InfoGram

July 19, 2001

NOTE: This InfoGram will be distributed weekly to provide members of the emergency services sector with news and information concerning the protection of their critical infrastructures. For further information please contact the U.S. Fire Administration's Critical Infrastructure Protection Information Center at (301) 447-1325 or email at usfacipc@dhs.gov.

Critical Infrastructure Protection Premise

Attacks on the physical and cyber-based systems of fire and emergency service departments will seriously degrade efficient performance or prevent minimum essential operations of those departments. Attacks may be in the form of natural disasters (e.g., earthquakes, floods, hurricanes, etc.) or come from people (e.g., criminals, hackers, delinquents, etc.). However, any nuclear, biological, or chemical accident may have the same or worse effect on the infrastructures of first responders. Such accidents must also be considered as well as the previously mentioned attacks when determining appropriate protection measures. For the purpose of applying protection measures, it is acceptable and preferable to refer to the attacks and accidents discussed in this paragraph as threats against critical infrastructures. Critical infrastructure protection from these threats involves the application of a systematic analytical process fully integrated into all fire and emergency community plans and operations. Community leaders are invited to contact the USFA CIP Information Center (301-447-1325) for details regarding the CIP process.

HazMat Train Derailment and Fire

A sixty car freight train with eight cars carrying hazardous materials (hydrochloric and fluorosilicic acids) derailed in a downtown Baltimore tunnel and caught fire at approximately 3 p.m. on 18 July (Wednesday). According to ABC and CBS news, the potentially dangerous smoke billowing out of the tunnel caused Maryland State officials to close all key roads into the city. "Authorities warned people to stay indoors, close windows in homes and cars, and shut off all ventilation systems." The accident also forced postponement of the second game of the Baltimore Orioles and Texas Rangers doubleheader at Camden Yards. Firefighters had to use thermal imaging equipment to pinpoint the burning cars deep within the 1.5 mile tunnel. After maintaining a defensive posture overnight, they eventually braved the searing flames and began fire suppression on Thursday morning (19 July). A water-main break possibly related to the derailment worsened the situation by causing the collapse of part of a heavily traveled thoroughfare as well as power outages. Initially, this hazmat accident had the probability of being a major threat to the critical infrastructures of emergency first responders. The consideration here is that the physical systems required to efficiently perform rescue missions in the general area of the accident could have been significantly degraded or eliminated. This time, they were not!

Houston Flood Affects Critical Infrastructures

9-1-1 systems were quickly overwhelmed and some went out-of-service when Tropical Storm Allison pounded Houston last month. The Houston Police 9-1-1 Public Safety Answering Point (PSAP) was flooded and non-operational for two days. The Harris County Sheriff's PSAP was also flooded during the storm and forced to relocate. Firefighters were not able to respond to many of the calls they did receive. Although they never closed, five fire stations were flooded and at least three trucks were damaged beyond repair. Firehouse.com News reported the biggest difficulty for first responders was obtaining enough rescue boats and manpower. Now, one month later, Houston continues to feel the effects of the storm. A major fire station is expected to close for six months because of a toxic mold outbreak inside the building's previously saturated drywall and cabinets. Additionally, a senior Texas medical official just announced that intensive care beds at Houston hospitals are full. Dr. David Persse stated the city currently has only one functioning (level 1) trauma center. He said the closing of several area hospitals damaged by the storm has caused a terrible crisis. Most ambulances will remain indefinitely on diversion status and forced to wait to complete patient off-loading. These delays have seriously reduced emergency response times.

NIPC Caution

The National Infrastructure Protection Center (NIPC) has issued a caution regarding the legal aspects of retaliatory counterattacks against hackers. "Retaliating against the apparent source of an intrusion or attack may have a greater chance of landing the original victim in court than it has of punishing the perpetrator." The NIPC cautioned that a counterattack against a system believed to be the source of a cyberattack may violate a number of state and federal laws pertaining to the unauthorized access or disruption of computers and computer networks. "One can never be certain that the apparent source of a network intrusion or disruption is in fact the actual source." The NIPC advises that rather than launching a counterattack against an innocent bystander, a more prudent action would be to contact the proper authorities, including one's local FBI Field Office.

CIP Advisory

Leaders of the fire and emergency services sector are further advised to have a computer network defense policy in place. Personnel charged with the protection of the department's network should be thoroughly informed as to the recommended steps to execute in the event of a network intrusion or denial-of-service attack. To reduce liabilities following an intrusion or attack, the department's policy should specifically state that a "no counterattack" rule is in effect with clear instructions on how to contact the appropriate law enforcement agency.

USFACIPC Weekly Lexicon: Firmware

A software application that is permanently stored on a computer's ROM (read only memory). The application can be accessed but not altered after installed.