25
PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB POWER PLANT ANAS MUSTAFA MOHAMMED AL-AGHBARI A project report submitted in partial fulfilment of the requirements for the award of the degree of Master of Computer Science (Information Security) Faculty of Computing Universiti Teknologi Malaysia JUNE 2013

PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

Embed Size (px)

Citation preview

Page 1: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB POWER PLANT

ANAS MUSTAFA MOHAMMED AL-AGHBARI

A project report submitted in partial fulfilment of the

requirements for the award of the degree of

Master of Computer Science (Information Security)

Faculty of Computing

Universiti Teknologi Malaysia

JUNE 2013

Page 2: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

iii

This project report is dedicated to my parents for their endless support and

encouragement. Also I dedicated my wife and my kids who supported me

emotionally during my study.

Page 3: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

iv

ACKNOWLEDGEMENT

First and foremost, I would like to express heartfelt gratitude to Ministry of

Defense in Yemen that sponsored me in my study and to my supervisor Dr.

Norafida Bint Ithnin for her constant support during my study at UTM. She

inspired me greatly to work in this project. Her willingness to motivate me

contributed tremendously to our project. I have learned a lot from him and I am

fortunate to have him as my mentor and supervisor

Besides, I would like to thank the authority of Universiti Teknologi Malaysia

(UTM) for providing me with a good environment and facilities such as Computer

laboratory to complete this project with software which I need during process.

Page 4: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

v

ABSTRACT

Power plants infrastructure is very important infrastructure because electricity

related with all aspect in our life. To be success infrastructure Power Plant must has

good security protection from the attacks. Physical security is the most important

because it is the first layer in security. In Yemen there are 18 power plants and

generate around 1268.05MW of electricity 835.5MW Using steam and gas and

432.55 using Diesel. Marib Power Plant the largest station in Yemen Republic and

cost $159.016000, it is include 341 MW and cover 27% from electricity in Yemen

while 73% come from others 18 power plants. Moreover, Marib Power Plant

supplies electricity to the capital city in Yemen Sana’a and other neighboring areas.

However, Marib Power Plant faces many physical attacks, the high risky attacks was

local armed tribesman, bombing and sabotage. According to the reports from

ministry of electricity, the attacks that happen caused a lot of problems for the

government (Social, political and economic). Therefore, this study aims to design

physical security measures framework for Marib Power Plant to reduce the physical

security attacks. The framework included many measures (Deterrence, Detection,

Delay, Response and Army role). Validation of this framework conducted by two

types: firstly, by conduct the interview with expert in Marib Power Plant, secondly,

by the hypotheses testing between the components of the framework. The results

from this study showed that, very important to reduce the attacks on Marib Power

Plant.

Page 5: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

vi

ABSTRAK

Infrastruktur loji kuasa merupakan infrastruktur yang sangat penting kerana

ia melibatkan tenaga elektrik sekaligus mengaitkan semua aspek dalam kehidupan

kita. Untuk menjadi infrastruktur yang berjaya, Loji Kuasa mesti mempunyai

perlindungan keselamatan yang baik dari serangan. Keselamatan fizikal adalah yang

paling penting kerana ia adalah lapisan pertama keselamatan. Di Yaman terdapat 18

loji kuasa yang menjana sekitar 1268.05MW daripada 835.5MW elektrik

menggunakan wap dan gas serta menggunakan 432.55 MW Diesel. Stesen Loji

Kuasa Marib adalah yang terbesar di Republik Yaman dan kosnya adalah $

159.016000 ini adalah termasuk 341 MW dan meliputi 27% daripada tenaga

elektrik di Yaman, manakala 73% datang daripada 18 loji kuasa yang lain. Selain

itu, Stesen Loji Kuasa Marib membekalkan elektrik ke ibu kota Sana'a di Yaman

dan kawasan-kawasan jiranya. Walau bagaimanapun, Stesen Loji Kuasa Marib

menghadapi serangan fizikal yang banyak, serangan berisiko tinggi adalah dari puak-

