{"id":12059,"date":"2017-07-28T18:52:37","date_gmt":"2017-07-28T18:52:37","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/"},"modified":"2026-08-08T04:33:05","modified_gmt":"2026-08-08T04:33:05","slug":"researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/","title":{"rendered":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security"},"content":{"rendered":"\n

Critical infrastructure operators have long faced the formidable security challenges of zero-day vulnerabilities and advanced persistent threats (APTs), both of which were employed in some of the most prominent cyberattacks in the sectors to date. But one researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.<\/p>\n\n\n\n

The threat is what might be called \u201cweaponized metadata,\u201d and the risks are detailed extensively in a new report, Metadata: The Most Potent Weapon in this Cyberwar<\/a>, recently published by the Institute for Critical Infrastructure Technology (ICIT), a Washington, D.C.-based cybersecurity think tank. ICIT produces many publications annually, but the 28-page report on metadata is notable for its urgent tone and sharp criticism of governments and businesses globally. <\/p>\n\n\n\n

James Scott, ICIT senior fellow and the report\u2019s author, in a recent interview with Fifth Domain, discussed the causes, potential effects and possible consequences of the metadata threat to critical infrastructure security. The risk is increasing, Scott said, because of growth in the collection, aggregation and sale of end users\u2019 internet metadata, as well as users\u2019 preference profiles and browser histories.<\/p>\n\n\n\n

\u201cMetadata is data about data,\u201d Scott explained. \u201cIt describes operations and activities at a high level. Sophisticated, and even some less formidable, threat actors can infer a great deal from the presence or absence of specific metadata.\u201d<\/p>\n\n\n\n

The ICIT report notes that metadata can be descriptive (e.g., identification details), structural (e.g., combination and container details) or administrative (e.g., creation, technical and access details). Examples of internet metadata include the title, sender and receiver of emails, the unique identification number (i.e., International Mobile Equipment Identity, or IMEI) of mobile devices and the duration of users\u2019 visits to websites. These examples are just a few of the dozens of data types that contextualize users\u2019 online behavior.<\/p>\n\n\n\n

But it\u2019s not just the metadata alone that makes this threat so significant, Scott explained. \u201cTh[e metadata] risks are compounded if the information can be combined with other stolen data sets. While the latter data inform the attacker about who the victim is, metadata profiles how they act.\u201d<\/p>\n\n\n\n

Armed with detailed knowledge of who victims are and how they behave online, threat actors can conduct a variety of cyber-enabled attacks, from social-engineering techniques such as spear phishing to \u201cpsychographic and demographic Big Data algorithms\u201d employed to push \u201cfake news.\u201d Scott\u2019s report provides detailed case studies on how metadata could be used to target anyone, from executives to entry-level employees, in specific critical infrastructure sectors, such as energy, finance and healthcare.<\/p>\n\n\n\n

\u201cPeople have a hard time altering their intrinsic behavior,\u201d Scott told Fifth Domain, \u201cespecially if they do not know that they are being monitored. Consequently, threat actors can leverage victims\u2019 unique browsing patterns to plan social-engineering campaigns, precision target propaganda, plant watering-hole sites, etc.\u201d<\/p>\n\n\n\n

While internet users have always generated metadata, Scott said the risk of its misuse is growing partly because of recent legislation, particularly S.J. Res. 34<\/a>, which allows \u201cdragnet surveillance initiatives\u201d by internet service providers (ISPs), telecommunications companies and other communications businesses. S.J. Res. 34 became law in April after passing Congress earlier in 2017 and effectively canceled stricter data privacy regulations<\/a> put into place by the FCC in December 2016.<\/p>\n\n\n\n

After quoting the 124-word bill in its entirety, the ICIT report concluded, \u201cThose few sentences undermine consumer privacy and radically redefine the cyber-threat landscape against every critical infrastructure silo.\u201d<\/p>\n\n\n\n

\u201cMetadata is no longer harmless,\u201d Scott said in the interview. \u201cFor years, advertisers have used it to influence behavior patterns. Self-serving, negligent data brokers were already a concern in the United States. Legislation, such as S.J. Res. 34, which passed despite no clear benefit to consumers, further commercializes and insecurely spreads sensitive metadata, which is dangerous and does not serve or protect consumer populations.\u201d<\/p>\n\n\n\n

