DEFINE central topics: Critical infrastructures interdependencies Marcelo Masera Joint Research Centre DEFINE workshop November 2002, Pisa

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 2 Origin: CIP policies, not technical Dependency: –“A linkage or connection between two infrastructures, through which the state of one infrastructure influences or is correlated to the state of the other”. Rinaldi, Peerenboom, Kelly, “Critical Infrastructure Interdependencies” (IEEE Control Systems Magazine, Dec 01) According to this definition dependencies are not predominantly a dependability issue. –“Influences…” –“Is correlated…” A vague concept

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 3 “Everything is interdependent..” As a consequence, everything depends on almost everything else… But without any consideration of their criticality – no links to faults, errors, failures! For instance: –“An infrastructure has a cyber interdependency if its state depends on information transmitted through the information infrastructure”. Rinaldi et al.

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 4 Interdependency pathologies Some linkages among systems (structural interconnections, behavioural interactions, functional couplings) are related to the creation and manifestation of faults, errors and failures. Characteristic: –The pathology chain develops across systems: fault in system A, failure in system B These are dependability- and risk-relevant “dependencies”

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 5 Infrastructure interdependencies  Infrastructure interdependencies are a main concern:  Potential impact on critical services  Complex phenomena: non-linearity, hidden vulnerabilities, unforeseen emergent behaviour…  Many factors: technical, organisational, human  No proven systematic approach yet

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 6 ExampleExample Infrastructure Alfa (IA) has a dependency on the Information Infrastructure (II): –An information asset of IA flows through II –A fault in II provokes an error (e.g. delay) –This error provokes a failure in IA Infrastructure Alfa Information Infrastructure Information asset Fault (e.g. scarce bandwidth) Failure (e.g. service unavailability) Error (e.g. signal delay)

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 7 Peculiarity of (inter)dependencies FaultErrorFailure Occurs in system B Might occur in system A or B Occurs in system A The pathology of interdependencies cuts across system boundaries

DEFINE workshop, Pisa, November 2002 JOINT RESEARCH CENTRE M. Masera 8 Tasks for DeFINE 1.Identification and characterization of interdependencies –Inventory of real world cases (power, health, finance…) –Follow on from I3V & STRIVE communities 2.Dependability foundations for infrastructure interdependencies: –Attributes (reliability, availability, confidentiality, integrity…) –Threats (fault, errors, failures); Design faults, human- machine interactions, physical… –Failure pathologies (dormancy, activation, propagation, causation, service interfaces …) 3. Applicability of dependability means: –Prevention, tolerance, removal, forecasting 4. Applicability of dependability & risk assessment technologies: –Methods, techniques, tools