puak tempatan yang bersenjata, pengeboman dan sabotaj. Menurut laporan daripada

kementerian elektrisiti, serangan yang berlaku menyebabkan banyak masalah

kepada kerajaan (sosial, politik dan ekonomi). Oleh itu, kajian ini bertujuan untuk

mereka bentuk rangka keselamatan fizikal iaitu langkah-langkah untuk

mengurangkan serangan keselamatan fizikal keatas Loji Kuasa Marib. Rangka kerja

ini termasuk banyak langkah-langkah (Pencegahan, Pengesanan, Penangguhan,

Tindak Balas dan Peranan Tentera). Pengesahan rangka kerja ini dijalankan dengan

mengguakan dua kaedah: pertama, dengan mengadakan temu bual dengan pakar

Loji Kuasa Marib, kedua, dengan ujian hipotesis antara komponen rangka kerja

tersebut. Hasil daripada kajian ini menunjukkan bahawa, amat penting untuk

mengurangkan serangan keatas Loji Kuasa Marib.

Page 6: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

vii

TABLE OF CONTENTS

CHAPTER TITLE PAGE

TITLE PAGE

DECLARATION ii

DEDICATION iii

ACKNOWLEDGMENT iv

ABSTRACT v

ABSTRAK vi

TABLE OF CONTENTS vii

LIST OF TABLES xi

LIST OF FIGURES

xiii

1 PROJECT OVERVIEW

1.1 Introduction 1

1.2 Problem Background 3

1.3 Problem Statement 5

1.4 Aim of The Study 6

1.4 Research Questions 6

1.5 Objectives of the Study 6

1.6 Scope of the Study 7

1.7 Significant of the Study 7

1.8 Thesis organization

8

2 LITERATURE REVIEW

2.1 Introduction 9

Page 7: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

viii

2.2 Physical Security 9

2.2.1

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

2.2.8

Importance of Physical Security

Threats and Vulnerability

The Categories of Threats

Component of Physical Security

Threats and Vulnerability Control

Physical Security Models and Process

Concept of Physical Security Measuring

Physical Security Plan

10

10

11

14

15

16

18

25

2.3 Risk Assessment 26

2.3.1

2.3.2

Risk Assessment Framework

Risk Assessment Model

28

29

2.4 Power Plant in Developed Countries 30

2.4.1 Japan Power Plant 30

2.4.2 America Power Plant 33

2.4.3 U.K Power Plant 37

2.5 Power plants in Yemen 38

2.5.1

2.5.2

Marib Power Plant

Physical Threats on Marib Power Plant

41

41

2.6 Mapping Between Threats in Power Plant 44

2.7 Discussion 47

2.7.1 Deterrence 49

2.7.2 Physical Protection System Functions 50

2.7.3 Army Role 53

2.8 Summary

54

3 RESEARCH METHEDOLOGY

3.1 Introduction 55

3.2 Operational Framework 55

Page 8: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

ix

3.2.1 3.2.2

First Phase (Analysis Previous Studies on Physical Security

Second Phase (Propose New Elements and Propose physical security Framework for Marib Power Plant)

