https://www.hstoday.us/subject-matter-areas/infrastructure-security
Protecting our critical infrastructure from both cyber and physical threats will be a key challenge for 2019 and the years following. The Department of Homeland Security (DHS) describes critical infrastructure as “the physical and cyber systems and assets that are so vital to the United States that their incapacity or destruction would have a debilitating impact on our physical or economic security or public health or safety.”
Critical infrastructure has and is being targeted by hackers, nefarious organizations, and state actors because of its vitality to the American economy. The energy sector stands out as being particularly vulnerable. This ecosystem of insecurity includes power plants, utilities, nuclear plants, and The Grid. Protecting our National Grid is certainly an encompassing topic that keeps DHS, DoD and intelligence community planners up at night. The threats can be cybersecurity attacks, from Electronic Magnetic Pulse (EMP) generated from a geomagnetic solar flare or from a terrorist short-range missile, or from a physical assault on utilities or power plants.
According to a recent Ponemon Institute Report, three-quarters of energy companies and utilities have experienced at least one recent data breach. Overseas in Ukraine and Japan, hostile cyber attacks on power plants have been successful. We are quite vulnerable. Much of our grid still relies on antiquated technologies, and more investment in hardening defenses is needed. As technology exponentially advances with artificial intelligence, and as threat actors (including cyber mercenaries) easily gain destructive tools via the dark web, the risks grow.
A recent report by the House Energy and Commerce Committee summed up the challenges: ”Cybersecurity is a shared problem, and not just abstractly. The Internet by its technical design requires at least two devices, connected through wires or spectrum, communicating through standardized networking protocols. Consequently, even if one end of a connection is secure, the other might not be, and that puts both at risk. Multiplied by the millions upon millions of individual connections that make up the Internet, the end result is that the only feasible way to provide any appreciable level of cybersecurity is cooperation. More so than nearly any other shared resource, cybersecurity requires a ‘whole-of-society’ approach, in which individuals and organizations across both the public and private sectors play vital, integral roles.”