In the report, Scott gives an extended example of how China could use metadata for counterintelligence operations, with potentially serious consequences to national security. Scott illustrates how, under the relaxed data privacy rules of S.J. Res. 34, a state-owned Chinese business (most likely a shell company) could buy metadata on U.S. consumers in bulk from a U.S. ISP. Chinese intelligence agents could then combine the metadata with data stolen by the Chinese APT threat actor Deep Panda in the 2015 Office of Personnel Management (OPM) breach, an incident that \u201cwill haunt the U.S. for decades,\u201d Scott wrote in the ICIT report.<\/p>\n\n\n\n

Using artificial intelligence, Chinese agents could then de-anonymized the internet metadata and correlate it to workers in critical infrastructure sectors. In combination with the detailed demographic and psychographic information contained in stolen SF-86 forms (used by individuals to apply for government security clearances), the threat actors could identify with pinpoint accuracy individuals who are susceptible to counterintelligence operations, along with effective methods for compromising each one.<\/p>\n\n\n\n

\u201cBrowsing histories that reveal frequent visits to gambling sites, multiple credit card pages, loan applications or even dating sites could indicate a federal employee is ripe for financial blackmail or transformation into an intelligence asset,\u201d the ICIT report notes.<\/p>\n\n\n\n

\u201cThis threat is already present, and attack campaigns may already be in motion,\u201d Scott said in the Fifth Domain interview.<\/p>\n\n\n\n

The biggest threat vector for weaponized metadata may be one of the simplest, according to Scott. \u201cCritical infrastructure organizations should be most worried about precision-targeted, social-engineering attacks that were tailored by leveraging demographic and psychographic Big Data analytics against cross-referenced data sets containing metadata and information exfiltrated in previous breaches,\u201d he said.<\/p>\n\n\n\n

By Scott\u2019s judgment, the healthcare sector, followed closely by energy and finance, are the most vulnerable critical infrastructure sectors. \u201cElectronic health records, a systematic lack of cyber hygiene and a focus on patient health above all else make the [healthcare] sector an attractive and vulnerable target,\u201d Scott told Fifth Domain.<\/p>\n\n\n\n

But the security practices of buyers (e.g., marketers), sellers (e.g., ISPs) and middlemen (e.g., data brokers) in the robust, convoluted consumer data marketplace are also a problem, according to Scott.<\/p>\n\n\n\n\n\n

As for how end users can protect themselves, Scott recommends using security technologies such as virtual private networks (VPNs) and only selectively sharing information in online profiles and digital platforms. But, he conceded, \u201cThere is little the average consumer can do to mitigate the cascading impacts of S.J. Res. 34 other than contacting the FCC or their Congressmen and voicing their disapproval of the bill \u2013 that does absolutely nothing beneficial for consumers \u2013 and its overwhelming negative impacts.<\/span>
<\/p>\n\n\n\n

Scott urged leaders in the public and private sector to consider the risks to end users from current data policies. \u201cData must be protected according to its value and potential uses, whenever it is collected, wherever it is stored, whenever it is processed and however it is transmitted,\u201d Scott said. \u201cRisk of unsolicited exposure, disclosure or compromise are best reduced by limiting the parties with access to the data and by considering emerging exploitation vectors when deciding whether to collect, store or transmit information.\u201d<\/p>\n\n\n\n

If leaders fail to formulate effective data privacy policies, Scott warned, \u201cPopulations will suffer from improper data handling, and the effects will eventually backlash on public and private businesses and on legislators.<\/p>\n","protected":false},"excerpt":{"rendered":"

