White House Chronicle

News Analysis With a Sense of Humor

  • Home
  • King’s Commentaries
  • Random Features
  • Photos
  • Public Speaker
  • WHC Episodes
  • About WHC
  • Carrying Stations
  • ME/CFS Alert
  • Contact Us

Cybersecurity — Some History and a New Approach

February 18, 2023 by Llewellyn King Leave a Comment

People often ask me who are the most interesting or most influential people I have met. It is easy to say Margaret Thatcher or Bill Clinton, but sometimes the real history makers are never known outside of their specialty. One such was Richard Morley.

A mutual friend took me to meet Morley at his home in New Hampshire about 23 years ago. We spent a delightful afternoon there. He let me move a pile of earth from one spot to another with a backhoe operated by a personal computer.

I didn’t realize that I was in the presence of a great inventor, a member of industrial royalty, who had moved technology a giant step forward and sped up the automation revolution.

Morley did that in 1968 when he and colleagues at General Motors perfected the programmable logic controller. With the PLC, automation had arrived for the car industry and much else.

If it is moved, stored, welded, shaped, collated and shoved out the door, a series of programmed controllers ordered all that. In fact, for everything manufactured, PLCs are at work translating the blueprints into products.

They are everywhere, from the factory floor to advanced farms, to city water plants, to oil and gas drilling. They occupy a part of the modern world known as operational technology, or OT.

Vital though OT is, it gets less attention than its big sibling, information technology, or IT.

Matt Morris, managing director of security and risk consulting at 1898 & Co., the consulting arm of Burns & McDonnell, the big architecture, engineering and construction firm, told me, “IT is the ‘carpeted space,’ and OT is the ‘uncarpeted space’ ”

In other words, much of industry’s heavy lifting is done by OT, while IT has taken over all of the other more obvious functions of society, from accounting to airline reservations, from doctors’ offices to designing aircraft.

IT is king, but that is only part of the story.

Regarding cybersecurity, OT and IT differ, but both have their vulnerabilities. When we say cybersecurity, we mostly mean IT. OT is different, and the threats emanating from attacks on it are usually more strategic and harder to identify.

Attacks on OT aren’t necessarily as immediately detectable as those on IT. They can be very subtle but also highly destructive and expensive.

The classic example of what can be done to OT was provided not in an attack on the United States but by the United States in 2007 (and revealed in 2010) when the nation’s cyber-warriors were able to slow down or speed up uranium enrichment centrifuges in Iran. The Iranians didn’t know that their operating systems had been fooled surreptitiously. Their engineers were at a loss.

Now, 1898 & Co. is taking a bold step into the world of critical infrastructure resiliency with the creation of a new service aimed at offering full-time, proactive cybersecurity at critical infrastructure sites, like utilities, embracing IT and OT.

The company and its parent have enormous experience in utilities and other critical infrastructure, including oil rigs, refineries and water systems. Through a program they call “Managed Threat Protection and Response,” their aim is to take critical infrastructure defense and response to new levels. The capability is an addition to its existing Managed Security Services solution.

To implement this, the company has set up its program in Houston, far from its home base in Kansas City, Missouri, to be near the customers — much critical infrastructure has links to Houston — but also, as Mark Mattei, 1898 & Co. director of cybersecurity, told me, to avail itself of the talent in the area.

The company is opening up a new horizon in cybersecurity, focusing on OT.

With IT, you would want to throw a switch, avert or stop the attack as fast as possible. But with OT, a more measured response might be called for. You wouldn’t want to shut down a whole plant because one pump had had its controller attacked or bring down part of the electricity grid because a single substation had evidence that it was malfunctioning because of an attack in one component.

The more one learns about cybersecurity, the more one appreciates the unsung heroes who take on unknown enemies 24 hours a day, every day of the year.

We are on the threshold of something big in defending critical infrastructure. I am sure that Richard Morley would have approved of this new approach. He died in 2017.

Email, RSS Follow
Email

Filed Under: King's Commentaries

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

White House Chronicle on Social

  • Facebook
  • Twitter
  • Vimeo
  • YouTube
The Gun Issue Has All the Tyranny of Perceived Reality

The Gun Issue Has All the Tyranny of Perceived Reality

Llewellyn King

“Murder most foul,” cries the ghost of Hamlet’s father to explain his own killing in Shakespeare’s play. We shudder in the United States when yet more children are slain by deranged shooters. Yet, we are determined to keep a ready supply of AR-15-type assault rifles on hand to facilitate the crazy when the insanity seizes […]

From Louisville to Ukraine, Two Women and a Partnership of Help

From Louisville to Ukraine, Two Women and a Partnership of Help

Llewellyn King

Today will be a terrible day in Malawi, where more than 500 died in Cyclone Freddy last month, and everything is flattened. Today will be a terrible day in Turkey and Syria, where thousands died in the Feb. 6 earthquake and cities are piles of rubble. And today will be a worse day in Ukraine, […]

The Next Big Thing for Electricity — the Virtual Power Plant

The Next Big Thing for Electricity — the Virtual Power Plant

Llewellyn King

America’s electric utilities are undergoing a revolution — one which is quiet but profound. Since Thomas Edison set the ball rolling, utilities have made electricity in a central station and dispatched it down a line to a consumer. It was a simple transaction: manufacture, transport, sell. Now it is getting more sophisticated. So long a […]

Irish Exceptionalism — They Punch Above Their Weight

Irish Exceptionalism — They Punch Above Their Weight

Llewellyn King

The Irish punch above their weight. That is why worldwide, on March 17, people who don’t have a platelet of Irish blood and who have never thought of visiting the island of Ireland joyously celebrate St. Patrick’s Day. That day may or may not have been when St. Patrick, Ireland’s patron saint, died in the 5th century. The […]

Copyright © 2023 · White House Chronicle Theme on Genesis Framework · WordPress · Log in