Analysis of a Redundant Architecture for Critical Infrastructure Protection

Critical infrastructures like the power grid are emerging as collection of existing separated systems of different nature which are interconnected together. Their criticality becomes more and more evident as the damage and the risks deriving from wrong behaviors (both accidental and intentionally caused) are increasing. It is becoming evident that existing (legacy) subsystem must be interconnected together following some disciplined and controlled way. This is one of the challenges taken by the European Project CRUTIAL, where an infrastructure architecture seen as a WAN of LANs is being proposed, where LANs confine existing sub-systems, protected by special interconnection and filtering devices (CIS - CRUTIAL Information Switches). Previous work led to the definition of the CIS internal and interconnection architecture, so that a set of CIS can collectively ensure that the computers controlling the physical process correctly exchange information despite accidents and malicious attacks....

• Type: Conference
• Year: 2007
• Where: ICSE
• Authors: Alessandro Daidone, Andrea Bondavalli, Paulo Veríssimo, Silvano Chiaradonna
• Keywords: CIS Replicas, CIS Resilience, ICSE 2007, Recovery Strategy, Software Engineering