Cybersecurity Related Resources

Department of Homeland Security (DHS) Automated Indicator Sharing (AIS) initiative - The AIS initiative meets the requirements set forth by Congress in the Cybersecurity Act of 2015 to create a mechanism for real-time sharing of cyber threat indicators and defense measures with both federal and non-federal entities.

Protection of Transportation Infrastructure from Cyber Attacks: A Primer - TRB's Protection of Transportation Infrastructure from Cyber Attacks: A Primer provides transportation organizations with reference materials concerning cybersecurity concepts, guidelines, definitions, and standards. The primer is a joint product of two TRB Cooperative Research Programs, and is categorized as Transit Cooperative Research Program (TCRP) Web-Only Document 67 and National Cooperative Highway Research Program (NCHRP) Web-Only Document 221.

The Primer delivers strategic, management, and planning information associated with cybersecurity and its applicability to transit and state DOT operations. It includes definitions and rationales that describe the principles and practices that enable effective cybersecurity risk management. The primer provides transportation managers and employees with greater context and information regarding the principles of information technology and operations systems security planning and procedures.

The report is supplemented with an Executive Briefing for use as a 20-minute presentation to senior executives on security practices for transit and DOT cyber and industrial control systems. A PowerPoint summary of the project is also available.

Project: Project Information
Project Number: 20-59(48)

Aviation ISAC - The Value of Information Sharing Faye Francy - Executive Director January 14, 2016

Investing in Cybersecurity Lawrence A. Gordon January 2016

Using Metrics to Gain Management Support for Cyber Security InitiativesCraig Schumacher Chief Information Security Officer Idaho Transportation Dept. January 2016

Overview of Recommended Practice - SAE J3061, Cybersecurity Guidebook for Cyber-Physical Vehicle Systems Lisa Boran January 2016

The Need for Operational and Cyber Resilience in Transportation Systems Dr. Nadar Mehravari MBCP MBCI

Vehicle Cyber-Security:Carry-in Device Vulnerabilities Hiro Onishi, Kelly Wu

Presentations from 2016 TRB Annual Meeting

• Cyber Risk Management Captain Verne Gifford's PowerPoint Presentation from Annual Meeting

• 2015 Year in Review Edward Fok

Aviation-Information Sharing & Analysis Center (A-ISAC) Community Outreach PowerPoint Presentation from Monthly Meeting Sept 22, 2015

ACRP Report 140 - Airport Cooperative Research Program Guidebook on Best Practices for Airport Cybersecurity

Idaho Transportation Dept. NIST Framework matrix from Subcommittee telcon on 4/2/15

Presentations from 1/13/2015 Cyber Security Subcommittee Meeting

• Agenda for Subcommittee Meeting on 1/13/2015

• FHWA Transportation Systems Cyber-Security Framework, Bob Arnold

• You've Been POwned, Recent Cyber Incidents , Ed Folk

• NCHRP 20-59(48):Effective Practices fro the Protection of Transporation Infrastructure from Cyber Incidents, David Fletcher and Ron Frazier

• Summary of Cyber Security Subcommittee Activities, Mike Dinning

• APTA Control and Communications Security Standards, and Cybersecurity Program at MARTA, Joy Thompson

NIST (Second and Final) Draft Special Publication 800-82 Revision 2, Guide to Industrial Control Systmes (ICS) Security - available for public comment Feb 9 through March 9, 2015

Stakeholder Engagement and Cyber Infrastructure Resilience - Department of Homeland Security

Fictional Case Study - Department of Homeland Security, 1/17/2014

Voluntary Program for Critical Infras tructure Cybersecurity Enhancement - Department of Homeland Security, 1/17/2014

Cybersecurity: Selected Legal Issues – Congressional Research Service R42409, 4/17/2013

Cybersecurity: Authoritative Reports and Resources Congressional Research Service R42507, 4/17/2013

Statement for the Record, Worldwide Threat Assessment of the U.S. Intelligence Community - Office of the Director of National Intelligence.- 3/12/2013

Perspectives on Cybersecurity - Remarks by General Keith Alexander - General Keith Alexander, Commander, US Cyber Command; Director, National Security Agency/Chief, Central Security Services, World Affairs Council.- 2/19/2013

Mandiant Intelligence Center Report - APT1 Exposing One of China's Cyber Espionage Units.

FBI - The FBI investigates cyber-based terrorism, espionage, computer intrusions, and major cyber fraud. This website contains articles about how to protect yourself, common internet frauds/scams, and how to report a cyber-incident.

Cyberpatriot - a national high school cyber defense competition created to inspire high school students toward careers in cybersecurity or other science, technology, engineering, and mathematics (STEM) disciplines critical to our nation's future.

President Obama's speech saying "cyber threat is one of the most serious economic and national security challenges we face as a nation"

Discovery News, Cybercrime articles - a collection of articles on cybercrime

Hacker - Facebook Group

Hak5 - a tech show put together by IT security professionals discussing hardware and software issues