Assessing and augmenting SCADA cyber security: a survey of techniques

SCADA systems monitor and control critical infrastructures of national importance such as power generation and distribution, water supply, transportation networks, and manufacturing facilities. The pervasiveness, miniaturisations and declining costs of internet connectivity have transformed these systems from strictly isolated to highly interconnected networks. The connectivity provides immense benefits such as reliability, scalability and remote connectivity, but at the same time exposes an otherwise isolated and secure system, to global cyber security threats. This inevitable transformation to highly connected systems thus necessitates effective security safeguards to be in place as any compromise or downtime of SCADA systems can have severe economic, safety and security ramifications. One way to ensure vital asset protection is to adopt a viewpoint similar to an attacker to determine weaknesses and loopholes in defences. Such mind sets help to identify and fix potential breaches before their exploitation. This paper surveys tools and techniques to uncover SCADA system vulnerabilities. A comprehensive review of the selected approaches is provided along with their applicability

Human dimensions of global environmental change: A review of frameworks and research gaps.

This review of current knowledge in, and development of, priorities for research into the human dimensions of global environmental change has been conducted to assist the Foundation for Research Science and Technology to formulate their research needs agenda. An overview of the emergence of the human dimension of the global environmental change research field is used as a prelude to a review of the international literature on frameworks for conducting human dimensions research. The terminology used in the human dimension field is diverse. An attempt is therefore made to consolidate the myriad of definitions for key concepts, in order to form a basis for human dimensions research in New Zealand and build a platform for the remainder of this report. Three disciplinary areas of academic inquiry were explored in the context of human dimensions of global environmental change research: economics, law and biological sciences. These disciplinary perspectives are reviewed through the international literature and in a New Zealand context. A conceptual framework for research into the human dimensions of global environmental change is provided based on the knowledge-base developed from the both international and New Zealand research. Core concepts, such as found in multidisciplinary and transdisciplinary research are reviewed in historical context to form the basis for a specific research framework for New Zealand. Some general needs for research are derived from the New Zealand framework. The remainder of this report details the methods used for drawing out expert opinion on the priorities for research on the human dimensions of global environmental change in the context of information, knowledge and method. Thirty-eight interviews and two hui were conducted and 254 research needs defined by questions were obtained. A modified Delphi technique was applied to the questions and prioritised lists of responses are provided. The final list Provides European/Pakeha and Māori perspectives. Divergence and convergence between the European/Pakeha and Māori responses is provided, as well as justification for the prioritisation stance that is taken. This research had four outputs: A conceptual framework for considering the human dimensions of global environmental changes and research contributions; A description of the gaps in knowledge that impede effective response to global change and provisional research needs: one for New Zealand generally, and one on Māori in particular; A network of end-users and research providers that are cognisant of, and contributors to, the human dimensions research assessment; A set of priority research needs pertaining to the human dimensions of global environmental change, in a form suitable for use by FRST

Conceptualizing human resilience in the face of the global epidemiology of cyber attacks

Computer security is a complex global phenomenon where different populations interact, and the infection of one person creates risk for another. Given the dynamics and scope of cyber campaigns, studies of local resilience without reference to global populations are inadequate. In this paper we describe a set of minimal requirements for implementing a global epidemiological infrastructure to understand and respond to large-scale computer security outbreaks. We enumerate the relevant dimensions, the applicable measurement tools, and define a systematic approach to evaluate cyber security resilience. From the experience in conceptualizing and designing a cross-national coordinated phishing resilience evaluation we describe the cultural, logistic, and regulatory challenges to this proposed public health approach to global computer assault resilience. We conclude that mechanisms for systematic evaluations of global attacks and the resilience against those attacks exist. Coordinated global science is needed to address organised global ecrime

The adaptation continuum: groundwork for the future

The focus of the program was to understand the challenges posed by climate change and climate variability on vulnerable groups and the policies needed to support climate adaptation in developing countries. The aim of the book is to share this experience in the hope that it will be helpful to those involved in shaping and implementing climate change policy

Cross-layer system reliability assessment framework for hardware faults

System reliability estimation during early design phases facilitates informed decisions for the integration of effective protection mechanisms against different classes of hardware faults. When not all system abstraction layers (technology, circuit, microarchitecture, software) are factored in such an estimation model, the delivered reliability reports must be excessively pessimistic and thus lead to unacceptably expensive, over-designed systems. We propose a scalable, cross-layer methodology and supporting suite of tools for accurate but fast estimations of computing systems reliability. The backbone of the methodology is a component-based Bayesian model, which effectively calculates system reliability based on the masking probabilities of individual hardware and software components considering their complex interactions. Our detailed experimental evaluation for different technologies, microarchitectures, and benchmarks demonstrates that the proposed model delivers very accurate reliability estimations (FIT rates) compared to statistically significant but slow fault injection campaigns at the microarchitecture level.Peer ReviewedPostprint (author's final draft

Recommender Thermometer for Measuring the Preparedness for Flood Resilience Management

A range of various thermometers and similar scales are employed in different human and resilience management activities: Distress Thermometer, Panic Thermometer, Fear Thermometer, fire danger rating, hurricane scales, earthquake scales (Richter Magnitude Scale, Mercalli Scale), Anxiety Thermometer, Help Thermometer, Problem Thermometer, Emotion Thermometer, Depression Thermometer, the Torino scale (assessing asteroid/comet impact prediction), Excessive Heat Watch, etc. Extensive financing of the preparedness for flood resilience management with overheated full-scale resilience management might be compared to someone ill running a fever of 41°C. As the financial crisis hits and resilience management financing cools down it reminds a sick person whose body temperature is too low. The degree indicated by the Recommender Thermometer for Measuring the Preparedness for Flood Resilience Management with a scale between Tmin=34,0° and Tmax=42,0° shows either cool or overheated preparedness for flood resilience management. The formalized presentation of this research shows how changes in the micro, meso and macro environment of resilience management and the extent to which the goals pursued by various interested parties are met cause corresponding changes in the “temperature” of the preparedness for resilience management. Global innovative aspects of the Recommender Thermometer developed by the authors of this paper are, primarily, its capacity to measure the “temperature” of the preparedness for flood resilience management automatically, to compile multiple alternative recommendations (preparedness for floods, including preparing your home for floods, taking precautions against a threat of floods, retrofitting for flood-prone areas, checking your house insurance; preparedness for bushfires, preparedness for cyclones, preparedness for severe storms, preparedness for heat waves, etc.) customised for a specific user, to perform multiple criteria analysis of the recommendations, and to select the ten most rational ones for that user. Across the world, no other system offers these functions yet. The Recommender Thermometer was developed and fine-tuned in the course of the Android (Academic Network for Disaster Resilience to Optimise educational Development) project