Construction work signs are stacked against a fence in Miami-Dade County in 2015. Photo: Joe Raedle / Getty Images

President Trump's infrastructure plan encourages states to "incorporate new and evolving technologies" into their proposals, but does not require any form of cybersecurity for those technologies. Experts say that might set states on the path to disaster.

The bottom line: "These plans are not just about putting down pavement. 21st century infrastructure is networked," said Richard Harknett, a University of Cincinnati professor that recently served as scholar-in-residence at the NSA and U.S. Cyber Command.

Flashback: Criminals have already wreaked havoc on current, less-networked infrastructure. In 2016, an attacker installed ransomware on the San Francisco Municipal Railway. As a result, the public transit system was unable to charge for rides for a weekend.

Details: Trump has touted his $200 billion infrastructure plan as a mechanism to generate more than a trillion dollars in investment. The Trump proposal includes a $100 billion incentive program rewarding proposals "incorporat[ing] new and evolving technologies." There is no requirement to evaluate the cybersecurity of any new technology used.

Advantages of modern infrastructure: The state-of-the-art in infrastructure uses data to become more efficient. Take transit for example:

  • Sensors will pick up data on things like congestion or weather, allowing for big data analysis to help optimize traffic by changing traffic light patterns.
  • Cars will communicate with traffic lights and signs to help drivers know when to stop.
  • There will be benefits to traffic, safety, fuel efficiency, and noise.

Yes, but: "Cities do a lot of functionality testing to make sure things work right, but do very little security testing," said Caesar Cerrudo, chief technology officer for the security firm IOActive. Cerrudo is known for showing how to hack traffic light sensors already in use by many large American cities.

  • If hackers are able to tinker with any aspects of a smart system, they can more than negate any safety or efficiency boost.
  • Such tinkering could also trick sensors and manipulate traffic flows through intersections.
  • A cleverly constructed series of traffic jams, for example, could do serious harm to an economy.
  • Toying with weather sensors could cause a system to suggest caution during a perfectly sunny day or, worse, not suggest caution during a freeze.

That doesn't mean it's not worth doing. Businesses have high hopes for replacing crumbling infrastructure that impedes national and international trade. "It's time to invest in a 21st century infrastructure, a system of infrastructures to support and grow a 21st century economy," said Tom Donohue, president of the U.S. Chamber of Commerce, at a speech in January.

But there are concerns to address: Cybersecurity experts say it's much cheaper and effective to address cybersecurity concerns before a major infrastructure project starts. "This is the time to address it, before the shovels hit the ground," said Harknett.

Go deeper

Updated 59 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Eniola Odetunde/Axios

  1. Global: Total confirmed cases as of 10 p.m. ET: 12,009,301 — Total deaths: 548,799 — Total recoveries — 6,561,969Map.
  2. U.S.: Total confirmed cases as of 10 p.m. ET: 3,053,328 — Total deaths: 132,256 — Total recoveries: 953,420 — Total tested: 37,532,612Map.
  3. Public health: Houston mayor cancels Republican convention over coronavirus concerns Deaths are rising in hotspots — Déjà vu sets in as testing issues rise and PPE dwindles.
  4. Travel: United warns employees it may furlough 45% of U.S. workforce How the pandemic changed mobility habits, by state.
  5. Education: New York City schools will not fully reopen in fallHarvard and MIT sue Trump administration over rule barring foreign students from online classes.
  6. 🎧 Podcast: A misinformation "infodemic" is here.

Transcripts show George Floyd told police "I can't breathe" over 20 times

Photo: Gary Coronado/Los Angeles Times via Getty Images

Newly released transcripts of bodycam footage from the Minneapolis Police Department show that George Floyd told officers he could not breathe more than 20 times in the moments leading up to his death.

Why it matters: Floyd's killing sparked a national wave of Black Lives Matter protests and an ongoing reckoning over systemic racism in the United States. The transcripts "offer one the most thorough and dramatic accounts" before Floyd's death, The New York Times writes.

5 hours ago - Health

Fighting the coronavirus infodemic

Illustration: Sarah Grillo/Axios

An "infodemic" of misinformation and disinformation has helped cripple the response to the novel coronavirus.

Why it matters: High-powered social media accelerates the spread of lies and political polarization that motivates people to believe them. Unless the public health sphere can effectively counter misinformation, not even an effective vaccine may be enough to end the pandemic.