Critical Infrastructure Modelling

1
Critical Infrastructure Modelling

• 28th April 2003, Brno
• Ludek Novák, BDO ITludek.novak_at_bdo-it.com

2
Agenda

• CI Basic Terms
• Dependencies
• CI Modelling
• CI Layer Model
• CI Element Chain Model
• CI Simulation and Scenarios
• Conclusion

3
Basic Terms

• Large Complex Critical Infrastructure (CI) all
  systems and assets whose incapacity or
  destruction would have a debilitating impact on
  the national security, and the economic and
  social well being of a nation
• Large global interconnection
• Complex wide variety of services
• Critical broad consequences
• Critical Infrastructure Protection (CIP)measures
  to secure critical infrastructure

4
Basic Terms (2)

• Critical Information Infrastructure (CII) the
  totality of interconnected computers and networks
  and their critical information flows
• Critical Information Infrastructure Protection
  (CIIP) a subset of the CIP focuses on the
  protection of ICT systems and assets.

5
Dependencies

• Intra-dependency within CI (strong dependency)
• Inter-dependency between CI (weak dependency)

• Escalating Effect disruption of one CI means
  worse situation for others (delivery time)
• Cascading Effect disruption in one CI causes
  disruption in a second CI
• Common Cause disruption of 2 or more CIs at the
  same time e.g. natural disaster

6
CI Modelling

• Modelling involves the use of mathematical
  relationships to describe a system. The user
  needs to have a solid understanding of the
  system specially the relationships between
  events, factors and variables within the model,
  and secondly the magnitude of those
  relationships.

7
CI Layer Model

• The model shows parts of CI and their
  relationship/dependencies
• 1, 2 or 3 dimensions
• CI sectors
• CI administration areas
• CI management fields

8
CI Sectors (1st Dimension)

• Information and Communication Services
• Electric Power Services
• Gas and Oil Services
• Banking and Finance Services

• Transportation Services
• Water and Food Services
• Emergency and Health Services
• Government Services

9
Sectors Dependencies (1)
10
Sectors Dependencies (2)
11
CI Administration Areas (2nd Dimension)

• Private Area home and family
• Municipal Area local government, small
  organizations
• Regional Area regional government, middle
  organization
• National Area state government, large
  organization
• International Area cross-board cooperation,
  world-wide organization

12
Sector vers. Administration
13
CI Management Fields(3rd Dimension)

• Social Field political and economical influence
• Organization Field management structure,
  policies and regulations
• Information Field critical information exchange
• Application Field integrated functional complex
• Technological Field basic functional blocks
• Feature Field surrounding environment

14
CI Element Chain Model

• Detail description of a critical service (CIS)
• CIS Customer needs CIS
• CIS Provider offers CIS
• CIS Operator distributes CIS
• CIS Management Structure regulation
• CIS Support Structure necessary environment

15
CI Element Chain Model
16
Simulations and Scenarios

• CIs are very complex environment
• Models need solid understanding the relation
  between elements, factors etc.
• We have limited knowledge on CIs
• Necessity to include implicit knowledge based on
  scenarios (what-if thinking)

17
Simulations and Scenarios
18
CI Model Architecture in EU
19
Conclusion

• CI Models help us to understand the CI complexity
  and CI interdependencies
• CI Models have limited applicability
• Better understanding needs a combination of
  different models, simulations and scenarios
• EU have a global approach to CI Modelling

20
Questions

• Contact
• Ludek Novák
• ludek.novak_at_bdo-it.com
• Olbrachtova 5/1980, 140 00 Praha
• tel. [phone], fax [phone]