1. Information Survivability Control Systems Earl Crane 95-750 Security Architecture and Analysis Thursday, September 07, 2000

2. Overview  Threats & Failures  Reduce Losses  Design Space  US Payment system example  Insights

3. Threats  Threats –Disruption –Natural disaster –Accidents –Malicious attacks  Increased reliance on information systems  COTS reliability and security

4. Failures  Infrastructure provides a service stream over time  Failure is a loss of value over time  Cost of disruption is increasing over time

5. Reduce Loss  Information system –Efficiency –Service stream interruption –Design Space

6. Design Space  Adaptive –Continue providing control  Decentralized –Autonomous operation if separated  Hierarchical –Tactical decisions

7. U.S. Payment System

8. One level of control Control System Control System Control System Control System Branch Bank Branch Bank Branch Bank Feedback to higher levels

9. Types of attacks  Single attack  Regional Attack  Widespread attack  Response is to shut down node

10. Insights  Reconfiguration  Legacy systems  Control system vulnerability  Speed  Probabilistic control system