Obama Will Propose New Efforts to Make Our Creaky Physically Dangerous Critical Infrastructure CyberSafe

One of Obama’s key proposals in tonight’s State of the Union will be yet another effort to shore up the cybersecurity of our critical infrastructure.

As a threshold matter, I find it a remarkable coinkydink that the WaPo just reported the leaked findings of an NIE saying that the Chinese (and Israelis and Russians and the French, but the Chinese are bigger and badder, apparently) continue to rob us blind via cybertheft. I look forward to learning whether this — unlike the convenient drone rule book leaks supporting John Brennan’s confirmation — get reported as sanctioned leaks, as required under the Intelligence Authorization.

And speaking of John Brennan, he’s the Homeland Security Czar. A big part of his job is keeping us safe from precisely these kinds of attacks. So why didn’t he get a single question about why he should be CIA Director considering he has been such an abject failure keeping us safe from cyberattacks? (He was asked a question about CIA’s role in cybersecurity, but not asked to explain why he has been such a failure in his current role.)

Now, frankly, I don’t know that that is much John Brennan’s fault. Folks will say that the problem is — as it has been since Richard Clarke first started fearmongering on this front — that corporations won’t participate willingly and no one is going to make them.

But the proposal — which you’ll see if you tune in — doesn’t change that. It’s still voluntary.

And here’s the thing that all the cyberexperts in the world seem to be missing. Not only are the private owners of our critical infrastructure unwilling to fix their cyberdefenses. They’re not willing to keep their brick and mortar infrastructure up to date either. See, for example, PG&E or ConEd‘s recent records, for example.

Look, if these companies refuse to keep up their physical infrastructure and their cyber infrastructure, there’s probably an underlying reason motivating their negligence that no amount of immunity or winks or risk-free information sharing on the cyber side is going to fix. Moreover, if they are physically fundamentally unsafe, no amount of tinkering with their cybersecurity is going to make them safe. They’ll be vulnerable to a terrorist attack and be vulnerable to not entirely random failures and explosions.

You need to solve the underlying problem if you want to keep our critical infrastructure safe. And yet another EO, particularly one limited to cybersecurity and not affect brick and mortar integrity, will not do that.

Updated: Reading Obama’s longer proposal, it does aim to increase the “resiliency” of our physical infrastructure too. So it is not limited to cyber. That said, the underlying problem remains. Private companies aren’t spending the money to invest in this, whether it is physical resilience (or bare minimum functionality) or cyberdefense.

Tweet about this on Twitter0Share on Reddit0Share on Facebook0Google+0Email to someone

7 Responses to Obama Will Propose New Efforts to Make Our Creaky Physically Dangerous Critical Infrastructure CyberSafe

Emptywheel Twitterverse
emptywheel EO 12333, under which NSA conducts most of its spying? OLC ruled that "“An executive order cannot limit a President." http://t.co/Y6LHNv2mIX
1mreplyretweetfavorite
emptywheel Another thing missing from the EO12333 discussion: How George Bush pixie dusted the order, without telling anyone. http://t.co/Y6LHNv2mIX
3mreplyretweetfavorite
emptywheel @Eclectablog Just till Saturday. It's a Halloween costume.
4mreplyretweetfavorite
emptywheel RT @Eclectablog: Republican Mike Bishop, candidate in MI-08, has had a VERY bad couple of weeks http://t.co/0YL9dElpMv
13mreplyretweetfavorite
emptywheel <<<< turning blue holding my breath tho I was wondering what @csoghoian was having so much fun working on. @NateWessler @onekade
29mreplyretweetfavorite
emptywheel @onekade If only some NGO can sic someone like @NateWessler on that issue.
37mreplyretweetfavorite
emptywheel @matthewstoller Don't you say that or Chiquita's big GOP donors will take their bananas and defect to Brazi--oh wait. Too late.
39mreplyretweetfavorite
emptywheel DOJ IG knows how to keep GOP in his camp, releases new report showing ATF/AZ USA failures on investigation. http://t.co/AuaDNi9jHM
44mreplyretweetfavorite
emptywheel As US prepares to withdraw, ISAF decided to start hiding details on ANSF troop capability. https://t.co/BjsPXBeubI (Reup fr @JimWhiteGNV)
47mreplyretweetfavorite
bmaz @kennwhite So, jesus, I have a string of a gazillion UID characters that shows up on my ATT iPhone. Still no good way to get rid of it?
48mreplyretweetfavorite
emptywheel @JimWhiteGNV I hear that'll ruin the rice cooker. @onekade
49mreplyretweetfavorite
JimWhiteGNV @onekade More like Badassmati rice, amirite? @emptywheel
50mreplyretweetfavorite
February 2013
S M T W T F S
« Jan   Mar »
 12
3456789
10111213141516
17181920212223
2425262728