Man-in-the-Middle Attack Test-bed Investigating Cyber-security Vulnerabilities in Smart Grid SCADA Systems

The increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in the Smart Grid has exposed them to a wide range of cyber-security issues, and there are a multitude of potential access points for cyber attackers. This paper presents a SCADA-specific cyber-security test-bed which contains SCADA software and communication infrastructure. This test-bed is used to investigate an Address Resolution Protocol (ARP) spoofing based man-in-the-middle attack. Finally, the paper proposes a future work plan which focuses on applying intrusion detection and prevention technology to address cyber-security issues in SCADA systems.

Targeted Impersonation As A Tool For The Detection Of Biometric System Vulnerabilities

This paper argues that biometric verification evaluations can obscure vulnerabilities that increase the chances that an attacker could be falsely accepted. This can occur because existing evaluations implicitly assume that an imposter claiming a false identity would claim a random identity rather than consciously selecting a target to impersonate. This paper shows how an attacker can select a target with a similar biometric signature in order to increase their chances of false acceptance. It demonstrates this effect using a publicly available iris recognition algorithm. The evaluation shows that the system can be vulnerable to attackers targeting subjects who are enrolled with a smaller section of iris due to occlusion. The evaluation shows how the traditional DET curve analysis conceals this vulnerability. As a result, traditional analysis underestimates the importance of an existing score normalisation method for addressing occlusion. The paper concludes by evaluating how the targeted false acceptance rate increases with the number of available targets. Consistent with a previous investigation of targeted face verification performance, the experiment shows that the false acceptance rate can be modelled using the traditional FAR measure with an additional term that is proportional to the logarithm of the number of available targets.

Poverty, ethnicity and international migrants to Northern Ireland: New opportunities or new vulnerabilities?

This briefing provides a brief overview of recent patterns and processes of migration to Northern Ireland and to identify the major challenges arising for society. It is based on primary research conducted by the author during 2013 that consisted mainly of focus groups and interviews with individual migrants. This briefing paper proceeds as follows: it identifies the key features of recent migration to Northern Ireland before presenting evidence from the research to show the experiences of migrants in the labour market. The key policy questions to be considered will be the role of the state and civil society for building positive inter-group relations and the opportunities that exist for migrants to achieve economic and social mobility.

Regenerative Medicine and New Labour Life Science Policy: Rhetorics of Success, Narratives of Sustainability and Survival

Advances in stem cell science and tissue engineering are being turned into applications and products through a novel medical paradigm known as regenerative medicine. This paper begins by examining the vulnerabilities and risks encountered by the regenerative medicine industry during a pivotal moment in its scientific infancy: the 2000s. Under the auspices of New Labour, British medical scientists and life science innovation firms associated with regenerative medicine, received demonstrative rhetorical pledges of support, aligned with the publication of a number of government initiated reports presaged by Bioscience 2015: Improving National Health, Increasing National Wealth. The Department of Health and the Department of Trade and Industry (and its successors) held industry consultations to determine the best means by which innovative bioscience cultures might be promoted and sustained in Britain. Bioscience 2015 encapsulates the first chapter of this sustainability narrative. By 2009, the tone of this storyline had changed to one of survivability. In the second part of the paper, we explore the ministerial interpretation of the ‘bioscience discussion cycle’ that embodies this narrative of expectation, using a computer-aided content analysis programme. Our analysis notes that the ministerial interpretation of these reports has continued to place key emphasis upon the distinctive and exceptional characteristics of the life science industries, such as their ability to perpetuate innovations in regenerative medicine and the optimism this portends – even though many of the economic expectations associated with this industry have remained unfulfilled.

Conservation status and reproduction of the critically endangered freshwater pearl mussel (Margaritifera margaritifera).

1. Freshwater unionoids are one of the most threatened animal groups worldwide and the freshwater pearl mussel Margaritifera margaritifera is currently listed as critically endangered in Europe. The ‘EC Habitats & Species Directive’ requires that EU member states monitor the distribution and abundance of this species and report regularly on its conservation status.
2. The pearl mussel meta-population in Northern Ireland was surveyed to assess temporal population trends in Special Areas of Conservation (SACs) and mussel reproduction throughout its range.
3. Mussels occurred in six rivers and numbers within three SAC designated sites remained stable between 2004-07 and 2011. The discovery of >8,000 previously unknown individuals in the Owenreagh River contributed to an overall increase (+56.8%) in the total known population. All populations actively reproduced during 2010 with approximately half of all individuals gravid. Moreover, suitable salmonid hosts occurred at all sites with 10.7% of salmon and 22.8% of trout carrying encysted glochidia. Populations were composed entirely of aged individuals with little evidence of recent recruitment.
4. We infer that the break in the life cycle must occur during the juvenile stage when glochidia metamorphose and settle into the interstitial spaces within the substrate. Water quality parameters, most notably levels of suspended solids, exceeded the recommended maximum thresholds in all rivers.
5. We posit that the deposition of silt may be the main cause of juvenile mortality contributing to a lack of recruitment. Consequently, all populations were judged to be in ‘unfavourable’ conservation status. Catchment-level management plans are urgently needed to reduce siltation with the aim of improving recruitment. Our results have implications for the success of ex-situ conservation programmes; specifically, the size at which captive bred juveniles are released into the wild. Further research is required to assess the vulnerabilities of early life stages of M. margaritifera to siltation.

