An industrial smart grid operator manages several automated telemetry, control, and audit subsystems. Match each operational security scenario on the left with the primary CIA triad pillar or related security objective that is either violated or enforced on the right.
- An adversary intercepting unencrypted microwave radio links between electrical substations to read operational load and power usage metrics.Confidentiality
- An attacker deploying a distributed flood against grid control gateways, delaying emergency shutdown signals during a transformer failure.Availability
- A malicious actor modifying calibration data within a remote terminal unit (RTU) database, leading to inaccurate telemetry without disrupting connectivity.Integrity
- A chief engineer authorizing a critical relay logic patch using their private key and smart card, enabling auditors to indisputably attribute the change.Non-Repudiation
Answer
1. Intercepting unencrypted microwave links → Confidentiality
2. Flooding control gateways during emergency → Availability
3. Modifying RTU database calibration data → Integrity
4. Signing relay logic patches with a private key → Non-Repudiation
2. Flooding control gateways during emergency → Availability
3. Modifying RTU database calibration data → Integrity
4. Signing relay logic patches with a private key → Non-Repudiation
Each scenario maps to its core security objective based on the nature of the threat or control. Unauthorized data viewing targets Confidentiality; blocking system access targets Availability; unauthorized data modification targets Integrity; and cryptographically proving the origin of an update enforces Non-Repudiation.
Step-by-Step Solution
Key Concept
Core Pillars of Information Security (CIA Triad) and Non-Repudiation