1. Internet Security and Implications on Transportation Systems 1 Yan Chen Department of Electrical Engineering and Computer Science Northwestern University Lab for Internet & Security Technology (LIST) http://list.cs.northwestern.edu

2. Outline  Internet Threat Landscape  Security regulations  System Diagnosis

3. Access Networks Core Networks The Current Internet: Connectivity and Processing Transit Net Private Peering NAP Public Peering PSTN Regional Wireline Regional Voice Cell Cable Modem LAN Premises- based WLAN Premises- based Operator- based H.323 Data RAS Analog DSLAM H.323

4. The Spread of the Sapphire/Slammer SQL Worm

5. Evolution of Botnets Motivation change in computer hacking – Vandalism  Financial gains – Loss of $67.2 billion (2006 figure)

6. Botnet Architecture Botmaster Bot Recruiting Bot

7. Attack Behaviors r Stealing personal information m Keylogger and Network sniffer used on compromised systems to spy on users and compile personal information r Phishing and spam proxy m Aggregated computing power and proxy capability allow spammers to impact larger groups without being traced. r Distributed Denial of Service (DDoS) m Impair or eliminate availability of a network to extort or disrupt business

8. 8 eCrime Market Operation Raw MaterialsGoal Market S S S Buy, Sell, & Trade Wealth Goods(Re)Application

9. 9 Sensitive Data and Market Significance Credit Card #s SSNs Bank Account #s Percentage of Labeled Data Sensitive Data Type

11. r Cyber spies have penetrated the U.S. electrical grid and left behind software programs that could be used to disrupt the system. r Transportation systems (air, truck, bus) the next? m Next generation 9/11 without suicide bombers!

12. Security Regulations r Business and security compliance is top-of-mind for executives r Protecting sensitive business & customer data is the key focus of regulatory compliance requirement

13. Business Impact of Lack of Compliance r Direct financial ramifications m FTC fines m Compensation payout to customers m Cost of external security audits m Lost customer confidence r Research shows substantial indirect costs associated with brand damage

14. Do We Have Any Security Regulations for Transportation Systems? r E.g., any FAA rules?

15. r Many applications & services m Traffic monitoring, authentication, command & control, etc. r Critical for running business r Large enterprise networks m 1,000s network applications m 1,000s staffs in IT support m $$ millions of dollars spent every year Transportation Control System Management & Diagnosis