The digital systems that run the electricity grid, gas pipelines and other critical infrastructure in the US have 25 yearsā worth of fundamental weaknesses to hacking that need fixing.
Thatās a main finding in from MITās by a former National Security Agency inspector general, Joel Brenner, with input from industry experts.
āControls on an oil pipeline can use the same hardware as your teenagerās computer,ā says Brenner. Suppliers make the most profit by selling general hardware components that have various uses, but they have security flaws. āWe know how to fix the vulnerabilities, but thereās no market incentive for companies to do so,ā he says.
Advertisement
Around is privately owned, so the report says the Trump administration could offer tax breaks to companies that improve their security. That way there would be greater financial value in choosing more secure hardware.
The report also proposes a mandatory minimum security standard for critical infrastructure components. āIn the US, we have a body that will tell you if the cord on your toaster is safe to use, but there is no comparable body to say, for example, if a controller on a pipeline is safe,ā says Brenner.
Isolation drive
Key parts of the digital systems should be isolated from the main network to make them less susceptible to attacks from hackers, the report suggests.
Alongside incentives, regulation and penalties could help improve critical infrastructure cybersecurity, but they will only be useful for the worst offenders, says at Vanderbilt University in Tennessee. āWhile regulation with penalties can help the really poor firms, providing incentives will have the biggest overall impact.ā
Another way to boost cybersecurity is to improve the sharing of information between firms about the latest threats, the report says. This should be a ācornerstoneā for cybersecurity initiatives, says at the University of Texas.
But fixing all the weaknesses in the digital systems that control critical US infrastructure will require a coordinated, long-term effort. āWeāve taken 25 years to get into this predicament. Weāre not going to get out of it overnight,ā says Brenner.
