Proceedings of The 12 th European Conference on

Most of current industries and their critical infrastructure rely heavily on the Internet for everything. The increasein the online services and operations for various industries has led to an increase in different security threats and maliciousactivities. In US, the department of homeland security reported recently that there have been 200 attacks on core criticalinfrastructures in the transportation, energy, and communication industries (Erwin et al., 2012). This paper is concernedwith the growing dependence of modern society on the Internet, which has become an ideal channel and vital source ofmalicious activities and various security threats. These threats could have an impact on different distributed systems withinand across all the critical infrastructures, such as industrial networks, financial online systems and services, nuclear power generation and control systems, airlines and railway traffic controllers, satellite communication networks, nationalhealthcare information systems ... etc. The major problem is that the existing Internet mechanisms and protocols are notappropriately designed to deal with such recently developed problems. Therefore, a rigorous research is required todevelop security approaches and technologies that are capable of responding to this new evolving context. This paperpresents various security threats and incidents over the past recent years on different critical infrastructure domains. Itintroduces some security measures including vulnerability assessment and penetration testing approaches for critical