58

60

3.2.2.1

Design the Interview and Questionnaire

60

3.2.3 Evaluate the Framework and Final Framework

62

3.3 Summary

64

4 CHAPTER4 FRAMEWORK

IMPLEMENTATION

4.1 Introduction 65

4.2 Proposed Framework For Marib Power Plant 66

4.2.1 Deterrence 66

4.2.2 4.2.3

Physical Protection System Functions

Army Role

67

69

4.3 Proposed Framework Implementation 70

4.4 Proposed Framework and Hypotheses Development

72

4.5 Summary

74

5 ANALYSIS AND RESULT

5.1 Introduction 75

5.2 Validation the Components of the framework in Marib Power Plant

75

5.2.1 Personal Interview 76

5.2.2 Questionnaire 78

5.2.2.1 Demographic 78

5.2.2.2 Descriptive Analysis 79

5.2.2.3 Hypotheses Testing 86

5.3 Physical Security Measures Framework for Marib Power Plant

91

5.4 Summary 93

Page 9: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

x

6

DISCUSSION AND CONCLUSION

6.1 Introduction 94

6.2 Study Achievement 94

6.2.1 Interview with Expert 95

6.2.2 Hypotheses Testing 95

6.2.3 Contribution of the Study 96

6.3 Study Limitation 97

6.4 Future Study 98

6.5 Summary

99

REFRENCES 100

APPENDIX

Interview 104

Questionnaire 105

Page 10: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

xi

LIST OF FIGURES

FIGURE NO TITLE PAGE

1.1 Effects and Impacts of Electricity 2

2.1 Framework for Protection of Critical Infrastructure 17

2.2 Framework for Protection of Critical Infrastructure and Key Resources

18

2.3 Layers of Physical Security 19

2.4 Elements of Design Physical Security 19

2.5 Procedures of Physical Security 20

2.6 Concepts of Physical Security 20

2.7 Detection Terminology Showing Element Level Hierarchy

21

2.8 Delay Terminology Showing Element Level Hierarchy

22

2.9 Response Terminology Showing Element Level Hierarchy

22

2.10 Measures For Prevent Attacks On Power Plants 23

2.11 Concepts Of Physical Security 23

2.12 Summary Of Physical Security Planning Cycle 26

2.13 Risk Assessment Overview 27

2.14 Risk Assessment Process 27

2.15 Framework Control Threats And Vulnerability 28

2.16 Risk Assessment Model 29

2.17 Total Rate Unified Power 40

Page 11: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

xii

2.18

2.19

2.20

Physical Threats On Marib Power Plant

Level of Risk threats and Control In Marib Power Plant

Actions Comprising Detection Function

42

44

50

3.1

4.1

4.2

4.3

The Research Operational Framework

Deterrence to Reduce the Attacks in Marib Power Plant

Physical Protection System Function to Reduce the Attacks in Marib Power Plant

Army Role to Reduce the Attacks in Marib Power Plant

55

66

68

70

4.4

5.1

Proposed Framework

Final Physical Security Measures Framework For Marib Power Plant

72

92

Page 12: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

xiii

LIST OF TABLES

TABLE NO TITEL

PAGE

2.1 Guidelines For Physical Security 24

2.2

2.3

2.4

2.5

Threats On Power Plant In Japan

Threats On Power Plant In USA

Threats On Power Plant In Japan

List Of Power Plants In Yemen

33

36

37

39

2.6

2.7

2.8

Physical Security Threats And Control In Marib Power Plant In Yemen

Common Threats between Three Developed Countries and Marib Power Plant

Shearing Threats and Control Used in Three Developed Countries

43

45

46

2.9 Comparing The Physical Security Measures Between Six Studies

47

2.10 Effective Measures Used With Six Studies 48

3.1 Summary Of Research Methodology 57

3.2

5.1

5.2

5.3

5.4

5.5

5.6

5.7

5.8

Mapping Threats With Components

Mapping Threats With Components

Demographic Characteristics` Of Respondents

Deterrence Results

Detection Results

The Result Of Delay Component

The Result Of Response Component

Army Role Results

Correlation Between Deterrence and Physical Security

61

76

78

80

81

82

84

86

87

Page 13: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

xiii

2.9

5.10

5.11

5.12

Correlation Between (Detection, Delay And Response) With Physical Security

Correlation Between Army Role And Physical Security

Correlation Army Role and Deterrence

Correlation Army Role and Physical protection System Functions

88

89

89

90

Page 14: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

1

CHAPTER 1

RESEARCH INTRODUCTION

1.1 Introduction

Information security has become of great significance today because of the

extensive dissemination of information. This, in addition to the expansion of

computers and technology, has made attack on information easier to carry out.

Therefore, security must develop in sophistication along with advanced technology.

The threats may be logical or physical but as Weingart (2000) stated, a physical

attack occurrence is easy as opposed to logical. Also, Norman (2007) said that there

is no security without physical security.

