Cybersecurity for
Industrial IoT and
Critical Infrastructures
prof. Stefano Panzieri
Ing. Valeria Bonagura
Interdipendenze, Rischio Sistemico, Resilienza
INTERDEPENDENCIES
Defining (inter)dependencies
◊ Discussion based on: Rinaldi, S. M., Peerenboom, J. P., & Kelly, T. K. (2001).
Identifying, understanding, and analyzing critical infrastructure interdependencies.
IEEE control systems magazine, 21(6), 11-25. •
◊ Dependency:
◊ uni-directional relationship of two infrastructures through which the state of the depending infrastructure is
influenced by or is correlated to the state of the other
◊ Interdependency:
◊ bidirectional relationship between two infrastructures through which the state of each infrastructure
influences or is correlated to the state of the other
◊ More definitions at:
◊ https://websites.fraunhofer.de/CIPedia/index.php/Dependency
◊ https://websites.fraunhofer.de/CIPedia/index.php/Interdependency
◊3
Esempio
Settore
Sanità
Telecomunicazioni
Dipendenza chiave
Energia elettrica
Tempo di tolleranza Impatto se manca
Minuti/ore Molto alto
Energia + raffreddamento
Ore Alto
Trasporti
TLC + carburante +
segnalamento
Ore/giorni Alto
Acqua
Energia + chimici +
controllo remoto
Ore Molto alto
Finanza
TLC + data center +
identità digitale
Minuti/ore Molto alto
Types of interdependencies
Analisi delle interdipendenze
• Si tratta pur sempre di analisi del
rischio per cui vanno definiti bene gli
obiettivi e, solo dopo, analizzati gli
effetti dell'incertezza su di essi
Other dimensions of infrastructure
interdependencies
• Infrastructure environment
o Economic and business opportunities and concerns
o Public policy
o Government investment decisions
o Legal and regulatory concerns
o Public health and safety
o Technical and security issues
o Social and political concerns
Other dimensions of infrastructure
interdependencies
• Coupling and response behavior
• Degree of coupling (tight or loose)
• Coupling order (whether two infrastructures are directly connected to one another or indirectly
coupled through one or more intervening infrastructures)
• Linearity or complexity of the interactions
• Linear interactions are generally those intended by design, with few unintended or unfamiliar
feedback loops
• Complex interactions are generally those not intended by design, and they can be subtle and
difficult to detect
• State of operation
• E.g. normal operating / stress or disruption / restoration conditions
Other dimensions of infrastructure
interdependencies
• Infrastructure characteristics
• Spatial scales
• part – unit – subsystem – system – infrastructure – interdependent infrastructures
• Temporal range
• Operational factors
• incl. operating procedures; operator education and training; backups and redundant systems;
emergency workarounds; contingency plans, including periodic reviews and updates; security policies,
including implementation and enforcement; human ingenuity and determination during emergencies
• Organizational considerations
• incl. globalization; international ownership; regulation; government versus private ownership;
corporate policies and motivations; regulatory environment
Other dimensions of infrastructure
interdependencies
◊Types of failure
◊ Cascading failure
◊when a disruption in one infrastructure causes the failure of a component in a second
infrastructure, which subsequently causes a disruption in the second infrastructure
◊ Escalating failure
◊when an existing disruption in one infrastructure exacerbates an independent disruption of a
second infrastructure, generally in the form of increasing the severity or the time for recovery
or restoration of the second failure
◊ Common cause failure
◊when two or more infrastructure networks are disrupted at the same time
SYSTEMIC RISK & RESILIENCE
Systemic risk an hyper-risk
Governance of systemic risk
Resiliency
Resilience
Resilience
Resilience: capacity & outcomes
Absorptive capacity
◊ Absorptive capacity is the capacity to take intentional protective action
and to cope with known shocks and stress
◊ It is needed as shocks and stress will continue to happen, for example
due to extreme weather events caused by climate change, protracted
conflict, and disasters
◊ Simply stated this is the capacity to ‘bounce back’ after a shock. It
involves anticipating, planning, coping and recovering from specific,
known shocks and short term stresses
◊ Absorptive capacity is about ensuring stability because it aims to
prevent or limit the negative impact of shocks on individuals,
households, communities, businesses and authorities.
Adaptive Capacity
◊ Adaptive capacity is the capacity to make intentional incremental
adjustments in anticipation of or in response to change, in ways that
create more flexibility in the future
◊ It is necessary because change is ongoing and uncertain, and because
intentional transformation takes time and sustained engagement
◊ Adaptation is about making appropriate changes in order to better
manage, or adjust to a changing situation
◊ A key aspect of adaptive capacity is accepting that change is ongoing as
well as highly unpredictable
◊ That is why adaptive capacity is about flexibility, and the ability to make
incremental changes on an ongoing basis through process of continuous
adjusting, learning, and innovation.
Transformative Capacity
◊ Transformative capacity is the capacity to make intentional
change to stop or reduce the causes of risk, vulnerability
◊ Transformation is about fundamental changes in the deep
structures that cause or increase vulnerability and risk as well
as how risk is shared within societies and the global community.
◊ Another way to think about this is that transformation is about
addressing the underlying failures that cause or increase and
maintain risk.
◊ Transformation is not about addressing the close to or
proximate causes of risk and vulnerability but their structural or
root causes
0
