{"id":28403,"date":"2018-03-28T16:19:32","date_gmt":"2018-03-28T16:19:32","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2018\/03\/28\/protecting-critical-infrastructure-from-dire-threats\/"},"modified":"2026-08-08T18:33:46","modified_gmt":"2026-08-08T18:33:46","slug":"protecting-critical-infrastructure-from-dire-threats","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2018\/03\/28\/protecting-critical-infrastructure-from-dire-threats\/","title":{"rendered":"Protecting critical infrastructure from dire threats"},"content":{"rendered":"\n

IP NETs, a technology that fits well with plug-and-play devices and software, are increasingly the go-to for multiple types of communication. But recent events show that IP NETs have opened communications and operations to truly dire cyber-threats.<\/p>\n\n\n\n

The Ides of March came this year with chilling notice from U.S. government agencies that Russian hackers have attained a foothold<\/a> within the systems that control our country\u2019s most critical systems<\/a> \u2014 the electric grid, water processing facilities, air transportation, and even nuclear facilities.<\/p>\n\n\n\n

Details of the threats came out in news reports, but are perhaps best summed up by a Department of Homeland Security updated warning<\/a> to industry which included a screenshot taken by Russian operatives that showed they could penetrate the targeted companies\u2019 critical controls.<\/p>\n\n\n\n

The threat actors, as DHS calls the state-sponsored hackers, gained access through clever and persistent spear-phishing and watering-hole ruses. They then used standard Windows processes to exploit or leverage registry and other file types to manipulate credentials, alter or create scheduled tasks, crack passwords and manipulate remote access services to connect to intended targets. The objective, according to authorities, seemed to be internal reconnaissance and espionage suggesting intent to disrupt or disable critical systems, should such an advantage prove opportune in the future.<\/p>\n\n\n\n

It appears the only thing keeping these threat actors from shutting down these vital systems is political motivation. And that means it is past time for industry-wide adoption of comprehensive, defense-in-depth cybersecurity. That includes the type of cybersecurity that\u2019s already in place across U.S. military facilities nationwide, and the kind of security widely and readily available to private and highly regulated businesses within and beyond U.S. borders.<\/p>\n\n\n\n

The typical cyber-defense methodology has been based on simple system architectures tying together office PCs, usually managed by IT specialists rather than cybersecurity specialists. This line of defense consistently proves inadequate as intrusions become more sophisticated.<\/p>\n\n\n\t