So, focusing on physical security is very important because it is the first layer

of defense. Also, physical security for buildings and infrastructure is very important

to protect the information and assets from the threats and risks, because secured data

and media in storage could be damaged or stolen if the building is not well-secured.

So, secured entrance and access points can prevent potential threats and along with

this is the consideration of environmental and terrorist attacks that will damage the

building or infrastructure. So, physical security can help to maintain the building and

infrastructure to detect the attacks before they occur and to responnd as soon as

possible after their occurrence.

Page 15: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

Po

electricity

lives may

of electric

Figure1

Th

because it

In

electricity

in Marib

(Gaston an

a big issu

happened

economic)

many prob

ower plants

y is related t

stop as all

city infrastru

1.1: Effects

he figure ab

will affect

Yemen, th

y 835.5MW

feed the Dh

nd al-Daws

ue accordin

and this ca

). Accordin

blems in the

s infrastruc

to all aspec

activities de

ucture and i

and Impact

bove shows

all other inf

here are 18

using steam

hahban pow

sari, 2013).

ng to the

auses a lot o

ng to Redwa

e Yemeni ci

cture is a

ts of our liv

epend on it

ts impact on

ts of Electri

200

s that elect

frastructure

8 power pl

m and gas a

wer station,

However th

reports fro

of problems

an (2010), th

itizen’s life,

very imp

ves. If there

. The figure

n other infra

icity on othe

7)

tricity is a

es when it is

lants gener

and 432.55

the main s

he electricit

om Ministr

s for the gov

he continuo

, including:

portant infr

e is any pro

e below sho

astructures.

er Infrastruc

very impo

s shut down

rating aroun

using Dies

source of e

ty infrastruc

ry followin

vernment (S

ous electrici

rastructure

oblem in ele

ows the sign

ctures (Sim

ortant infras

n.

nd 1268.05

sel. Electric

lectricity fo

cture in Ye

ng the atta

Social, polit

ity shut dow

2

because

ectricity,

nificance

mpson,

structure

5MW of

city lines

or Sanaa

men has

cks that

tical and

wn led to

Page 16: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

3

• Business problems: the daily shut down lead to destroy many of the

merchandise, especially in retail, and stopped many of the daily

businesses

• Tourist Problems: lead to giving a bad picture of the infrastructure in

Yemen and thus, decline in tourism and investments,

• Problems investments: many investors escape from Yemen as a result

of poor infrastructure - some might say that most of the investment

projects have their own sources of electricity

• Security problems: repetitive shut down of electricity at night leads to

the risk of theft and burglary and increase of various crimes in the dark

alleys of the streets.

So, all these bring a lot of problems to the government. In other words, the

provision of good physical security will reduce the impact of threats and will

introduce good protection. This project focuses on physical security for a major

power plant in Yemen (Marib power plant).

1.2 Background of the Problem

Power plants are very important to provide electricity for in countries.

Undoubtedly, electricity is one of the most vital elements without which human

cannot proceed with the activities related to all aspects of life; for instance, in

hospital, factories and interruption in internet.

Marib faced significant security issues even before 2011. In addition to

having one of the highest levels of tribal conflict, because of the lack of government

control, militant groups used Marib as a staging ground for attacks. AQAP was

responsible for several high-profile attacks on electricity and oil resources in Marib

in 2010, as well as frequent attacks on government officials and security forces

(Gaston and al-Dawsari, 2013). Power plants in Yemen have been experiencing a

big obstacle concerning the infrastructure and some facilities in the past few years as

Page 17: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

4

its towers, facilities and power plants became the target of attacks, specifically in

Marib province. This resulted in impacting the every aspect of Yemeni citizens’

lives.

Marib gas station is the largest station in Yemen Republic which costs around

$159.016000, provides 341 MW and provides 27% of electricity in Yemen - 73% are

provided by 18 power plants. So any problems in this station causes interruptions in a

lot of cities which means a huge area will be plunged in darkness. In addition, a lot of

companies, factories and government organization will stop working. So that will

cost the government huge spatial loss in all sides, especially in the economy.

