Eric D. Knapp
Copyright
Acquiring Editor:Chris Katsaropoulos
Editorial Project Manager:Benjamin Rearick
Project Manager:Punithavathy Govindaradjane
Designer:Matthew Limbert
Syngress is an imprint of Elsevier
225 Wyman Street, Waltham, MA 02451, USA
Copyright 2013 Elsevier Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information about the Publishers permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency, can be found at our website: www.elsevier.com/permissions.
This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and experience broaden our understanding, changes in research methods or professional practices, may become necessary. Practitioners and researchers must always rely on their own experience and knowledge in evaluating and using any information or methods described herein. In using such information or methods they should be mindful of their own safety and the safety of others, including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in the material herein.
Library of Congress Cataloging-in-Publication Data
Application submitted
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the British Library
ISBN: 978-1-59749-998-9
Printed and bound in the United States of America
13 14 15 16 17 10 9 8 7 6 5 4 3 2 1
For information on all Syngress publications, visit our website at www.syngress.com
Acknowledgments
We would like to acknowledge those who helped us make Applied Cyber Security and the Smart Grid a reality. Foremost, our families, who put up with us during the extensive months of research and writing, late-night and early-morning phone calls across the ocean, and provided much-needed moral support along the way. Next come Ben Rearick, Chris Katsaropoulos, and the rest of the team at Syngress publishing for letting us write another book on Smart Grid cyber security; technical editor Joel Langill who went above and beyond the call of duty to keep us honest and technically accurate; and to Jennifer Byrne, who supported this effort above all else and provided valuable insight to the content.
We would also like to acknowledge and thank the SANS Institute, who were promoting SCADA and ICS security before it became popular; the ICSJWG for their continued efforts to educate the industry and improve industrial control system security; both NIST and the EU Smart Grids Coordination Group for helping to make sense of the spaghetti-mess that is the Smart Grid; and the various organizations who have made similar efforts to document best practices for Smart Grid cyber security and implement relevant standardswe owe a lot to all of the hard work that came before us, and we offer our utmost appreciation and respect in return.
About the Authors
Eric D. Knapp is a globally recognized expert in industrial control systems cyber security, and continues to drive the adoption of new security technology in order to promote safer and more reliable automation infrastructures. He first specialized in industrial control cyber security while at Nitrosecurity, where he focused on the collection and correlation of SCADA and ICS data for the detection of advanced threats against these environments. He was later responsible for the development and implementation of end-to-end ICS cyber security solutions for McAfee, Inc. in his role as Global Director for Critical Infrastructure Markets. He is currently the Director of Strategic Alliances for Wurldtech Security Technologies, where he continues to promote the advancement of embedded security technology in order to better protect SCADA, ICS and other connected, real-time devices.
He is a long-time advocate of improved industrial control system cyber security and participates in many Critical Infrastructure industry groups, where he brings a wealth of technology expertise. He has over 20 years of experience in Information Technology, specializing in industrial automation technologies, infrastructure security, and applied Ethernet protocols as well as the design and implementation of Intrusion Prevention Systems and Security Information and Event Management systems in both enterprise and industrial networks. In addition to his work in information security, he is an award-winning author of fiction. He studied at the University of New Hampshire and the University of London.
He can be found on Twitter @ericdknapp
Raj Samani is an active member of the Information Security industry, through involvement with numerous initiatives to improve the awareness and application of security in business and society. He is currently working as the VP, Chief Technical Officer for McAfee EMEA, having previously worked as the Chief Information Security Officer for a large public sector organization in the UK and was recently inducted into the Infosecurity Europe Hall of Fame (2012).
He previously worked across numerous public sector organizations, in many cyber security and research orientated working groups across Europe. Examples include the MiData Interoperability Board, as well as representing DIGITALEUROPE on the Smart Grids Reference Group established by the European Commission in support of the Smart Grid Mandate.
In addition, he is currently the Cloud Security Alliances Strategic Advisor for EMEA having previously served as the Vice President for Communications in the ISSA UK Chapter, where he presided over the award of Chapter Communications Programme of the Year 2008 and 2009, having previously established the UK mentoring programme. He is also on the advisory council for the Infosecurity Europe show, Infosecurity Magazine, and expert on both searchsecurity.co.uk, Infosec portal, and regular columnist on Computer Weekly. He has had numerous security papers published, and appeared on television (ITV and More4) commenting on computer security issues. He has also provided assistance in the 2006 RSA Wireless Security Survey and was part of the consultation committee for the RIPA Bill (Part 3).