In 1999 a technology manager called Kevin Ashton coined the phrase “The Internet of Things”.
It was to convey the fact that not everything connected to the Internet generates data via humans tapping on keyboards. Today, these “things” now include elements of our critical national infrastructure via what are called SCADA (Supervisory Control And Data Acquisition) systems or ICS (Industrial Control Systems). Unfortunately, these systems can be just as vulnerable to attack as our laptops.
Security through obscurity has helped to protect these systems until recently as they are not obvious to regular Internet users. However, there is no longer anywhere to hide. Many know that search engines such as Google, if queried in using “advanced operators”, can reveal exposed equipment. This became even simpler with search engines such as Shodan which are specifically to help locate exposed webcams, routers, etc but which can just as easily reveal SCADA systems.
Lack of direct connection to the Internet is no guarantee of security either. More often than not, unprotected control systems can be reached indirectly using the “swivel chair interface” where a human can be convinced to transfer something from the Internet to automated systems, or vice versa.
In 2010 we saw how even the most secure “air gap” can be breached when the Iranian nuclear reprocessing plant at Natanz was infected with the Stuxnet virus. This appears to have been achieved when an operator plugged in an infected USB stick to an isolated PC that was used to communicate with the embedded computers that controlled and reported upon the centrifuges producing enriched uranium. The Stuxnet virus simultaneously caused the centrifuges to malfunction whilst reporting that all was well to the operators. Leave a USB stick lying around with what looks like a free game, and you’d be surprised how many users will plug it into the nearest computer.
Since this incident there has been a growing realisation that various elements of a critical national infrastructure are similarly vulnerable. They use similar, if not identical, embedded computer systems as were used at Natanz. The initial thought was one of defending the realm against foreign aggressors. After all, it was an obvious way to cripple a country without firing a physical shot. Why launch missiles if you can switch out the lights and turn off the water. It’s cheaper too. So much so that this form of attack has become a great leveller, allowing small nations to potentially punch well above their weight.
For a while there were detractors who have said that this type of threat is nonsense, and that it simply could not happen. However, tests were already being conducted at research institutes such as the Idaho national laboratories (known as Aurora) by the time Stuxnet was released. Such tests showed that access to these SCADA systems could not only turn off equipment that we all rely upon but it could cause the equipment to self-destruct.
Hence, embedded computing needs to be kept updated and have protection just as much as the computers with which we are all more familiar. Unfortunately, keeping embedded computers updated can be problematic. Perversely, although they may be vulnerable to remote attacks, updating their software (known as firmware if it cannot be accessed routinely by a remote computer) can require visits to the physical devices. This takes time and effort, and when coupled with a history of complacency about their risk of attack, many systems remain vulnerable for significant periods after a vulnerability is reported.
The Latest Bing News on:
Intelligent Infrastructure
- 40.2% of Warren Buffett's $362 Billion Portfolio Is Invested in 2 Artificial Intelligence (AI) Stockson May 11, 2024 at 3:45 am
You won't catch Warren Buffett chasing the latest stock market trend, but many companies in Berkshire Hathaway's portfolio are benefiting from AI nonetheless.
- Infrastructure Is Remaking Geopoliticson May 10, 2024 at 7:44 am
The complex hardwiring and technological dependence of modern life have made people reliant on a wide array of infrastructure systems, and governments now compete to create and maintain the networks ...
- Improved threat intelligence aimed by expanded Nozomi, Mandiant collaborationon May 9, 2024 at 6:58 am
Operational technology and internet-of-things cybersecurity provider Nozomi Networks and Google's Mandiant have forged an expanded threat intelligence collaboration aimed at bolstering industry and ...
- Bitcoin Miner Core Converts Data Infrastructure for AI (1)on May 9, 2024 at 6:56 am
Bitcoin miner Core Scientific Inc. is converting part of its infrastructure in order to power high-performance computing operations for artificial-intelligence companies.
- Good Cyber Hygiene Can Impede Adversary Meddling in U.S. Infrastructureon May 8, 2024 at 8:32 am
On Capitol Hill today, Director of National Intelligence Avril D. Haines told members of the Senate Armed Services Committee that in many cases where it's been evident that U.S. adversaries have ...
- Amazon to Invest $9 Billion in Singapore Cloud Infrastructureon May 7, 2024 at 10:32 pm
The tech giant will spend $9 billion to expand its cloud services in Singapore, coming as global tech companies are boosting their data-center footprints in Asia amid a boom in demand for ...
