Technology

‘Real News From The Blaze’ Discusses Cybersecurity Risk to Key Infrastructure

The Department of Homeland security confirmed Tuesday, an ongoing series of coordinated cyberattacks against the U.S. targeting critical infrastructure going as far back as December. The major targets in these attacks have been those in the natural gas-pipeline industry, who were infiltrated by attackers gathering sensitive information and even subverting industrial control systems. The attack has startled security experts who have expressed significant concerns since hearing the news.

Joe Weiss, managing partner for the security firm Applied Control Solutions, told AFP that the latest attacks highlight the vulnerability of so-called critical infrastructure systems.

He said control systems vulnerabilities can be found in the electrical grid, water utilities and others as well as pipeline operators.

“Once you get to those systems, really bad things happen,” he said. “That’s where people die.”

But tracking the attacks can be difficult because of a lack of forensics, Weiss said.

“You have your usual list of suspects, nation-states like Iran, radical Muslims, a bunch of radical organizations in the states who don’t like anyone they feel is not environmentally friendly,” he told AFP

“But you also now have cyber exploit code on the Web for free that any number of people can get to.”

The Department of Homeland Security’s investigative division, the ICS-CERT, has taken an unusual step in issuing an alert and speaking publicly about the incident as a means to heighten awareness of the dangerous situation. Kevin Hemsley, a leader in the ICS-CERT, told PC World that a “sophisticated threat actor” is going after pipeline operators, mostly through spear-phishing, and has in some cases been able to compromise them. Hemsley has not discounted whether the “threat actor” yet to be identified could be a nation-state.

Will Cain broke down the case on “Real News” Wednesday, and former Executive Assistant Director of the FBI Shawn Henry joined the panel to discuss what damage a cyberattack like this could have on our way of live.

Comments (8)

  • Allliars
    Posted on May 10, 2012 at 11:28pm

    Hmmm I was told by a engineer that the grid is on its own matrix of the internet and was not connected to the internet we all use. So it seems that businesses should be responsible for it’s security not the government. Another sham takeover of the internet on dishonest facts so the government can pass more laws to control all the internet.

    Report Post »  
  • capitalismrocks
    Posted on May 10, 2012 at 1:08am

    It amazes me the laziness and stupidity… all of these systems, there is no exception can be physically isolated into locked room environments, requiring physical access to the direct wired terminal to control them, there is no need or reason to have these systems connected onto the internet. Even if they needed remote access, then the systems can run call-back modem connections, basically nothing more then a simple embedded linux board that would be securely logged onto it, to send a command to connect. Nothing else, that command would then have a system call OUT via a modem to a designated telco# and connect to a remote access system, once connected, the operator puts in the access password and can remotely, through a single private dial connection, perform a function or such. Each function or level of functions could then each have different passwords to access commands and that codebook would be maintained in a security datacenter and its passwords cycled every 30 days through random number generators and printed out and placed into what is called a “Run Book” This is all very straight forward and is done by many corporations already, to implement into vital infrastructure systems is a no-brainer.

    Oh wait… we‘re talking about the gov’t, I forgot… much too complicated for gov’t.

    Report Post » capitalismrocks  
  • HaroldHeard
    Posted on May 10, 2012 at 12:44am

    In my opinion, this is only a drill, who is pulling off these attacks, my guess is/would be both China and Russia (the usual suspects). Like a shark to its prey they feel it out, first before the attack.

    Let’s take a look at a few news worthy items, shall-we:

    1. Iran testing a missile, yet it blow-up in the best level for a EMP (Electro Magnetic Pulse)
    2. Iran sending a boat into the Gulf of Mexico
    3. Iran planning drills to shut-down the Straits of Hormuz
    3. Hacker getting into America’s natural gas infrastructure

    Looks like someone is planning on shutting down all energy production/usage. With the above discussed items it clear that evil exists and evil has a plan, please be prepared.

    Pray for divine guidance from God.

    Report Post » HaroldHeard  
  • justangry
    Posted on May 9, 2012 at 9:18pm

    I got an idea… don’t design critical infrastructure to be connected to the freaking web.

    Report Post » justangry  
  • moussiagilda
    Posted on May 9, 2012 at 9:01pm

    Oooh, am I a risk to cybersecurity. Sorry.

    Report Post »  
  • Mutiny
    Posted on May 9, 2012 at 9:00pm

    Remember you will be painted as unpatriotic or crazy/dangerous if you like having freedom.

    “They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety” – Benjamin Franklin

    Report Post » Mutiny  
  • Individualism
    Posted on May 9, 2012 at 8:49pm

    More False Flag attacks for propaganda to take your rights away and give corporate donors profit.

    Report Post » Individualism  
  • lukerw
    Posted on May 9, 2012 at 8:48pm

    The Government wants the Control Systems to be in place… so they can Control Energy. But, once in place… they worry about Hacking! Schizophrenia is fun to observe!

    Report Post » lukerw  

Sign In To Post Comments! Sign In