Martti Lehto - Cyber Security : Critical Infrastructure Protection

This series publishes monographs and carefully edited books inspired by the thematic conferences of ECCOMAS, the European Committee on Computational Methods in Applied Sciences. As a consequence, these volumes cover the fields of Mathematical and Computational Methods and Modelling and their applications to major areas such as Fluid Dynamics, Structural Mechanics, Semiconductor Modelling, Electromagnetics and CAD/CAM. Multidisciplinary applications of these fields to critical societal and technological problems encountered in sectors like Aerospace, Car and Ship Industry, Electronics, Energy, Finance, Chemistry, Medicine, Biosciences, Environmental sciences are of particular interest. The intent is to exchange information and to promote the transfer between the research community and industry consistent with the development and applications of computational methods in science and technology.

Book proposals are welcome at

Eugenio Oate

International Center for Numerical Methods in Engineering (CIMNE)

Technical University of Catalunya (UPC)

Edificio C-1, Campus Norte UPC Gran Capitn

s/n08034 Barcelona, Spain

onate@cimne.upc.edu

www.cimne.com

or contact the publisher, Dr. Mayra Castro, mayra.castro@springer.com

Indexed in SCOPUS, Google Scholar and SpringerLink.

More information about this series at https://link.springer.com/bookseries/6899

This Springer imprint is published by the registered company Springer Nature Switzerland AG

The registered company address is: Gewerbestrasse 11, 6330 Cham, Switzerland

As much of the worldwide economy has moved into cyberspace, protecting and assuring information flows over these networks have become a priority. Most networks today rely on the successive discovery of vulnerabilities and deployment of patches to maintain security. Even after patching, new vulnerabilities are often introduced in successive releases and may even be introduced by the patches themselves. The proposed defensive cyber portfolio is largely focused on changing this paradigm through a variety of methods such as heterogeneity, formal methods proofs, secure code generation, and automation. Exploration of offensive methods is essential to expand and inform defensive work.

Many sources emerge as a significant cyberthreat on every aspect of individuals and states. The size and sophistication of the nations hacking capabilities have grown markedly over the last few years, and they have already penetrated well-defended networks while seized and destroyed sensitive data. We must anticipate that the cyberthreat may well begin to grow much more rapidly. The first requirement of developing a sound response is understanding the nature of the problem, which is the aim of this volume.

The standard approach for securing (critical) infrastructure over the past 50 years, classified as walls and gates, has failed. There is no longer any reason to believe that a system of barriers between trusted and untrusted components with policy-mediated pass-throughs will become more successful as the future unfolds. Within the security context, widely used traditional rule-based detection methodologies, including firewalls, signatures/patterns that govern IDS/IPS, and antivirus are irrelevant for the detection of new and sophisticated malware. Malware is masked as legitimate streams and penetrates every state-of-the-art commercial barrier on the market. In the current era of data deluge, protection against cyber-attacks/penetrations becomes more critical and requires sophisticated approaches.

In the cyber world, the most important threat focuses on critical infrastructure (CI). CI encompasses the structures and functions that are vital to societys uninterrupted functioning. It is comprised of physical facilities and structures as well as electronic functions and services.

The modern and efficient countermeasures against cyber-attacks need multidisciplinary scientific computing methods when we focus on the behavior of an actor from tactic, technique, and procedure (TTP) perspectives. A tactic is the broadest-level description of this behavior, while techniques give a more detailed description of behavior in the context of a tactic, and procedures are the narrowest-level, highly detailed description in the context of a technique. Computational science is a great tool to solve cyber security challenges.

In this edited volume, we have chosen contributors that will share their perspectives on cyber security in critical infrastructure from a broad perspective. This volume is focused on critical infrastructure protection. It is comprised of the latest research that researchers and scientists from different countries have discovered. The selected chapters reflect the essential contributions of these researchers and scientists who conducted a detailed analysis of the issues and challenges in cyberspace and provided novel solutions in various aspects. These research results will stimulate further research and studies in the cyber security community.

The content of this volume is organized into three parts. Part I is focused on the digital society. It addresses critical infrastructure and different forms of digitalization, such as strategic focus on cyber security, legal aspects on cyber security, citizens in digital society, and cyber security training. Part II is focused on the critical infrastructure protection in different areas of the critical infrastructure. It investigates the possibility of using new technologies to improve current cyber capability, as well as new challenges brought about by new technologies. Part III is focused on computational methods and applications in cyber environment.