Midterm Prep Flashcards

1
Q

Examples of Cyber Systems

A

PCs, Mobile Phones, Embedded Devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Examples of Physical Systems

A

Motors, Pumps, Lights, Generators, Valves, Relays

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Definitions of Cyber Physical Systems

A

Integration of computing and physical processes.

Embedded systems together with their physical environment.

Complex, multi-disciplianary, physically aware next gen engineered systems. Include observation, communication, and control aspects of physical systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Special Interest Organization to Foster Collaboration between Industry, Education, and Government.

A

CPSVO (CPS Virtual Organization)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

System Components of CPS

A

Elements of physical world, networks, sensors, actuators, and the cyber system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Physical World

A

Physical phenomenon that will me monitored or controlled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Cyber Systems

A

Standard computing and embedded devices which process information and communicate with their distributed environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Important difference between most CPS and Cyber Systems?

A

Irreversibility or pre-emption of actuator operations. Physical actions taken by the actuators generally cannot be reversed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Example of CPS IOT in my home?

A

Ecobee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Definition of Smart Manufacturing

A

the use of embedded software and hardware technologies to optimize productivity in the manufacture of goods or delivery of services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Benefits of Smart Manufacturing

A

Improved safety, productivity, efficiency, more flexible

workflow and new forms of collaboration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

CPS Examples

A

Robots, building automation,, emergency response, air transportation, intelligent transportation, critical infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

CPS Channelges

A

Interoperability, Security, Dependability, predictability, reliability, sustainability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Interoperability

A

Ability of systems to work together and exchange information.
Attributes: Composability, Scalability, Heterogeneity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Predictability

A

The degree of foreseeing of a system state behavior functionality, either qualitatively or quantitatively.

Attributes: Accuracy, compositionality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Reliability

A

Degree of correctness which a system provides to perform its function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Sustainability

A

Being capable of enduring without compromising requirements to the system while renewing the systems resources and
using them efficiently.

A highly sustainable system should be long lasting, it should be self healing,
and actually dynamic, and able to evolve under various circumstances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Dependability

A

The property of a system to perform required
functionalities during its operation, without significant degradation in its performance and outcome.

Dependability reflects a degree of trust put into the entire system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Security

A

Security has several different

attributes, including integrity and confidentiality.

20
Q

Challenges for Securing CPS

A

They are fundamentally different than standard IT systems

21
Q

Possible CPS Adversaries

A

Cybercriminals, disgruntled employees, terrorists, activists, and organized criminal groups, and nation states

22
Q

Security objective for CPS and IT: Availability and Confidentiality

A

CPS: Available
IT: Confidential

23
Q

Network Topology for CPS and IT: Static or DHCP

A

CPS: Static
IT: DHCP

24
Q

Patching for CPS and IT: Frequent or Infrequent

A

CPS: Infrequent
IT: Frequent

25
Q

Countermeasures

A

Design novel attack detection and attack resilient algorithms and architectures

26
Q

Moving target defense

A
For example, if we can detect
then an attack is on the way,
we may be able to change the meaning of
the control commands in the system to
increase the resiliency of the system.
27
Q

Body that has cybersecurity standards for the power grid

A

NERC (North American Electric Reliability Corporation) authorized to enforce compliance of the standards.

NIST published a guide too for Industrial Control Systems Security.

28
Q

Detection of Anomalies

A

May be able to detect anomalies on the physical system that are undetectable from the IT side.

29
Q

Resilience

A

Designing control systems that can survive attacks. e.g. redundancy, separation of privileges, operate using open loop control.

30
Q

Deterrance

A

Successful legislation,
law enforcement,
intentional cooperation

31
Q

Power Ecosystem Levels

A

Generation- Where the electrons are generated using coal or whatever

Transmission system- wheelbarrow from generation to distribution

Distribution- Last stop before it gets to your home

Load- Your home

32
Q

Power Grid Equipment: Transformer

A

Step voltage up or down

33
Q

Power Grid Equipment: Circuit breaker

A

Sits ahead of the transformer and protects all the downline equipment from inrush currents that would burn the line down.

34
Q

Power Grid Equipment: Recloser

A

Protects the line that goes to your neighborhood and comes to your house.

35
Q

Type of Network: BAN

A

Body Area Network like bluetooth.

36
Q

Security of a system is relative to what two things?

A

A set of desired properties.

An adversary with specific capabilities.

37
Q

CIA

A

Confidentiality, Integrity, and Availability

38
Q

Tools for Confidentiality

A

Encryption, Access Control, Authentication, Physical Security

39
Q

What is assurance?

A

How trust is provided and managed in computer systems.

40
Q

Anonymity

A

Property that certain records or transactions are not to be attributable to any individual.

Aggregation (combining data of many individuals), mixing (intertwining of transactions, information communications in a way that cannot be trace to an individual), proxies, pseudonyms.

41
Q

“Industrial Network”

A

is referring to any network operating some sort of automated control system that communicates digitally over a network

42
Q

“Critical Infrastructure”

A

is referring to critical network infrastructure, including any network used in the direct operation of any system upon which one of the defined “critical infrastructures” depends.

43
Q

smart grid

A

an update to traditional electrical transmission and distribution systems to accommodate digital communications for metering and intelligent
delivery of electricity

44
Q

Which regulation attempts to distinguish the critical versus noncritical systems.

A

HSPD-7

45
Q

NIST’s 800

A

series documents provide best practices and information of general interest to information security.