Critical US Infrastructure and Fair Fights

Recent direct attacks on critical US infrastructure lead us to ask:  How much of that is there?

Bruce Schneier asks:

Is 85% of US Critical Infrastructure in Private Hands?

Most US critical infrastructure is run by private corporations. This has major security implications, because it’s putting a random power company in — say — Ohio — up against the Russian cybercommand, which isn’t a fair fight.  .... '

Which is then debated heavily in the comment, some good debate and comments 

This was brought up by Paul Rozenzweig in Lawfare Blog

Paul Rosenzweig is the founder of Red Branch Consulting PLLC, a homeland security consulting company and a Senior Fellow at the R Street Institute. He is also a Senior Advisor to The Chertoff Group. Mr. Rosenzweig formerly served as Deputy Assistant Secretary for Policy in the Department of Homeland Security. He is a Professorial Lecturer in Law at George Washington University and a Board Member of the Journal of National Security Law and Policy.  ...'

DHS Promises Help for States Struggling with Digital Attacks on Critical Services

 Notable are the recent increases in ransomware, and the broad issues with Microsoft servers, and how much we depend on digital systems.   This will have to be the solution until we develop others. 

The Cybersecurity 202: DHS Official Promises Help for States Struggling with Digital Attacks on Critical Services   By The Washington Post,  March 23, 2021

State and local governments have been begging the government for more resources since they are on the front lines of a growing number of cyberattacks that lock up the computer systems of government services even more critical in a pandemic – including hospitals, schools and benefit distribution systems.

A surge in efforts by hackers holding data hostage in exchange for a fees has become a top concern for the Department of Homeland Security's cybersecurity division, its acting director now says.

"Because right now, if there was a catastrophic cyber incident affecting states and they did lack the resources to address it, we would not be able to move as quickly and expeditiously as we need to respond and recover," acting Cybersecurity and Infrastructure Security Agency director Brandon Wales said at an event hosted by the Auburn University Center for Cyber and Homeland Security yesterday.

From The Washington Post

View Full Article