf##
[34]            The Swedish Civil Contingencies Agency, “Annual Report 2011: Sweden´s National Platform for Disaster Risk Reduction,” MSB, Karlstad, Sweden, 2011. [Online]. Available: https://www.msb.se/siteassets/dokument/publikationer/english-publications/annual-report-2011-swedens-national-platform-for-disaster-reduction.pdf##
[35]            The Swedish Civil Contingencies Agency, “Strategic challenges for societal security,” MSB, Karlstad, Sweden, 2013. [Online]. Available: https://www.msb.se/siteassets/dokument/publikationer/english-publications/strategic-challenges-for-societal-security.pdf##
[36]            The Swedish Civil Contingencies Agency, “Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure,” MSB, Karlstad, Sweden, 2014. [Online]. Available: https://www.msb.se/siteassets/dokument/publikationer/english-publications/action-plan-for-the-protection-of-vital-societal-functions--critical-infrastructure.pdf##
[37]            The Swedish Civil Contingencies Agency, “Making Cities Resilient in Sweden,” MSB, Karlstad, Sweden, 2015. [Online]. Available: https://www.msb.se/siteassets/dokument/publikationer/english-publications/resilient-cities-in-sweden-six-inspiring-examples-on-drr-action.pdf##
[38]            The Swedish Civil Contingencies Agency, “Swedish National Risk Assessment 2012,” MSB, Karlstad, Sweden, 2013. [Online]. Available:  https://www.msb.se/RibData/Filer/pdf/26621.pdf##
[39]            The Swedish Civil Contingencies Agency, “A Summary of Risk Areas and Scenario Analyses 2012–2015,” MSB, Karlstad, Sweden, 2016. [Online]. Available: https://www.msb.se/siteassets/dokument/publikationer/english-publications/a-summary-of-risk-areas-and-scenario-analyses-20122015.pdf##
[40]            Ministry of The Interior Finland, “National Risk Assessment 2015,” Ministry of the Interior Publication, Helsinki, Finland, 2016. [Online]. Available: http://julkaisut.valtioneuvosto.fi/handle/10024/64973##
[41]            Australian Government, “Critical Infrastructure Resilience Strategy,” Commonwealth of Australia, 2010.  [Online]. Available: https://www.tisn.gov.au/Documents/Australian+Government+s+Critical+Infrastructure+Resilience+Strategy.pdf##
[42]            Australian Government, “Critical Infrastructure Resilience Strategy: Plan,” Commonwealth of Australia, 2015. [Online]. Available: https://cicentre.gov.au/document/P16S011##
[43]            Australian Government, “Critical Infrastructure Resilience Strategy: Policy Statement,” Commonwealth of Australia, 2015.##
[44]             [Online]. Available: https://cicentre.gov.au/document/P16S013##
  • Receive Date: 11 July 2019
  • Revise Date: 11 November 2019
  • Accept Date: 17 February 2020
  • Publish Date: 21 November 2020