Caroline Butler
October 26, 2023
What are the vulnerabilities associated with critical infrastructure systems?
There are numerous vulnerabilities associated with critical infrastructure systems. However, all of the vulnerabilities that are associated with critical infrastructure systems are classified into three categories. The three categories that these vulnerabilities are sorted into consist of Natural, Human-Caused, and Accidental or Technical. (Tal, 2018). The first category is called Natural. The category Natural is made up of catastrophic weather events. These catastrophic weather events include Earthquakes, Tsunamis, Hurricanes, Floods, Fires, Snowstorms etc. According to Tal, “Natural – earthquakes, tsunamis, land shifting, volcanic eruptions, extreme weather (hurricanes, floods, draught), fires.” (Tal, 2018). Catastrophic weather events can be vulnerabilities associated with critical infrastructure systems due to how powerful these natural disasters can be. An example of a catastrophic weather event affecting critical infrastructure systems is heavy rainfall and heavy wind speeds. Heavy periods of rainfall, also known as torrential rainfall, or wind gusts can lead to wind damage of critical infrastructure systems. According to the Cybersecurity & Infrastructure Security Agency, “Severe weather is considered to be an intense variation of a regionally common weather event, such as a heavy rainfall event or damaging winds. Extreme weather identifies the trend of more severe weather events both in frequency and intensity, such as torrential rain (excessive rain periods where over one month of rain can fall during a single storm) or record breaking peak gusts with widespread wind damage.” (Extreme Weather and Climate Change). With the concept of climate change that will proceed to intensify catastrophic weather events, it is imperative that critical infrastructure systems prepare for these potential catastrophic weather events, such as revisiting building codes, regional damages, and limiting materials. According to the Cybersecurity & Infrastructure Security Agency, “As climate change continues to amplify extreme weather events, critical infrastructure sites will need to revisit building codes, material limitations, and regional damages during past severe events to address areas at greatest immediate risk.” (Extreme Weather and Climate Change). The second category is called Human-Caused. The category Human-Caused is made up of human-induced crimes. These human-induced crimes consist of Terrorism, Product Tampering, Theft, etc. According to Tal, “Human-Caused – terrorism, rioting, product tampering, explosions and bombing, theft, financial crimes, economic espionage.” (Tal, 2018). Human-induced crimes can be vulnerabilities associated with critical infrastructure systems due to how serious these human-induced crimes can harm societies. An example of a human-induced crime is Terrorism. Terrorism is a human-induced crime that can interrupt the everyday flow of the use of critical infrastructure systems. It is crucial that states prepare for both catastrophic weather events and human-induced crimes. According to the Cybersecurity & Infrastructure Security Agency, “Rather than focusing on one type of threat or hazard at a time, such as hurricanes or terrorism, States should identify all threats and hazards that pose the greatest risks to critical infrastructure, which allows for more effective and efficient planning and resource allocation.” (A Guide to Critical Infrastructure Security and Resilience, 2019). The third category is called Accidental or Technical. The category Accidental or Technical is made up of accidental or technical mistakes. These accidental or technical mistakes are made up of Power-Grid Failures, Safety-Systems Failures, Infrastructure and Hazardous Material Failures and Accidents, Water-Mains Ruptures, etc. According to Tal, “Accidental or Technical – infrastructure and hazardous material failures and accidents, power-grid failures, water-treatment facilities failures, water-mains ruptures, safety-systems failures and a host of other disasters of omission and/or commission.” (Tal, 2018). Accidental or Technical Mistakes can be vulnerabilities associated with critical infrastructure systems due to systems not taking the necessary precautions to ensure that there is no serious damage. An example of an accidental or technical mistake are Safety-Systems Failures. Car accidents are classified under Safety-Systems Failures. A solution to help mitigate the rate of car accidents is to implement high-risk roadway features. According to the U.S. Department of Transportation Federal Highway Administration, “A systemic approach to safety involves widely implemented improvements based on high-risk roadway features correlated with specific severe crash types. The approach helps agencies broaden their traffic safety efforts at little extra cost.” (Systemic Approach to Safety). Although there are various vulnerabilities associated with critical infrastructure systems, SCADA systems can play a role in combating these risks.
How can SCADA applications mitigate these risks?
