A case study: Preparing for the smart grids - Identifying current practice for information security incident management in the power industry

Proceedings - 7th International Conference on IT Security Incident Management and IT Forensics, IMF 2013

Volumn , Issue , 2013, Pages 26-32

  Line, Maria B ^a  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

incident respons; Information security; smart grids

Indexed keywords

CURRENT PRACTICES; INCIDENT RESPONS; INFORMATION SECURITY INCIDENTS; INFORMATION SECURITY THREATS; POWER AUTOMATION; POWER INDUSTRY; RESEARCH METHODS; SMART GRID;

AUTOMATION; PERSONAL COMPUTING; RESEARCH; SECURITY SYSTEMS; SMART POWER GRIDS;

SECURITY OF DATA;

EID: 84883337853     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMF.2013.15     Document Type: Conference Paper

References (21)

1. N. Falliere, L. O. Murchu, and E. Chien, "W32.Stuxnet Dossier," Symantec, Tech. Rep., February 2011.
2. D. Albright, P. Brannan, and C. Walrond, "Did Stuxnet take out 1000 centrifuges at the Natanz enrichment plant?" Institute for Science and International Security (ISIS), Tech. Rep., 2010.
3. D. Albright, P. Brannan, and C. Walrond, "Stuxnet Malware and Natanz: Update of ISIS December 22, 2010 Report," Institute for Science and International Security (ISIS), Tech. Rep., 2011.
4. "Global Energy Cyberattacks: "Night Dragon"," McAfee, Tech. Rep., 2011.
5. N. Perlroth, "Researchers find clues in malware," 2012.[Online]. Available: http://www.nytimes.com/2012/05/31/technology/ researchers-link-flame-virus-to-stuxnet-and-duqu.html
6. A. Greenberg, "New research shows Flame malware was almost certainly a U.S. or Israeli creation," 2012, http://www.forbes.com/sites/ andygreenberg/2012/06/11/new-research-shows-flame-malware-was-almost-certainly- a-u-s-or-israeli-creation/.
7. "ICS-CERT Monitor," Oct/Nov/Dec 2012, http://www.us-cert.gov/ control systems/pdf/ICS-CERT Monthly Monitor Oct-Dec2012.pdf.
8. "ISO/IEC 27035:2011 Information technology-Security techniques-Information security incident management," 2011.
9. NIST, "800-61: Computer Security Incident Handling Guide," 2008.
10. NIST, "7628-1: Guidelines for Smart Grid Cyber Security," 2010.
11. NIST, "7628-3: Guidelines for Smart Grid Cyber Security," 2010.
12. P. Kral, "The Incident Handlers Handbook," SANS Institute, Tech. Rep., 2011.
13. S. Mitropoulos, D. Patsos, and C. Douligeris, "On Incident Handling and Response: A State-of-the-Art Total Approach," International Journal of Computer and Security, vol. 25, no. 5, pp. 351-370, July 2006.
14. T. Pieterse, "The Corporate Incident Response Framework (CIRF)," in IST-Africa 2011 Conference Proceedings, 2011.
15. S. Metzger, W. Hommel, and H. Reiser, "Integrated Security Incident Management-Concepts and Real-World Experiences," in Sixth International Conference on IT Security Incident Management and IT Forensics (IMF), 2011, pp. 107-121.
16. A. Ahmad, J. Hadgkiss, and A. B. Ruighaver, "Incident Response Teams-Challenges in Supporting the Organisational Security Function," Computers & Security, vol. 31, no. 5, pp. 643-652, 2012.
17. R. Werlinger, K. Muldner, K. Hawkey, and K. Beznosov, "Preparation, detection, and analysis: the diagnostic work of IT security incident response," Nov 2009.
18. D. Wei, Y. Lu, M. Jafari, P. Skare, and K. Rohde, "An integrated security system of protecting smart grid against cyber attacks," in IEEE Innovative Smart Grid Technologies (ISGT) 2010, jan. 2010, pp. 1-7.
19. M. G. Jaatun, E. Albrechtsen, M. B. Line, I. A. Tøndel, and O. H. Longva, "A framework for incident response management in the petroleum industry," International Journal of Critical Infrastructure Protection, vol. 2, pp. 26-37, 2009.
20. R. K. Yin, Case Study Research-Design and Methods, 3rd ed., ser. Applied Social Research Methods. SAGE Publications, 2003, vol. 5.
21. M. D. Myers and M. Newman, "The qualitative interview in IS research: Examining the craft," Information and Organization, vol. 17, no. 1, pp. 2-26, Jan. 2007.[Online]. Available: http://dx.doi.org/10.1016/j. infoandorg.2006.11.001