The Yemeni news Agency reported that, Eng. Khalid Rashed said in a press

conference in Sana’a that the total attacks that affected the power transmission lines

Merib - Sana’a, reached 141attacks which costs over 33YR billion consisting of cost

of spare parts, repairs and interrupted power (Fox, 2012).

The minister of electricity and power of Yemeni stated that the ministries

agreed on Friday 22 June 2012 to stop work in Marib gas- operated power station

and draw attention toward president Hadi and the government to bring complete

protection for transmission lines.

Dr. Saleh Somai told Yemen Fox that “the ministry chose to stop Marib gas

plant because of repeated attacks by vandals and will remain out of service until the

army and security do their duties in protecting the lines. The electrical national grid

would be destroyed completely if the repeated attacks on electric power transmission

lines continued and we did nothing”. Power plants in Yemen have been experiencing

a big obstacle concerning the infrastructure and some facilities in the past few years

as its towers, facilities and power plants became the target of attacks, specifically in

Marib province. This resulted in impacting the every aspect of Yemeni citizens’ lives

(Fox 2012).

So, each building and infrastructure must have physical security, to detect and

prevent attacks from happening. Also, all the staff inside the building should be

Page 18: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

5

familiar with physical security, by providing them with courses and seminars

(Longinow and Mniszewski, 1996), because physical security is the first phase in

protecting devices and data (Caddy, 2005) and should not be ignored in any

organization, either governmental or private. That is because successful attacks or

physical access means getting access to the information easily (Vesperman, 2002).

In addition, physical security plays an important role in protecting all the

assets responsible for the storage and data processing and operation systems

(Stallings, 2009). Although there are many types of assets that are essential for

continuity of organizational work, the most important one is the buildings because all

of the components of the organization are inside the building. Securing the building

strongly ensures weakness of the threats. The building threats include natural

disasters, criminal and terrorist attacks, political issue and accidental events (Renfroe

and Smith, 2011).

To implement a good protection for Power Plants, the facility managers

should be involved in developing a good physical security plan. That is because their

duties are planning and managing the building and infrastructure security, and thus,

they are able to identify the real risks and take the appropriate reaction that reduces

or eliminates such risks (Then and Loosemore, 2006; Lavy and Dixit, 2010).

1.3 Problem Statement

As reported by the Ministry of Electricity, more than 141 attacks were

attempted on Marib power plants and the outcome of the attacks cost the government

is over $153 Million in 2012-2013 (Fox, 2012) and there is no physical security for

frequent attacks can be protect Marib Power Plant.

Therefore, the problem statement is concerned with the need to propose

physical security measures framework to protect Marib Power Plant from the attacks.

Page 19: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

6

1.4 Aim of the Study

The current study aims to reduce the attacks on Marib Power Plant by

proposing physical security measures framework based on the previous studies on

physical security measures and the collection of data from Marib Power Plant.

1.5 Research Questions

Due to the security risks faced by Marib power plants infrastructures and

buildings in Yemen, this project attempts to answer the following questions:

i. What are the countermeasures used in physical security and what is the

risk ranking in Marib Power Plant?

ii. What are the measures needed to be used in the framework to mitigate the

risks?

iii. How can the proposed framework be evaluated?

1.6 Objectives of the Study

This study is conducted to achieve the following objectives:

i. To study and analyze previous studies on physical security measures to get

suitable strong measures to be used, and to examine the risks in Marib

Power Plant to come up with the risk ranking.

ii. To propose physical security measures framework in Marib Power Plants.

iii. To validate the proposed framework of Marib Power Plant.

Page 20: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

7

1.7 Scopes of the Study

To able to achieve the project objectives that have been already mentioned in

the earlier section, it is very crucial to determine the research focus boundaries that

will guard and lead in achieving the research objectives which are stated in the

following:

• The research focuses only on Marib power plants in Yemen.

• Data is collected from the top management by interviewing experts in Marib

Power Plant and distributing the questionnaire to staff in Marib Power Plant.