SCADA Applications can be used to help reduce these risks. The letters SCADA stands for Supervisory Control and Data Acquisition Systems. SCADA Systems are in connection with Industrial Control Systems. Industrial Control Systems can control numerous infrastructure processes, facility-based processes, or industrial processes. According to the article entitled SCADA Systems, “Supervisory control and data acquisition – SCADA refers to ICS (industrial control systems) used to control infrastructure processes (water treatment, wastewater treatment, gas pipelines, wind farms, etc), facility-based processes (airports, space stations, ships, etc,) or industrial processes (production, manufacturing, refining, power generation, etc).” (SCADA Systems). SCADA Systems are made up of systems that monitor sites and are scattered over large areas. According to the article entitled SCADA Systems, “SCADA refers to the centralized systems that control and monitor the entire sites, or they are the complex systems spread out over large areas.” (SCADA Systems). SCADA Systems can help reduce catastrophic weather events. The aftermath of catastrophic weather events can consist of flooding hazards and runoff stormwater. A cloud-based SCADA System can be used by scientists and engineers to monitor draining levels and hazardous floods. As the runoff stormwater starts to appear online, the SCADA equipment will be able to report any potential maintenance issues. Due to the cloud-based SCADA System, online users can now access this crucial information. According to Balsom, “A Supervisory Control and Data Acquisition system connects engineers, scientists and planners to monitoring equipment that can give them information about drainage levels, flooding hazards and water quality in real time. As runoff solutions come online, SCADA-connected equipment will be able to report maintenance issues and other alarms. With a cloud-based system, users can access all of this information from a safe location.” (Balsom, 2020). SCADA Systems can help reduce human-reduced crimes. A SCADA System can be used to implement the most promising Cybersecurity measures in place, such as in government agencies and organizations, to detect any hackers who can intrude on their control systems. This can result in Terrorism crimes being prevented. According to Kurii, “Due to this increase in demand and use of SCADA and ICS, it is crucial to have the best SCADA cyber security measures in place, especially since a large number of government agencies and organisations have encountered significant security challenges. Such issues include providing new technologies and partners with a high level of access into an organisation’s systems, introducing the potential for outside hackers who can infiltrate their control systems.” (Kurii, 2023). Lastly, SCADA Systems can help reduce the amount of Safety-System Failures. Car accidents are under the category of Safety-System Failures. Car accidents can happen due to motorists speeding, running through red traffic lights, not paying attention, etc. SCADA Systems can be used to monitor traffic lights, as well as other systems that individuals use on a daily basis. With the SCADA Systems being implemented to ensure that traffic lights are functioning properly at all times, it can help reduce the number of car accidents. According to the article entitled SCADA Systems, “SCADA systems also are used for monitoring and controlling physical processes, like distribution of water, traffic lights, electricity transmissions, gas transportation and oil pipelines and other systems used in the modern society. Security is extremely important because destruction of the systems would have very bad consequences.” (SCADA Systems). With the implementation of SCADA Systems, it can help reduce the number of vulnerabilities associated with critical infrastructure systems.
Conclusion
In conclusion, enacting SCADA Systems can help mitigate the vulnerabilities associated with critical infrastructure systems. The vulnerabilities associated with critical infrastructure systems consist of catastrophic weather events, human-induced crimes, and safety-system failures. To help reduce the repercussions of catastrophic weather events, such as flooding and runoff stormwater, a cloud-based SCADA System can be implemented. A cloud-based SCADA System that can be used by scientists and engineers to monitor any potential runoff stormwater due to flooding. If there are any draining issues, SCADA equipment then reports any maintenance issues that need to be addressed. Because this SCADA System is cloud-based, online users can access updates on the issues regarding maintenance issues. To help reduce the act of Terrorism, a SCADA System can be implemented. A SCADA System can be implemented in government agencies and organizations to detect potential hackers who intrude on their control systems. With executing this SCADA System, this can lower the chances of a Terrorism crime being executed. To help reduce the number of Safety-System Failures, a SCADA System can be implemented. A SCADA System can be implemented in traffic lights to ensure that the traffic lights are operating appropriately. This can result in the number of car accidents being lowered. Critical infrastructures systems are used everyday by society. With the execution of SCADA Systems, critical infrastructure systems can be operated safely and efficiently.
References
Balsom, P. (2020, October 1). Monitoring Storm Water Runoff With SCADA Systems. High Tide Technologies. https://htt.io/monitoring-storm-water-runoff-with-scada-systems/
Extreme Weather and Climate Change. Cybersecurity and Infrastructure Security Agency CISA. (n.d.). https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/extreme-weather-and-climate-change#:~:text=Droughts%20have%20become%20more%20frequent,millions%20of%20Americans%20depend%20upon.
A Guide to Critical Infrastructure Security and Resilience . Cybersecurity & Infrastructure Security Agency. (2019, November). https://www.cisa.gov/sites/default/files/publications/Guide-Critical-Infrastructure-Security-Resilience-110819-508v2.pdf?trk=public_post_comment-text
Kurii, Y. (2023, September 14). SCADA Cyber Security Threats and Countermeasures: Ultimate Checklist. ELEKS. https://eleks.com/blog/scada-cyber-security-threats-countermeasures/
SCADA Systems. (n.d.). https://www.scadasystems.net/
Systemic Approach to Safety. U.S. Department of Transportation Federal Highway Administration. (n.d.). https://highways.dot.gov/safety/data-analysis-tools/systemic#:~:text=A%20systemic%20approach%20to%20safety,efforts%20at%20little%20extra%20cost.
Tal, J. (2018, October 2). America’s Critical Infrastructure: Threats, Vulnerabilities and Solutions. Security Info Watch. https://www.securityinfowatch.com/access-identity/access-control/article/12427447/americas-critical-infrastructure-threats-vulnerabilities-and-solutions