Critical Infrastructure Protection in Brazil

Transcription

1 First IEEE International Workshop on Critical Infrastructure Protection Critical Infrastructure Protection in Brazil Sérgio Luís Ribeiro Edson Kowask Bezerra Emilio Tissato Nakamura November 3-4, 2005 Darmstadt, Germany

2 Content 1 Overview Telecommunications in Brazil 2 Project History 3 Motivations 4 Challenges 5 6 Brazilian Context Critical Telecommunications Infrastructure 7 Set of Methodologies 10 8 MCI 2 9 Results of MCI 2 New Directions 2

3 Overview Telecommunications in Brazil Until 1998 Since 1999 State owned Privatization New rules Special funding for R&D Regulatory agency Center of R&D Growth of the sector New players 3

4 The Project - History 2002 Project was proposed to the government; 2003 Government and the telecommunications regulatory body approved the project; 2004 Research funding was received; 2005 The interest in CIP grew to other areas (critical infrastructure); 2006 New directions. 4

5 Motivations The regulatory body would like to have information to subsidize the government to formulate standards and rules, strategies and law to protect the critical telecommunications infrastructure; The regulatory body and government would like to have methodologies to protect the critical telecommunications infrastructure; The need for recommendations to prevent and respond to incidents and consequently guarantee operational continuity, national security and sovereignty; The importance of information security is growing in Brazil; Telecommunications play an important role in social inclusion, alongside government aid and social, economic and educational development. 5

6 Critical Infrastructure Protection Challenges Risks have to be considered on a nationwide level; Risks impact the country: Socially; Politically; Economically. This broad scope must involve society, academia, government and industry; The inclusion of social, political and economic factors increases the level of complexity; Critical infrastructure protection strategies differs from one country to another. 6

7 Brazilian Context Foto: Ag. Reuters 7

8 Brazilian Context Population is over 180 million; It is the worlds 5 th largest country with a territory of over 8.5 million km 2 and a longitudinal extension of over 6,000 km; Brazil is a continental country with a rich landscape where nearly every type of vegetation and climate can be found; Such size also exacerbates the discrepancies in social, economic and cultural areas consequently: Telecommunications play an important role in social inclusion, alongside government aid and social, economic and educational development; Telecommunications is essential for national integration, where so many different people, cultures and ways of life exist; The only 5-times World Cup champion (6-times in 2006). 8

9 Critical Telecommunications Infrastructure Protection Model The critical portions of the infrastructure are determined based upon the national context created by an analysis of social, political and economic factors that can impact the country. 9

10 Critical Telecommunications Infrastructure Protection Model An ideal scenario can be considered to be the scenario that considers every security control for every identified threat. It would be the perfect world. 10

11 Critical Telecommunications Infrastructure Protection Model The ideal scenario is compared to the real scenario 11

12 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 12

13 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 13

14 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 14

15 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 15

16 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 16

17 Set of Methodologies The model and the set of methodologies can easily be adapted to the specific contexts of other countries due to the fact that they take into consideration the most relevant risk factors to any country, those being society, economics and politics. 17

18 Methodology for Critical Infrastructure Identification (MCI 2 ) 18

19 Methodology for Critical Infrastructure Identification (MCI 2 ) 19

20 Methodology for Critical Infrastructure Identification (MCI 2 ) 20

21 Methodology for Critical Infrastructure Identification (MCI 2 ) 21

22 Methodology for Critical Infrastructure Identification (MCI 2 ) 22

23 Methodology for Critical Infrastructure Identification (MCI 2 ) 23

24 Methodology for Critical Infrastructure Identification (MCI 2 ) 24

25 Methodology for Critical Infrastructure Identification (MCI 2 ) 25

26 Methodology for Critical Infrastructure Identification (MCI 2 ) 26

27 Set of Methodologies 27

28 New Directions Apply the set of methodologies to others critical infrastructures; Consider the interdependence between critical infrastructures; Develop software to simulate situations (situation center); Develop a solution to monitoring and correlation (in real time); Utilize GIS for CIP; National working groups; International cooperation. 28

29 THANK YOU! Sérgio Luís Ribeiro Phone: +55 (19) CPqD Centro de Pesquisa e Desenvolvimento em Telecomunicações Rod. Campinas Mogi-Mirim, km 118,5 SP Campinas SP BRASIL Edson Kowask Bezerra kowask@cpqd.com.br Phone: +55 (19) Emilio Tissato Nakamura nakamura@cpqd.com.br Phone: +55 (19) CPqD Technologies & Systems, Inc. 101 NE Third Ave Suite 1500 Fort Lauderdale, FL 33301, USA