Cyber-Physical Threat Intelligence for Critical Infrastructures Security: A Guide to Integrated Cyber-Physical Protection of Modern Critical Infrastructures

Modern critical infrastructures comprise of many interconnected cyber and physical assets, and as such are large scale cyber-physical systems. Hence, the conventional approach of securing these infrastructures by addressing cyber security and physical security separately is no longer effective. Rather more integrated approaches that address the security of cyber and physical assets at the same time are required. This book presents integrated (i.e. cyber and physical) security approaches and technologies for the critical infrastructures that underpin our societies. Specifically, it introduces advanced techniques for threat detection, risk assessment and security information sharing, based on leading edge technologies like machine learning, security knowledge modelling, IoT security and distributed ledger infrastructures. Likewise, it presets how established security technologies like Security Information and Event Management (SIEM), pen-testing, vulnerability assessment and security data analytics can be used in the context of integrated Critical Infrastructure Protection.

The novel methods and techniques of the book are exemplified in case studies involving critical infrastructures in four industrial sectors, namely finance, healthcare, energy and communications. The peculiarities of critical infrastructure protection in each one of these sectors is discussed and addressed based on sector-specific solutions.

The advent of the fourth industrial revolution (Industry 4.0) is expected to increase the cyber-physical nature of critical infrastructures as well as their interconnection in the scope of sectorial and cross-sector value chains. Therefore, the demand for solutions that foster the interplay between cyber and physical security, and enable Cyber-Physical Threat Intelligence is likely to explode. In this book, we have shed light on the structure of such integrated security systems, as well as on the technologies that will underpin their operation. We hope that Security and Critical Infrastructure Protection stakeholders will find the book useful when planning their future security strategies.

 

John Soldatos (http://gr.linkedin.com/in/johnsoldatos) holds a PhD in Electrical & Computer Engineering from the National Technical University of Athens (2000) and is currently Honorary Research Fellow at the University of Glasgow, UK (2014-present). He was Associate Professor and Head of the Internet of Things (IoT) Group at the Athens Information Technology (AIT), Greece (2006-2019), and Adjunct Professor at the Carnegie Mellon University, Pittsburgh, PA (2007-2010). He has significant experience in working closely with large multi-national industries (IBM Hellas, INTRACOM S.A, INTRASOFT International) as R&D consultant and delivery specialist, while being scientific advisor to high-tech startup enterprises, such as Innov-Acts Limited (Nicosia, Cyprus) and Innovation Sprint Sprl (Brussels, Belgium). Dr. Soldatos is an expert in Internet-of-Things (IoT) technologies and applications, including IoT's applications in smart cities, finance (Finance 4.0), and industry (Industry 4.0). Dr. Soldatos has played a leading role in the successful delivery of more than sixty (commercial-industrial, research, and consulting) projects, for both private & public sector organizations, including complex integrated projects. He is co-founder of the open source platform OpenIoT (https://github.com/OpenIotOrg/openiot) and of the Edge4Industry (www.edge4industry.eu) community. He has published more than 180 articles in international journals, books, and conference proceedings. He has also significant academic teaching experience, along with experience in executive education and corporate training. Dr. Soldatos is regular contributor in various international magazines and blogs, on topics related to IoT, Industry 4.0, and cybersecurity. Moreover, he has received national and international recognition through appointments in standardization working groups, expert groups, and various boards. He has coedited and co-authored three edited volumes (books) on Internet of Things topics, including IoT for Industrial Automation, IoT Analytics, and IoT Security.

James Philpot graduated from Bath University in with a Bachelor's Degree in Politics and International Relations in 2015.During his studies, he spent a year working abroad for an NGO confederation in Brussels. After his studies, he began working for a consultancy, focusing on project management support. He was subcontracted to a 15-month cultural heritage project and provided communications support for various other projects and clients. After the conclusion of this project, he moved on to work for a cultural heritage network, helping implement a Creative Europe network support grant. He joined EOS (European Organization for Security) in the spring of 2019 and has been working on European projects in crisis management and security for health services, as well as coordinating the working groups on cybersecurity and security screening and detection technologies.

Gabriele Giunta holds a degree in Computer Science, at the Engineering Department of the University of Palermo (Italy). He has been working in the Engineering Ingegneria Informatica S.p.A. R&D Lab since 2000 in multi-sector Italian and European research projects, playing several roles, such as solution designer, system architect, technical coordinator, and project manager. Now, he is the research manager and head of the "Smart Transport and Infrastructure" Unit within the IS3 R&D Lab ("Intelligent Systems and Social Software for Security, Enterprises, Transport, Infrastructure") at ENGINEERING (http://www.eng.it) dealing with Critical Infrastructure Protection, Smart Mobility and Logistic solutions, mostly focused on the systemic view. In the past years, he was involved in several Italian Ministry and EC co-funded research projects, such as MAIS, DISCoRSO and NEXOF-RA and he coordinated Easy Rider, SECURE! and STORM. He is currently involved in DEFENDER (http://defender-project.eu) as Project Coordinator, in FASTER (https://www.faster-project.eu/) as Technical Coordinator, in InfraStress (https://www.infrastress.eu/) as WP Leader. My main areas of interest and relevant expertise include Software Engineering, Software Architecture Design, System Integration, Complex Event Processing, Data Mining, Information Fusion, Human Computer Interaction, Knowledge Modeling and Representation, Business Process Modeling and Management, Service Oriented Computing. He has been involved as co-author of scientific papers in international conferences, journals and books.