Towards a Baltic Sea Region Strategy in Critical ... - Helsinki.fi

More documents

Recommendations

Info

CRITICAL INFRASTRUCTURE PROTECTION IN THE BALTIC SEA REGION sensitized on the security aspects of the ICT systems he/she employs, is less likely to fall prey to attack attempts. The sensitization processes may include: tips and tutorials in mainstream media and web portals, basiclevel (but hands-on) courses on information security in educational/training institutions, 96 and public outreach campaigns that bring information security to the forefront of public consciousness. 97 • Providing Support or Assistance: The ICT proficiency of end users tends to vary widely, whereby at the high end of scale ‘tech-savvy’ users are generally able secure themselves adequately or may have the knowledge on how to respond correctly if they do succumb to an attack. Unfortunately, that class of users is very much a minority, and hence the majority of users need some sort of assistance in ensuring security and rational responses under pressured conditions. This may require a multimedia-based universally-accessible channel for providing assistance, in the same way citizens are able to promptly summon civil emergency services or access a helpline, or employs of an organization are able to call on their IT support staff. Further actions may include improved accessibility and usability of security tools, and providing guidelines on the responsible use of ICT devices, particularly in the aftermath of a crisis. 98 • Increasing Vigilance: Early warning capability is one of the key aspects that need to be developed sufficiently for effective CIIP. This is noted in the importance of CERTs in handling incident reports from public and private sector organizations, and usefulness in providing an up-to-date snapshot of the general security picture. Similar vigilance should be strongly encouraged from all ICT users across society and a user-friendly mechanism be made available to make reporting of security incidents simple and straightforward. Technological dimension Information security relies on technological advances - such as, biometric technologies (e.g., fingerprint readers, iris scans etc.) that reduce reliance on traditional authentication methods (e.g., PINs, passwords etc.,) for increased robustness. However, information security is more than just an issue of technology, as illustrated by the organization model of Figure 27. To that end, the CIIP challenge involves not only coping with the fast paced ICT innovation and evolution within the techno-physical node, but also correctly anticipating the influence that these changes will exert on the other nodes within and beyond an 96 As noted by a recent study, awareness is of no use if there is no instilled knowledge in personal security. Report by: Science and Technology Committee of the House of Lords, Britain (2007). 97 An example campaign the National Information Security Day in Finland overseen by the governmental Information Security Committee. The campaign has included the launch of an online learning security center for schools. Following suit, an Information Security Day is now observed in Europe and beyond. 98 For example, in the light of the mobile network congestion after the 7/7 London bombings, the operator Vodafone UK has strongly advised subscribers “to avoid making unnecessary or lengthy phone calls and, preferably, send a text message” during future crises (Fildes 2006). 134 NORDREGIO REPORT 2007:5
CHAPTER III: INFORMATION AND COMMUNICATION TECHNOLOGY organization. Evolutions in the ICT sector are now reflected by the scaling of network capacities, as well as the abundance of new and innovative concepts (e.g., fixed and mobile telephony convergence, service-oriented architectures, ubiquitous information, ambient intelligence, mobile workforce etc.) illustrated in the current migration towards Next Generation Networking (NGN) 99 and beyond. The future becomes even more unpredictable with the onset of various disruptive technologies, such as, nanotechnology and radio frequency identification (RFID). A common theme envisioned in both the immediate and distant evolution stages is the migration from networks with centralized management, towards more flexible networks with widespread autonomous intelligence built into their individual systems. 