|
Ten Thousand reasons to worry about critical infrastructure |
|
|
|
|
Ripped from the headlines today 1/24/2012: Threat level: Wired Ten THOUSAND reasons to worry about Critical Infrastructure: by Kim Zetter MIAMI, Florida – A security researcher was able to locate and map more than 10,000 industrial control systems hooked up to the public internet, including water and sewage plants, and found that many could be open to easy hack attacks, due to lax security practices.
Infrastructure software vendors and critical infrastructure owners have long maintained that industrial control systems (ICSes) — even if rife with security vulnerabilities — are not at risk of penetration by outsiders because they’re “air-gapped” from the internet — that is, they’re not online.
But Eireann Leverett, a computer science doctoral student at Cambridge University, has developed a tool that matches information about ICSes that are connected to the internet with information about known vulnerabilities to show how easy it could be for an attacker to locate and target an industrial control system. More info and full story with interactive map: http://www.wired.com/threatlevel/2012/01/10000-control-systems-online/ |
|
InfraGard Learning Series |
|
|
|
|

The InfraGard Learning Series
Introducing a new concept of education at NYC Metro InfraGard Members Alliance Inc., "The InfraGard Learning Series".
The InfraGard Learning Series is initiated as a NY InfraGard Inc program which continues to build and extend our classroom beyond that once a month meeting for our valued membership. The management of NY InfraGard wants its members to have at there finger tips the resources necessary to help protect and defend our great City, State and Nation. So in keeping with InfraGard's National Mission of "National Critical Infrastructure Protection" we are introducing, "The InfraGard Learning Series".
The InfraGard Learning Series will help bring additional depth and focus to industry problems and solutions. As we move forward the Learning Series will include all form of media: White Papers, Video, Audio, conference calls and of course our traditional once a month meeting. We're keeping up with the times and using the technology that we can security grasp and implement to bring top notch education to each of you.
As with everything we do InfraGard here in NYC we too will utilize all secure and meaningful communication tools at our disposal. We will utilize social media such as Linked-in, Facebook, Twitter, You Tube, Flicker and as we gain the knowledge, skills and ability we'll be only too happy to add more.
We would certainly enjoy hearing from you concerning this latest development and introduction. It is only via feedback that we too will learn from you our loyal and valued members who are working daily to accomplish our mission.
Our first InfraGard Learning Series was posted last week. The focus was on: The Cloud and E-mail Archiving (click on the focus). |
|
|
Board Meeting Winter 2012 |
|
|
|
|
Welcome to 2012 as we prepare for our Winter 2012 Board Meeting. The NYC Board will g ather at the Law Offices of Davis and Gilbert LLP on January 18th, 2012 from 3PM to 6PM. One of the main focuses of this meeting will be a turning over of old and new board members.
As we welcome current board members back, say thank you to those departing members: George Davis, Dean Delitta, Frank Padavan and welcome in some wonderful new fresh faces: Andrew Herlands, Kathy Braun, Lance Rea, Catherine Marinzel, Peter Dobroskok to our NYC InfraGard Board for NYC Metro InfraGard Inc. Each of these appointed members will bring new energy and vigor along with strengths from some critical industries InfraGard needs to get to know a lot better.
SA James Capozzi, InfraGard Coordinator, FBI NY Field Office will be retiring at the end of December 2011. The FBI NYFO will announce a new appointment and as soon as we know we'll let everyone know. Its always very exciting when we have a new agent coming on board.
In the meantime, we wish Jim well in retirement. As always, should you need to speak with someone at the FBI call the NY Field Office at 212-384-1000 and ask to speak to the FBI InfraGard Coordinator. We know the calls will be properly re-directed in the office.
Look back here in late January as we make some announcements with new members and give some advance notice to meetings and events.
Next Board meeting is scheduled for June 2012 at Saint John's University, Manhattan Campus.
NY InfraGard Team |
|
We will have many further large scale events here in New York city, many surrounding properties that concern our group. This is a reminder. Summary: December includes several holidays and is generally a festive time with numerous events that draw crowds such as religious services, tree lighting ceremonies, New Year’s Eve celebrations, etc. There is currently no specific information indicating a credible threat associated with events, but the recent plot to bomb Portland, Oregon’s Christmas tree lighting ceremony is a reminder that large public gatherings remain a key target of terrorists, and holiday season events could provide a target-rich environment. Context: The plot against Portland demonstrates the continuing desire of individuals to conduct highly visible attacks that inflict economic damage and maximum casualties on U.S. targets. The potential for similarly radicalized individuals to connect with foreign terrorist organizations that could exploit their knowledge and familiarity with U.S. targets is a concern. However, half the domestic terror plots since September 11, 2001, involved lone offenders, who pose the greatest threat because their independence limits intelligence collection opportunities and hampers detection. Throw in the recent attack in Sweden, a major shopping and tourist gathering location. Although it was not effective it could have been. Most international terrorist attacks against Western targets were not timed to coincide with major dates or high-profile events, but the symbolic nature of the holiday season could make it an attractive target for a terrorist attack. Past attacks against the United States in December include: 2009: On Northwest Airlines Flight 253, Umar Farouk Abdulmutallab, an al-Qaeda operative, tried to detonate explosives hidden in his underwear as the plane approached Detroit, Michigan. 2001: Richard Reid, self-proclaimed al-Qaeda operative, attempted to detonate explosives hidden in his shoes while on American Airlines Flight 63 from Paris, France, to Miami, Florida. 1999: Ahmed Ressam, another al-Qaeda-trained operative, planned to bomb Los Angeles International Airport on New Year’s Eve by putting several explosive-laden suitcases in the baggage claim areas and detonating them with electric timers.2 1988: Agents of Libya delivered the bomb that destroyed Pan Am Flight 103, en route to New York City, over Lockerbie, Scotland, killing all 259 passengers and 11 people on the ground. Commercial facilities such as shopping malls, theaters, and restaurants may be ideal targets for a possible terrorist attack during the busy holiday shopping season because of their open access and minimal security measures. In addition to the large crowds at retail facilities, the 2010 holiday season brings a wide variety of mass gatherings such as Christmas tree lightings, religious services, festivals, celebrations, etc.
Intelligence Threat Analysis has no specific intelligence indicating a credible threat of an attack in the United States, but recommends continued vigilance by law enforcement and security personnel throughout the holiday season. The number of mass gathering events during the holiday season may be considered attractive targets by violent extremists. Some public venues, such as shopping malls, may be seen as especially suited for small-scale and small-arms style attacks of the kind now being urged by jihadi leaders against the United States. Suspicious Activity Reporting Public safety demands a preventative approach – intervening before an attack. State and local law enforcement as well as security personnel are most likely to have initial contact with terror operatives, and should be alert for and immediately report any suspicious actions, materials, or vehicles that could indicate potential threats: - Personnel should be alert for individuals photographing, drawing, taking notes, leaving items unattended, loitering, etc., near critical infrastructure until the activity can be attributed to legitimate, non-criminal behavior. - As the terrorist threat evolves and operational cycles shorten, identifying the associated indicators to terrorism is increasingly important to disrupting potential terrorist activity or planning. - Identifying radicalized individuals in the United States is vital to preventing attacks here. - While there is no specific threat at this time, vigilance is warranted. |
|