• The questionnaire answers are analyzed in terms of the relationship between

the security obstacles (deterrence, , detection, delay, response and defense)

and physical security measures.

• The current study is also based on the observation that the electricity was

shut down around 15 hours per day.

1.8 Significance of Study

This study contributes to reducing the attacks that happened in Marib Power

Plant. Also, the study can be applied in other critical infrastructure in Yemen to

protect it from the same attacks.

Page 21: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

8

1.9 Thesis Organization

This project contains six chapters. Chapter one explains the problems and

significance of this project and establishes the objectives that should be achieved

from this project. Chapter two contains the literature review which discusses

previous studies dedicated to this area. In addition, the overview of Marib power

plant is also provided in Chapter two. Chapter three explains the research

methodology that is followed in completing the project while chapter four contains

the initial findings. Chapter five provides an overview of the results and chapter six

contains recommendations.

Page 22: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

100

REFERENCE

Aagedal, J. O., F. den Braber, et al. (2002). Model-based risk assessment to improve

enterprise security. Enterprise Distributed Object Computing Conference,

2002. EDOC '02. Proceedings. Sixth International.

Alach, Z. J. (2007). Mapping the elements of physical security towards the creation

of a holistic physical security model.

American, N. (2007). Security Guidelines for the Electricity Sector: Physical

Security.

Andrews, M. H. a. A. (28-8-2012). "Nuclear Power Plant Security and

Vulnerabilities." Congressional Research Service(CRS Report for Congress):

1-15.

AndyS.Krupa(2003).http://www.sans.org/reading_room/whitepapers/recovery/oversi

ght-physical-security-contingency-planning_557

Bartlett, J., Kotrlik, J., and Higgins, C. (2001). Organizational research: Determining

appropriate sample size in survey research. Information Technology,

Learning, and Performance Journal.19(1): 43-50.

Challinger, D. (2008). Crisp Report From the Ground Up: Security for Tall

Buildings. An ASIS Foundation

Depoy, J., J. Phelan, et al. (2005). Risk assessment for physical and cyber attacks on

critical infrastructures, IEEE.

Drevin, L., H. A. Kruger, et al. (2007). Value-focused assessment of ICT security

awareness in an academic environment. Computers & Security 26(1): 36-43.

E.Long, l. (2005). "Security Solutions by Applied Research Associates, Inc.

Conferences, Rail Tasit, EMI.

Fort Leavenworth, K. (2006). DCSINT Handbook No. 1.02, Critical Infrastructure

Threats and Terrorism.

Page 23: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

101

Fox, Y. (2012). Electricity minister: Mareb plant stopped due to vandal acts.

newspaper.

Fox, Y. (2012). Yemen lost USD 154 mln due to power grids sabotage.

News Paper- Yemen Fox.

Galisson, R. M. P. E. (2009). Evaluation of physical security in a Movie.

Garcia, M. L. (2007). Design and evaluation of physical protection systems,

Butterworth-Heinemann.

Gaston, E. and N. al-Dawsari (2013). The Impact Of Transition On Local

Justice And Security In Yemen.

Gouin, B. (2007). Chapter 10 - Security measures: Physical security.

Strategic Security Management. Burlington, Butterworth-Heinemann:

183-215.

Gregory, P. (2009). CISSP guide to security essentials, Course Technology

Ptr.

Headquarters, D. o. t. A. (2001). fm31930 physical security.

Homeland Security Presidential, (2003). Critical Infrastructure Identification,

Prioritization, and Protection.http://www.dhs.gov/xabout/laws/gc

1214597989952.shtm#1

Johnson, E. C. (2006). Security awareness: switch to a better

Programme.Network Security 2006(2): 15-18.

Kallhoff, J. (2007). Physical Security.

Lavy, S., J. A. Garcia, et al. (2010). Establishment of KPIs for facility

performance measurement: review of literature. Facilities 28(9/10):

440-464.

Leedy, P. A., and Ormrod, J. E. (2001).Practical research: Planning and

design (7th ed.). Columbus, OH: Merrill Prentice-Hall.