100 This flexibility is made possible by the use of IP-based communications as the common denominator, allowing seamless service and application handover (transfer) between heterogeneous infrastructures, regardless of their ownership or underlying technology. To that end, significant changes are anticipated in all conceptual layers: • Infrastructure Layer: The changes can be viewed from both the network and user perspectives. On the network-side, there is migration towards highly connected but survivable mesh architectures, and spontaneously organized ad-hoc wireless networking for ubiquitous connectivity shorn of centralized control and infrastructure support. On the user-side, there is the adoption of multi-standard communication devices that can be automatically reconfigured to function over multiple infrastructure types. 101 • Service Layer: Migration towards context-aware services that adapt automatically and in real-time to the dynamic user context, even anticipating user needs, anytime and anywhere. The user context here refers to the users’ history, personalization and preferences, terminal and network capabilities, location and mobility; organizational restrictions and procedures; and the operating environment. The process of adapting to a different context should occur without the user necessarily being aware of the technical details. • Application Layer: Migration towards context-aware applications that adapt automatically and in real-time to the dynamic user context and possibly even anticipate user needs anytime and anywhere. The incentives for aforementioned evolutions from point of view users (both individual users and those within an organization) includes, the promise of unfettered access to advanced feature-rich services and applications, increased efficiency and productivity, and flexibility in how they utilize them and select 99 In a nutshell, NGN enables the migration from isolated vertically-integrated application-specific networks (e.g. an organization operating separate networks for telephony and data services) to single networks capable of bearing all service types (ITU 2007). 100 See, for example, Tafazolli (2005). 101 This refers to devices that are controlled directly by humans (e.g., handsets, PDA, laptop etc.) as well as those that perform functions remotely on behalf of humans (e.g., sensors embedded in cars, furniture, buildings, clothing etc.). The dual-mode handsets that enable users to connect to both WiFi and cellular (GSM and 3G) networks are one of the early trendsetters in this regard. NORDREGIO REPORT 2007:5 135
Page 1:
Towards a Baltic Sea Region Strateg
Page 4 and 5:
Nordregio Report 2007:5 ISSN 1403-2
Page 6 and 7:
5.4 Impacts caused by terrorism, na
Page 8 and 9:
CRITICAL INFRASTRUCTURE PROTECTION
Page 11 and 12:
PREFACE PREFACE With the Commission
Page 13:
PREFACE The study includes tens of
Page 16 and 17:
Page 18 and 19:
Page 20 and 21:
Page 22 and 23:
Page 24 and 25:
Page 26 and 27:
Page 28 and 29:
Page 30 and 31:
Page 32 and 33:
Page 34 and 35:
Page 36 and 37:
Page 39:
CHAPTER I: INTRODUCTION CHAPTER I:
Page 42 and 43:
Page 44 and 45:
Page 46 and 47:
Page 48 and 49:
Page 50 and 51:
Page 52 and 53:
Page 54 and 55:
Page 56 and 57:
Page 58 and 59:
Page 60 and 61:
Page 62 and 63:
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
Page 74 and 75:
Page 76 and 77:
Page 78 and 79:
Page 80 and 81:
Page 82 and 83:
Page 84 and 85:
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 95 and 96:
CHAPTER II: ELECTRICITY 2 ELECTRIC
Page 97 and 98:
CHAPTER II: ELECTRICITY electricity
Page 99 and 100:
CHAPTER II: ELECTRICITY Recent clim
Page 101 and 102:
CHAPTER II: ELECTRICITY Figure II
Page 103 and 104:
CHAPTER II: ELECTRICITY possibiliti
Page 105 and 106:
CHAPTER II: ELECTRICITY continental
Page 107 and 108:
CHAPTER II: ELECTRICITY Indirect Im
Page 109 and 110:
CHAPTER II: ELECTRICITY fire depart
Page 111 and 112:
CHAPTER II: ELECTRICITY • Local c
Page 113 and 114:
CHAPTER II: ELECTRICITY these, syst
Page 115 and 116:
CHAPTER II: ELECTRICITY • long in
Page 117 and 118:
CHAPTER II: ELECTRICITY • The net
Page 119:
CHAPTER II: ELECTRICITY centres etc
Page 123 and 124: CHAPTER III: INFORMATION AND COMMUN
Page 171: CHAPTER III: INFORMATION AND COMMUN
Page 177: CHAPTER III: INFORMATION AND COMMUN
Page 181 and 182: CHAPTER IV: OIL TRANSPORTATION AND
Page 193 and 194: CHAPTER IV: OIL TRANSPORTATION ANDM
Page 203: CHAPTER V: GAS CHAPTER V: GAS Sven
Page 206 and 207: CRITICAL INFRASTRUCTURE PROTECTION
Page 222 and 223:
Page 225:
CHAPTER VI: WATER CHAPTER VI: WATER
Page 228 and 229:
Page 230 and 231:
Page 232 and 233:
Page 234 and 235:
Page 236 and 237:
Page 238 and 239:
Page 240 and 241:
Page 242 and 243:
Page 244 and 245:
Page 246 and 247:
Page 248 and 249:
Page 250 and 251:
Page 252 and 253:
Page 254 and 255:
Page 256 and 257:
Page 258 and 259:
Page 260 and 261:
Page 262 and 263:
Page 264 and 265:
Page 266 and 267:
Page 268 and 269:
Page 270 and 271:
Page 272 and 273:
Page 274 and 275:
Page 276:
show all

Towards a Baltic Sea Region Strategy in Critical ... - Helsinki.fi

Create successful ePaper yourself

Delete template?

Save as template?