The tenuous network of interconnected data that supports our nation's critical infrastructure has been built up, computer by computer, over only the last few decades. From punch cards to the supercomputers constructed by pioneers in today's fields, computers have been controlling our nation's critical sectors nearly every step of the way. As designers of today's critical systems gravitate slowly towards systems that require less human oversight than ever before, the vulnerability of the networks that control our electricity systems, water supply, and banking services also continues to increase. In recent control system security reviews, the Departments of Energy and Homeland Security (DHS) hired experts from Idaho National Labs who found that not only do "all of the evaluated systems suffer from high-impact security vulnerabilities that could be exploited by a low-skill-level attacker," but "in currently deployed systems, enhanced security controls cannot easily be implemented while still assuring basic system functionality" (Turner). While the federal government has attempted on several occasions to outline its strategy to implement cybersecurity policies, its defining statement on the issue is in the form of the National Infrastructure Protection Plan (NIPP). Even then, these government documents mean little if neither government nor private agencies implement them in their respective fields.
/lp/association-for-computing-machinery/protecting-critical-infrastructure-implementing-integration-and-7BNjTk4Qn7