Planes, Trains, and Tanks
Stagione 1
di Shift5
Cyber Hardening is the process of securing a system by reducing its vulnerabilities. In general, cyber professionals who harden systems try to reduce attack surface by reducing the functions and features of a system to the essentials. Cyber hardening has a long history in the information technology industry, but represents a new frontier in operational technology. In this episode, special guests Joe Saunders discuss how denial of service, buffer-overflow, memory corruption, and zero-day attacks affect critical industrial, commercial, medical, military, and consumer targets -- and how we as a cybersecurity community can rise to the challenge of defending these critical systems.
Department of Defense weapon systems have many costs contributing to their sustainment, with maintenance comprising a major portion of total ownership cost. On one side, maintenance leads to inflated costs and removes vehicles from operations unnecessarily; while on the other side of the spectrum, scaling down maintenance activities to reduce costs could lead to unexpected equipment failure, followed by lengthy triage and repair time. In some cases, these unexpected repairs occur in less than ideal environments with very limited access to platform experts and other maintenance resources. The DoD's maintenance system operates primarily on time-based or reactive maintenance and is struggling to implement preventive and predictive maintenance technologies. Ultimately, there is a fine balance to achieve when efficiently maintaining fleet operations without increasing costs and down-time for critical missions. In this show, Mitch Plonski and Mike Weigand discuss how system operators and military commanders have a need for a comprehensive analysis of their fleets’ data in real-time to better predict maintenance requirements.
Critical infrastructure like water plants, power plants, and sewage treatment facilities have become increasingly digital over the past few decades. These changes have seen analog systems replaced with digital components, so that operation of these facilities requires little human intervention. Remote access technologies allow third parties to manage many facilities at once, creating operating efficiencies. In short, digitizing and networking critical infrastructure allowed for major optimizing. Unfortunately, this modernization created a new attack surface for cyber criminals and nation states to put critical infrastructure at risk. In this episode, we welcome special guest Dave Weinstein to the show to discuss why we’ve seen the relentless digitization of critical infrastructure, what’s broken, and how we fix it.
A hacker is a person who uses technical skills to overcome a challenge or a problem. Typically the term is used to describe someone working within a computerized system, but the hacker mentality can be very useful in other contexts. By breaking down problems into component parts, thinking about the rules of the system you’re operating in, and identifying your goals, you may find yourself using surprising means to achieve victory. In this episode, Mike Hoeschele and Dan Gonzalez join us to discuss the hacker mentality and how they use it every day to solve complex, hard problems.
As we’ve discussed on this podcast numerous times, technology has accreted into our daily lives in profound ways. First, manufacturers infused previously analog devices with digital components. Then we started connecting them to the internet. Computer systems are all around us -- in cars, locomotives, aircraft, ships, hospital equipment, home monitoring, kitchen appliances, and lightbulbs. Unfortunately, manufacturers are putting out fundamentally vulnerable technology. These devices are operating our locomotives, driving our cars, and delivering patient care. The consequences couldn’t be graver and the security community is unable to keep up. In this episode, special guests Fotis Chantis and Ioannis Stais join me to discuss the three major IoT attack surfaces: the network, the hardware, and the radio.
Cars may not have keyboards and login screens, but they are crammed full of computers. These computers are responsible for an increasing number of critical functions in the car. There are even autonomous vehicles that require no human supervision. Because cars now run complicated software and contain many digital interfaces, automotive cybersecurity has become an increasingly important topic. In this show, special guests Robert Leale and Matt Rogers discuss just how embedded digital components are into modern cars, what cybersecurity threats exist, and why it’s important for researchers to continue hacking cars.
The agricultural industry has been experiencing a quiet digital revolution. Previously analog, manual processes are becoming fully automated. Data scientists are plying their craft to millenia-old agricultural problems. Manufacturers are cramming farm equipment with digital components. Cows are getting connected to the internet. This dizzying shift in the way agricultural professionals do business is creating profound ramifications for the ways operators and manufacturers interact. It's also creating a new frontier for data scientists and cybersecurity professionals to solve critical problems in an industry that makes modern society possible. In this episode, special guests Garrett Bladow and Joe Panatoga discuss the agricultural IoT revolution.
Electronics are all around us. From the computers and cell phones that we rely on for work, school, and pleasure, or in the aircraft, locomotives, and vehicles that get people and goods where they need to go, electronics are there storing and manipulating data, sensing, and operating in the physical world. But how do these electronics get designed? Who conceives of, develops, produces, and tests these components? In this episode, special guests Olivia Puleo and Phil Weigand discuss how modern electronics go from concept to reality.
As we've discussed many times on this show, fleet assets like locomotives, aircraft, and maritime vessels generate massive volumes of data thanks to their copious digital components. Collecting this data allows fleet owners to solve a wide range of problems, from eeking out efficiency gains to improving asset maintenance and monitoring cyber intrusions. Data scientists use myriad techniques to solve these problems, many of which include elements of Artificial Intelligence or "AI," a field of study which seeks to enable computers to mimic some of the perception, learning, problem-solving and decision making of the human mind. In this episode, special guests Walter Tackett, Dan Morton, Matt Rogers, and Ellie Daw discuss what AI is (and is not), what kinds of fleet inference problems it can help solve, and exciting new trends in this field.
The Internet of Things or "IOT" is a physical device network that exchanges data. These devices have embedded sensors, actuators, and software, and often communicate over the internet. Examples of IOT devices include "smart home" devices like appliances, thermostats, security systems, and even lighting fixtures. Other examples in a corporate setting include medical and healthcare devices, transportation assets, manufacturing, agriculture, energy management, and even military applications. Security researchers often joke that the S in IoT stands for security. Many IoT devices weren't designed with privacy or security in mind. In this episode, we invite special guests Chris, Earle, and Casey to the show to discuss IoT cybersecurity.