A risk analysis approach to critical information infrastructure protection

Critical Information Infrastructure (CII) has become a priority for all levels of management, It is one of the key components of efficient business and business continuity plans. There is a need for a new security methodology to deal with the new and unique attack threats and vulnerabilities associated with the new information technology security paradigm. Critical Information Infrastructure Protection - Risk Analysis Methodology
(ClIP-RAM), is a new security risk analysis method which copes with the shift from computer/information security to critical information infrastructure protection. This type of methodology is the next step toward handling information technology security risk at all levels from upper management information security down to firewall configurations. The paper will present the methodology of the new techniques and their application to critical information infrastructure protection. The associated advantages of this methodology will also be discussed.

Secure accounting and payment infrastructure for grid computing

In this paper, we propose an architecture of accounting and payment services for service oriented grid computing systems. The proposed accounting and payment services provide the mechanisms for service providers to be paid for authorized use of their resources. It supports the recording of usage data, secure storage of that data, analysis of that data for purposes of billing and so forth. It allows a variety of payment methods, it is scalable, secure, convenient, and reduce the overall cost of payment processing while taking into account, requirements of Grid computing systems.

Australian commercial-critical infrastructure management protection

Secure management of Australia's commercial critical infrastructure presents ongoing challenges to owners and the government. Although managed via a high-level information sharing collaboration of government and business, critical infrastructure protection is further complicated by the lack of a lower-level scalable model exhibiting its various levels, sectors and sub-sectors. This research builds on the work of Marasea (2003) to establish a descriptive critical infrastructure model and also considers the influence and proposed modelling of critical infrastructure dependency inter-relationships.

Evolutionary multiobjective optimization in engineering management: an empirical application in infrastructure systems

Generally multiple objectives exist in transportation infrastructure management, such as minimum cost and maximum service capacity. Although solution methoak of multiobjective optimization problems have undergone continual development over the part several decades, the methods available to date are not particularly robust, and none of them perform well on the broad classes. Because genetic algorithms work with apopulation ofpoints, they can capture a number of solutions simultaneously, and easily incorporate the concept of a Pareto optimal set in their optimization process. In this paper, a genetic algorithm is modified to deal with an empirical application for the rehabilitation planning of bridge decks, at a network level, by minimizing the rehabilitation cost and deterioration degree simultaneously.

Critical infrastructure protection, modelling and management: an Australian commercial case study

This research extends upon the previous work of Pye and Warren (2005) and presents a refinement of the previously proposed critical infrastructure model to enhance further our understanding and apprecication of where the likely inter-play and existance of dependency relationships between infrastructures coexist.

These associations are presented as a number of linkages that exist within each sector of Australia'a critical infrastructure, which is then extended further to the modelling of dependency inter-relationships that exist between critical infrastructures itilising Petri Nets.  The recognition and identification of such reliance relationships between critical infrastructures is necessary to allow both infrastructure owners and the government to identify and effectively manage and maintain the security, stability and availability of their particular critical infrastructure against potential scenario driven effects.  These issues are reflected within a case study as modelled using the Petri Net approach to encapsulate the issues of reliance relationships by drawing upon an Australian commercial case study.

Conceptual modelling: choosing a critical infrastructure modelling methodology

This paper reports on further research undertaken regarding systems modelling as applied to critical infrastructure systems and networks and builds upon the initial modelling research of Pye and Warren (2006a). We discuss system characteristics, inter-relationships, dynamics and modelling of similar systems and why modelling of a critical infrastructure is important. In overview we compare four modelling methods and techniques previously
used to model similar systems and discuss their potential transference to model critical infrastructure systems, before selecting the most promising and suitable for modelling critical infrastructure systems for further research.

The Australian Government`s abandoned infrastructure outsourcing program: what can be learned?

Early in 2001, after a damning public report by the Auditor-General, the Australian Federal Government abandoned its highly promoted “whole of government” IT infrastructure outsourcing initiative. This about-face was greeted in the press with reports that the initiative was a “fiasco”. Yet a four-year case study conducted by the authors suggests a more complex picture. Like many other “selective” outsourcers of IT, the Federal Government had been led to believe that it was adopting a relatively low risk strategy that would, if well managed, lead to significant cost savings and operational benefits. Instead, despite having implemented many widely promoted “best practices”, the Federal Government found a substantial discrepancy between what outsourcing promised to deliver, and what was actually achieved. In this respect their experiences were no different from those of many other large IT organizations engaged in selective IT outsourcing, who responded to a substantial contemporaneous survey. This case study examines why the Government’s expectations were not achieved, and arrives at conclusions that have important implications for decision makers confronted with choices about sourcing IT service delivery.

Modelling critical infrastructure systems

This paper examines the basis of what constitutes a system/s and discusses the commonalities in relation to critical infrastructure system. It focuses on identifying, and discussing system characteristics, complexity, inter-relationships, dynamics and the importance of modelling as applied to critical infrastructure systems. It then considers four differing system-modelling styles with the view to assess and discuss their potential to model critical infrastructure systems, ahead of selecting the most promising and suitable for adoption to critical infrastructure system modelling

The economic performance of transportation infrastructure: an empirical study on the recent development of China

It has been widely recognised that infrastructure systems highly affect the economic development of a country or region. In particular, the quality and quantity of transportation infrastructure have a direct bearing on economic growth in developing countries. Therefore, it is challenging to allocate the infrastructure construction budget across a country so that economic growth as a whole will not be hampered by the lack of infrastructure construction in any local area. In this research, the authors focus on simulating the correlations between economic growth, capital investment and transportation infrastructure construction in China historically and comparing the production and investment indicators at the cross-region based on the statistical data reported from government agencies in China. These computed correlations and indicators are crucial for making financial decisions and investment policies on transportation infrastructure construction at a national level.

Benchmarks for critical infrastructure systems modelling

This paper draws together previous security assessment research and builds upon the current systems modelling research investigation into the application of potential modelling styles that can be applied to model critical infrastructure systems, networks, their inter-relationships and functionality. The emphasis here is to develop appropriate benchmarks as a means of assessment to determine the appropriateness of various systems modelling styles and techniques and their suitability for modelling critical infrastructure systems. The benchmarks are applicable on a number of differing levels to determine the ‘best fit’ for modelling critical infrastructure systems, to aid in identifying potential system or inter-network vulnerabilities.