Saturday, April 24, 2021

 Protect Critical Infrastructure

President Biden should reallocate funds in his Infrastructure Bill from its lowest priority projects to hardening our nakedly vulnerable, most critical infrastructure (critical systems) against Cyber-attacks from the Public Internet. Some of the most critical systems: Electrical Grid, Water purification and distribution, and pipelines. Long ago, China had reportedly penetrated many electrical systems; and, “60 Minutes” showed the ••destruction•• via the Internet of a large generator in only a few minutes.

Private Wide Area Networks (Private WANs) can provide a fast, feasible, proven way to secure critical systems. If President Biden plans to spend two Trillion dollars on infrastructure, that should include helping all critical intrauterine utilities to quickly move those systems to private WANs—••NOT•• a single government network. That would quickly morph into the same mess we have today. Specifically:  

·       Move every critical system, including remote computers used to monitor and control the equipment, from the Public Internet to a Private WAN. This would a computer that cannot reach the Internet; not simply putting a second Network Interface Card in a computer attached to the Internet.

·       Copy every computer and server, prior to wiping the drive, “bit-buy-bit” for offline later penetration analysis.

·       Rebuild each computer and server from a blank drive to its proper configuration.

Recently, Admiral Charles Richard, Commander of the U.S. Strategic Command, was reported as testifying that nuclear weapons could become “the least bad option” in a war with Russia, China, or both. As war clouds gather, over Taiwan, North Korea, Russia, Ukraine, Iran, Lebanon, and Israel, critical systems need hardening against cyber-attacks more than ever; doing less could tie the hands of the President in a crisis.

In 1982, the bank for which I worked, and virtually every other bank, used a Private WAN, whether owned or leased, to operate every terminal and printer in every branch and office. This included processing virtually every financial transaction. I believe Public Utilities also used private WANs before the Public Internet became available; although, I have no experience in that industry.

Considering the testimony of Admiral Richard, please consider the following very plausible scenarios:

·       China:

o   China invades Taiwan.

o   The President moves to the defense of Taiwan.

o   China ••destroys•• every electric generator near the Mississippi River from Cape Giraudoux, MO to Cairo, IL,

o   China threatens to destroy every generator in the United States unless the President gives up Taiwan.

·       Russia probably can attack critical systems almost as effectively as China. That could allow Putin to use similar threats against an American intervention in defense of Ukraine.

·       Perhaps worst of all, the Mullahs in Iran might get the same attack capability. If successful, they conceivably could:

o   Attack Israel and follow the “China scenario” above.

o   Try to ignite a war between the great powers by launching an attack on one and “pinning the attack on” one or both of the others.

I do not want any President to have to consider either jeopardizing the entire electrical grid or using nuclear weapons in the face of aggression by any nation. Moving critical utilities to Private WANs could reduce the danger of any nation miscalculating American Resolve. Some other advantages of hardening infrastructure include:


Addressing a critical vulnerability earlier Presidents have ignored or kicked down the road.
  • ·       Republicans might support the project, rendering the entire Bill bipartisan.
  • ·       Having utility rate payers pay for most of the project over time by making low interest
         or no-interest loans to the utilities for, say, ten years.
  • ·       Upon completion, the Project will leave America, our allies, our adversaries, the world,
         much safer.

 As always, comments invited.

DJ

No comments: