emerging threats 3

sunny33

Chapter4Diversitypdf.pdf

Home >Business & Finance homework help >Management homework help >emerging threats 3

Chapter 4

Diversity

Cyber Attacks Protecting National Infrastructure, 1st ed.

C hapter 4 –

D iversity

Introduction • The securing any set of national assets should

include a diversity strategy • The deliberate introduction of diversity into national

infrastructure to increase security has not been well explored

• Two system are considered diverse if their key attributes differ

• Diversity bucks the trend to standardize assets for efficiency's sake

Fig. 4.1 – Diverse and nondiverse components through attribute

differences

C hapter 4 –

D iversity

C hapter 4 –

D iversity

Diversity and Worm Propagation • Worm propagation is an example of an attack that

relies on a nondiverse target environment • Worm functionality in three steps:

– Step #1: Find a target system on the network for propagation of worm program

– Step #2: Copy program to that system – Step #3: Remotely execute program – Repeat

• Diversity may be expensive to introduce, but saves money on response costs in the long run

C hapter 4 –

D iversity

Fig. 4.2 – Mitigating worm activity through diversity

C hapter 4 –

D iversity

Desktop Computer System Diversity • Most individual computers run the same operating

system software on a standard processor platform and browse the Internet through one or two popular search engines with the one of only a couple browsers

• The typical configuration is a PC running Windows on an Intel platform, browsing the Internet with Internet Explorer, searching with Google

• This makes the average home PC user a highly predictable target

C hapter 4 –

D iversity

Fig. 4.3 – Typical PC configuration showing diversity

C hapter 4 –

D iversity

Desktop Computer System Diversity • Three Considerations

– Platform costs – Application interoperability – Support and training

• Ultimate solution for making desktops more secure involves their removal – Not a practical solution

• Cloud computing may offer home PC users a diverse, protected environment

C hapter 4 –

D iversity

Diversity Paradox of Cloud Computing

C hapter 4 –

D iversity

Fig. 4.4 – Spectrum of desktop diversity options

C hapter 4 –

D iversity

Fig. 4.5 – Diversity and attack difficulty with option of removal

• Modern telecommunications consist of the following two types of technologies – Circuit-switched – Packet-switched

• When compared to one another, these two technologies automatically provide diversity

• Diversity may not always be a feasible goal – Maximizing diversity may defend against large-scale

attacks, but one must also look closely at the entire architecture

C hapter 4 –

D iversity

Network Technology Diversity

• Any essential computing or networking asset that serves a critical function must include physical distribution to increase survivability

• Physical diversity has been part of the national asset system for years – Backup center diversity – Supplier/vendor diversity – Network route diversity

C hapter 4 –

D iversity

Physical Diversity

C hapter 4 –

D iversity

Fig. 4.8 – Diverse hubs in satellite SCADA configurations

• A national diversity program would coordinate between companies and government agencies – Critical path analysis – Cascade modeling – Procurement discipline

C hapter 4 –

D iversity

National Diversity Program