- Pioneering Sustainable Urban Growth: Intelligent City's Blueprint For The Future Cityon May 7, 2024 at 2:00 pm
Intelligent City is revolutionizing urban development combining advanced manufacturing, robotics and software for sustainable, efficient construction, setting the standard for future cities.
- New Market Research Finds Up to 20% of AI Initiatives Fail Without Intelligent Data Infrastructureon May 7, 2024 at 6:02 am
New Market Research Finds Up to 20% of AI Initiatives Fail Without Intelligent Data InfrastructureNetApp sponsored research by leading market research firm identifies key components of implementing ...
- Microsoft to Invest $2.2 Billion in AI Infrastructure in Malaysiaon May 1, 2024 at 8:47 pm
The U.S. tech giant’s investment over four years will build on previously announced plans to construct its first data center region in Malaysia, and mark its single biggest investment in the country.
- Biden directs spy agencies to share more intelligence with private sector over China, Russia threatson April 30, 2024 at 9:45 am
President Biden is directing U.S. spy agencies to more proactively share intelligence with the private companies handling critical American infrastructure, to guard against risks from foreign ...
The Latest Google Headlines on:
Intelligent Infrastructure
[google_news title=”” keyword=”Intelligent Infrastructure” num_posts=”10″ blurb_length=”0″ show_thumb=”left”] [/vc_column_text]The Latest Bing News on:
Risks of Intelligent Infrastructure
- Infrastructure Is Remaking Geopoliticson May 10, 2024 at 7:44 am
The complex hardwiring and technological dependence of modern life have made people reliant on a wide array of infrastructure systems, and governments now compete to create and maintain the networks ...
- New Survey by Visual One Intelligence Shows IT Teams Prioritizing Less VMware, More Cloud Efficiencyon May 8, 2024 at 2:44 pm
DALLAS, May 8, 2024 /PRNewswire/ -- A new survey shows that IT infrastructure teams' top priorities today are directly focused on reducing VMware dependency while moving on-prem workloads to the cloud ...
- Got AI? You'll Need It as Climate Change Worsens Flood Riskon May 7, 2024 at 5:00 pm
Artificial intelligence tools will boost users' ability to model ... the state and local communities were unprepared for the deluge. Flood control infrastructure was inadequate. Canals built for ...
- Pioneering Sustainable Urban Growth: Intelligent City's Blueprint For The Future Cityon May 7, 2024 at 2:00 pm
Intelligent City is revolutionizing urban development combining advanced manufacturing, robotics and software for sustainable, efficient construction, setting the standard for future cities.
- Feds: Reducing AI Risks Requires Visibility & Better Planningon May 6, 2024 at 4:59 pm
When the US Department of Energy (DoE) analyzed the use of artificial intelligence and machine learning ... government assessment of the benefits and risks of using AI, especially in the critical ...
- DOE Outlines 10 Categories of AI Applications for Critical Energy Infrastructure in New Report; Puesh Kumar Quotedon May 2, 2024 at 5:03 pm
The Department of Energy has released a report that identifies 10 categories of artificial intelligence applications for critical energy infrastructure and a set of four risk categories.
- Transportation Department seeks AI solutions for transit infrastructureon May 2, 2024 at 5:00 pm
The Department of Transportation aims to incorporate artificial intelligence throughout the nation’s transportation infrastructure ... Sensors, risk analyses, digitized asset management ...
- Biden directs spy agencies to share more intelligence with private sector over China, Russia threatson April 30, 2024 at 9:45 am
President Biden is directing U.S. spy agencies to more proactively share intelligence with the private companies handling critical American infrastructure, to guard against risks from foreign ...
- Defending infrastructure, securing systems key to CISA’s new AI guidelineson April 30, 2024 at 7:38 am
The guidelines are part of Homeland Security’s ongoing efforts to reduce the risks, and maximize the benefits of artificial intelligence.
- U.S. Government Releases New AI Security Guidelines for Critical Infrastructureon April 30, 2024 at 3:36 am
The U.S. government has unveiled new security guidelines to fortify critical infrastructure against AI-related risks.
The Latest Google Headlines on:
Risks of Intelligent Infrastructure
[google_news title=”” keyword=”Risks of Intelligent Infrastructure” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]