One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.<\/p>\n","protected":false},"author":7,"featured_media":37643,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"9":{"categories":["cyber"],"primary_category":"cyber"}}},"categories":[1],"tags":[],"coauthors":[503],"class_list":["post-12059","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":{"subheadline":"","legacy_arc_id":"UJZFP2RBFFFUPMDAWMDOOV3LTE","arc_canonical_url":"\/critical-infrastructure\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\nResearcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security - Federal Times<\/title>\n<meta name=\"description\" content=\"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security\" \/>\n<meta property=\"og:description\" content=\"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-28T18:52:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T04:33:05+00:00\" \/>\n<meta name=\"author\" content=\"Brad D. Williams\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brad D. Williams\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t \"@context\": \"https:\\\/\\\/schema.org\",\n\t \"@graph\": [\n\t {\n\t \"@type\": \"Article\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#article\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/\"\n\t },\n\t \"author\": {\n\t \"name\": \"migration\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t },\n\t \"headline\": \"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security\",\n\t \"datePublished\": \"2017-07-28T18:52:37+00:00\",\n\t \"dateModified\": \"2026-08-08T04:33:05+00:00\",\n\t \"mainEntityOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/\"\n\t },\n\t \"wordCount\": 1218,\n\t \"commentCount\": 0,\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg\",\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"CommentAction\",\n\t \"name\": \"Comment\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#respond\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebPage\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/\",\n\t \"name\": \"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security - Federal Times\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t },\n\t \"primaryImageOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#primaryimage\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg\",\n\t \"datePublished\": \"2017-07-28T18:52:37+00:00\",\n\t \"dateModified\": \"2026-08-08T04:33:05+00:00\",\n\t \"description\": \"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.\",\n\t \"breadcrumb\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#breadcrumb\"\n\t },\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"ReadAction\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#primaryimage\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg\"\n\t },\n\t {\n\t \"@type\": \"BreadcrumbList\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/2017\\\/07\\\/28\\\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\\\/#breadcrumb\",\n\t \"itemListElement\": [\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 1,\n\t \"name\": \"Home\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"ad_zone\": \"home\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 2,\n\t \"name\": \"Uncategorized\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/uncategorized\\\/\",\n\t \"ad_zone\": \"uncategorized\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 3,\n\t \"name\": \"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security\"\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebSite\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"name\": \"Federal Times\",\n\t \"description\": \"Federal Times\",\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t },\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"SearchAction\",\n\t \"target\": {\n\t \"@type\": \"EntryPoint\",\n\t \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t },\n\t \"query-input\": {\n\t \"@type\": \"PropertyValueSpecification\",\n\t \"valueRequired\": true,\n\t \"valueName\": \"search_term_string\"\n\t }\n\t }\n\t ],\n\t \"inLanguage\": \"en-US\"\n\t },\n\t {\n\t \"@type\": \"Organization\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t \"name\": \"Federal Times\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"logo\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t \"caption\": \"Federal Times\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t }\n\t },\n\t {\n\t \"@type\": \"Person\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t \"name\": \"migration\",\n\t \"image\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"caption\": \"migration\"\n\t },\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t }\n\t ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security - Federal Times","description":"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security","og_description":"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/","og_site_name":"Federal Times","article_published_time":"2017-07-28T18:52:37+00:00","article_modified_time":"2026-08-08T04:33:05+00:00","author":"Brad D. Williams","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Brad D. Williams","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security","datePublished":"2017-07-28T18:52:37+00:00","dateModified":"2026-08-08T04:33:05+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/"},"wordCount":1218,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/","name":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg","datePublished":"2017-07-28T18:52:37+00:00","dateModified":"2026-08-08T04:33:05+00:00","description":"One researcher is warning leaders in government and industry of an old threat that, fueled by recent legislation and commercial practices, is quickly surpassing zero days and APTs as perhaps the greatest risk to critical infrastructure security.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2017\/07\/28\/researcher-metadata-the-most-potent-weapon-against-critical-infrastructure-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Uncategorized","item":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/","ad_zone":"uncategorized"},{"@type":"ListItem","position":3,"name":"Researcher: Metadata the \u2018most potent weapon\u2019 against critical infrastructure security"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/snagfilms-a.akamaihd.net1s-and-0s-75c8909c599f08de8c55aba6eabd9b32304dcd97-1.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/12059","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=12059"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/12059\/revisions"}],"predecessor-version":[{"id":12064,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/12059\/revisions\/12064"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=12059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=12059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=12059"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=12059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}