Security balance control performance and risk

Security Balance: Control, Performance, And Risk

Describe security principles and objectives and how they relate to the different components of the system-of-systems described in the readings.

System of Systems (SoS) is a concept that "connects the seemingly different parts with the whole to solve large-scale problems" (SoS, 2013, Purdue Engineering). Systems are independent yet are fundamentally connected. A good example of a complex system based upon these principles is that of an airplane. "Many systems…operate various parts of the plane, but the plane flies when all its systems work in tandem and doesn't fly if the systems work independently of each other" (SoS, 2013, Purdue Engineering). From a security perspective, one of the problems with SoS design is that even if the discrete components of the system are secure, when they work in tandem they may not be so and security can become compromised (Waller, Haddock, & Jones 2010:4).

For a system to work optimally there must be a dialogue between the different components. If the whole system or the parts of the interconnecting systems are too secure, conversation between the discrete compartments of the system can be disrupted. Thus, there is always a need to balance security with functionality. Critical components of SoS security include a "boundary check," which means the system has a secure boundary between itself and the outside world; "data flow security" which limits data flow without security measures; "buffer overrun" and "cascade vulnerability," or detecting vulnerabilities when systems are working together (Waller, Haddock, & Jones 2010:14).

Q2. Discuss how the security objectives of confidentiality, integrity, and availability are prioritized in a smart grid environment.

A smart grid is "refers to a class of technology people are using to bring utility electricity delivery systems into the 21st century, using computer-based remote control and automation… smart grid means 'computerizing' the electric utility grid. It includes adding two-way digital communication technology to devices associated with the grid" (Smart grid, 2013, U.S. Department of Energy). This enhances confidentiality because as the network's sensors are continually gathering data, there can be direct two-way communication between the grid and the operating control center, effectively eliminating any 'middleman' in communication and reducing the possibility of impingement by outside sources. Integrity and availability is enhanced because of automation technology as well because the central location can immediately "adjust and control each individual device or millions of devices," enabling flexible system responses (Smart grid, 2013, U.S. Department of Energy).

Q3. Discuss the internet of things and its likely consequences for developing an enforceable information assurance (IA) policy and implementing robust security architecture.