Matalucci, R. V. (2002). Risk Assessment Methodology For Dams

(Ram-D Sm).

Maxim, P. (1999). Quantitative Research in the Social Sciences. New York:

Oxford.

Mayer, R., Davis, J., and Schoorman, D. (1995). An Integration Model Of

Organizational Trust. Academy Of Management.The Academy of

Management Review. 20(3): 709-34.

MERONI, S. (2011). Vulnerability Assessment And Security Journal of

Page 24: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

102

Physical Security 5.

Nuclear Energy Institute (2011) Safety and

Securityhttp://www.nei.org/resourcesandstats /Documentlibrary/Safety-and-

Security/factsheet/powerplantsecurity

Nuclear Services/Engineering Services (2012). "External Flooding

Probabilistic Risk Assessment Analysis Identification of Plant

Vulnerabilities."http://www.westinghousenuclear.com/Products_&_Services/

docs/flysheets/NS-ES-0219.pdf

Norman, T. (2007). 7 - Physical Security Elements. Integrated Security Systems

Design. Burlington, Butterworth-Heinemann: 139-178.

Onwubiko, C. and A. P. Lenaghan (2007). Managing security threats and

vulnerabilities for small to medium enterprises, IEEE.

PA Energy Alliance (2009). U.S. nuclear power plants safe, secure.

http://paenergyalliance.com/u-s-nuclear-power-plants-safe-secur

Paula D. Gordon (2012). The Japan Earthquake and Tsunami: Their Implications for

the U.S. Journal of Physical Security 6: 10-18.

Philpott, D. and S. Einstein (2006). The Integrated Physical Security Handbook,

Homeland Defense Journal.

Platt, F. N. (2002). Physical Threats To The Information Infrastructure. FLY: 1401.

Redwan (2010). the millions that lose from the citizens .. electricity Yemen help on

the inhibition of the Yemeni economy daily. News Paper- Alsaqer:

http://www.yemen90.net/t9751-topic.

Services, N. S. E. (2012). "External Flooding Probabilistic Risk Assessment Analysis

Identification of Plant Vulnerabilities."

Simpson, K. S. a. D. M. (2007). Critical Infrastructure Failure in a Natural Disaster:

Initial Notes comparing Kobe and Katrina." University of Louisnille.

Sinski, C. (2003). Structural Option Dr. Memari.

Stallings, W. (2009). Chapter 36 - Physical Security Essentials. Computer and

Information Security Handbook. R. V. John. Boston, Morgan Kaufmann:

627-643.

Then, S. K. and M. Loosemore (2006). Terrorism prevention, preparedness, and

response in built facilities. Facilities 24(5/6): 157-176.

Times, Y. (2012). Marib Power Station shuts down, army attempts to catch

saboteurs. Yemen Times.

Page 25: PHYSICAL SECURITY MEASURES FRAMEWORK FOR MARIB …eprints.utm.my/id/eprint/37018/5/AnasMustafaMohammedAlAghbariMFSKSM...government (Social, political and economic). Therefore, this

103

The Royal Geographical Society (March 2011). Dr Bruce Malamud answers

Questions On The Japanese Earthquake And Tsunami.

http://www.rgs.org/Our Work/Schools/Geography

+in+the+News/Ask+the+experts/Japanese+earthquake+

and+tsunami.htm.

Watson, J. and A. Scott (2009). New nuclear power in the UK: A strategy for

energy security? Energy Policy 37(12): 5094-5104.

Weingart, S. (2000). Physical security devices for computer subsystems: A

survey of attacks and defenses, Springer.

Whitehead, D., C. Potter III, et al. (2007). "Nuclear Power Plant Security Assessment

Technical Manual. SAND2007-5591, Sandia National Laboratories,

Albuquerque, NM.

Wikipedia (2012). Physical security.

Wikipedia (2013). Ancient history of Yemen.

Yusta, J. M., G. J. Correa, et al. (2011). "Methodologies and applications for critical

infrastructure protection: State-of-the-art." Energy Policy 39(10): 6100-6119.