Teenagers born at extremely low birth weight

Adolescence constitutes a major transition for extremely low birth weight (ELBW) teenagers. Recent studies of ELBW teenagers born in the 1980s have provided information about the growth and developmental characteristics of these individuals in adolescence and in early adulthood. ELBW teenagers are shorter and lighter than their full-term peers, and have a smaller head circumference. Cognitive and academic vulnerabilities documented during the school years, particularly difficulties with nonverbal intelligence and arithmetic, persist into late adolescence. Many ELBW children struggle in school and have lower academic achievement levels. The self-concept of ELBW teenagers is generally similar to that of their full-term peers, but their parents perceive them to be more vulnerable over a wide range of behavioural and psychosocial dimensions, particularly depression and attention. ELBW teenagers perceive themselves as needing more assistance in job seeking than do their peers. Physical activity levels and fitness in late adolescence are significantly lower in ELBW teenagers than in their full-term peers, constituting a potential additional health hazard in later life. The outcomes of ELBW teenagers are significantly influenced by socioeconomic, family and parenting factors.

Rule-Based Intrusion Detection System for SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified using a ruled based method.

Intrusion Detection System for Network Security in Synchrophasor Systems

Synchrophasor systems will play a crucial role in next generation Smart Grid monitoring, protection and control. However these systems also introduce a multitude of potential vulnerabilities from malicious and inadvertent attacks, which may render erroneous operation or severe damage. This paper proposes a Synchrophasor Specific Intrusion Detection System (SSIDS) for malicious cyber attack and unintended misuse. The SSIDS comprises a heterogeneous whitelist and behavior-based approach to detect known attack types and unknown and so-called ‘zero-day’ vulnerabilities and attacks. The paper describes reconnaissance, Man-in-the-Middle (MITM) and Denial-of-Service (DoS) attack types executed against a practical synchrophasor system which are used to validate the real-time effectiveness of the proposed SSIDS cyber detection method.

Intrusion Detection System for IEC 60870-5-104 Based SCADA Networks

Increased complexity and interconnectivity of Supervisory Control and Data Acquisition (SCADA) systems in Smart Grids potentially means greater susceptibility to malicious attackers. SCADA systems with legacy communication infrastructure have inherent cyber-security vulnerabilities as these systems were originally designed with little consideration of cyber threats. In order to improve cyber-security of SCADA networks, this paper presents a rule-based Intrusion Detection System (IDS) using a Deep Packet Inspection (DPI) method, which includes signature-based and model-based approaches tailored for SCADA systems. The proposed signature-based rules can accurately detect several known suspicious or malicious attacks. In addition, model-based detection is proposed as a complementary method to detect unknown attacks. Finally, proposed intrusion detection approaches for SCADA networks are implemented and verified via Snort rules.

Multi-Attribute SCADA-Specific Intrusion Detection System for Power Networks

The increased interconnectivity and complexity of supervisory control and data acquisition (SCADA) systems in power system networks has exposed the systems to a multitude of potential vulnerabilities. In this paper, we present a novel approach for a next-generation SCADA-specific intrusion detection system (IDS). The proposed system analyzes multiple attributes in order to provide a comprehensive solution that is able to mitigate varied cyber-attack threats. The multiattribute IDS comprises a heterogeneous white list and behavior-based concept in order to make SCADA cybersystems more secure. This paper also proposes a multilayer cyber-security framework based on IDS for protecting SCADA cybersecurity in smart grids without compromising the availability of normal data. In addition, this paper presents a SCADA-specific cybersecurity testbed to investigate simulated attacks, which has been used in this paper to validate the proposed approach.

An overview of waste crime, its characteristics, and the vulnerability of the EU waste sector

While waste is increasingly viewed as a resource to be globally traded, increased regulatory control on waste across Europe has created the conditions where waste crime now operates alongside a legitimate waste sector. Waste crime,is an environmental crime and a form of white-collar crime, which exploits the physical characteristics of waste, the complexity of the collection and downstream infrastructure, and the market opportunities for profit. This paper highlights some of the factors which make the waste sector vulnerable to waste crime. These factors include new legislation and its weak regulatory enforcement, the economics of waste treatment, where legal and safe treatment of waste can be more expensive than illegal operations, the complexity of the waste sector and the different actors who can have some involvement, directly or indirectly, in the movement of illegal wastes, and finally that waste can be hidden or disguised and creates an opportunity for illegal businesses to operate alongside legitimate waste operators. The study also considers waste crime from the perspective of particular waste streams that are often associated with illegal shipment or through illegal treatment and disposal. For each, the nature of the crime which occurs is shown to differ, but for each, vulnerabilities to waste crime are evident. The paper also describes some approaches which can be adopted by regulators and those involved in developing new legislation for identifying where opportunities for waste crime occurs and how to prevent it.

Concussion and Brain Injury in Contact Sport: Legal Implications

A concussed participant leaving the field of play is one of the most worrying sights in sport. It is also one that might have serious legal implications for sports governing bodies. Over the past number of years, a major class action suit has rumbled through the US courts as taken against that country's biggest professional sport, the National Football League. The NFL is at present attempting to settle the lawsuit from more than 4,500 retired players who claim that the NFL knew for decades about the chronic health risks associated with cumulative concussions in American football but failed to warn players or take preventative steps. Testimony from retired NFL players has revealed stories of chronic headaches, Alzheimer-like forgetfulness, altered personalities and sometimes a downward spiral into depression, violence and suicide. Medical research is suggesting that professional American football players are three times more likely to die as a result of certain neurodegenerative diseases than the general population. This paper notes that the concerns about concussion are not confined to the NFL and extend to contact sport more widely and notably rugby union. This paper also assesses the reaction of leading sports governing bodies globally to the recorded medical risks and accompanying legal vulnerabilities.