Updated Feb 19, 2018

Trump infrastructure rush risks cybersecurity disaster

Construction work signs are stacked against a fence in Miami-Dade County in 2015. Photo: Joe Raedle / Getty Images

President Trump's infrastructure plan encourages states to "incorporate new and evolving technologies" into their proposals, but does not require any form of cybersecurity for those technologies. Experts say that might set states on the path to disaster.

The bottom line: "These plans are not just about putting down pavement. 21st century infrastructure is networked," said Richard Harknett, a University of Cincinnati professor that recently served as scholar-in-residence at the NSA and U.S. Cyber Command.

Flashback: Criminals have already wreaked havoc on current, less-networked infrastructure. In 2016, an attacker installed ransomware on the San Francisco Municipal Railway. As a result, the public transit system was unable to charge for rides for a weekend.

Details: Trump has touted his $200 billion infrastructure plan as a mechanism to generate more than a trillion dollars in investment. The Trump proposal includes a $100 billion incentive program rewarding proposals "incorporat[ing] new and evolving technologies." There is no requirement to evaluate the cybersecurity of any new technology used.

Advantages of modern infrastructure: The state-of-the-art in infrastructure uses data to become more efficient. Take transit for example:

  • Sensors will pick up data on things like congestion or weather, allowing for big data analysis to help optimize traffic by changing traffic light patterns.
  • Cars will communicate with traffic lights and signs to help drivers know when to stop.
  • There will be benefits to traffic, safety, fuel efficiency, and noise.

Yes, but: "Cities do a lot of functionality testing to make sure things work right, but do very little security testing," said Caesar Cerrudo, chief technology officer for the security firm IOActive. Cerrudo is known for showing how to hack traffic light sensors already in use by many large American cities.

  • If hackers are able to tinker with any aspects of a smart system, they can more than negate any safety or efficiency boost.
  • Such tinkering could also trick sensors and manipulate traffic flows through intersections.
  • A cleverly constructed series of traffic jams, for example, could do serious harm to an economy.
  • Toying with weather sensors could cause a system to suggest caution during a perfectly sunny day or, worse, not suggest caution during a freeze.

That doesn't mean it's not worth doing. Businesses have high hopes for replacing crumbling infrastructure that impedes national and international trade. "It's time to invest in a 21st century infrastructure, a system of infrastructures to support and grow a 21st century economy," said Tom Donohue, president of the U.S. Chamber of Commerce, at a speech in January.

But there are concerns to address: Cybersecurity experts say it's much cheaper and effective to address cybersecurity concerns before a major infrastructure project starts. "This is the time to address it, before the shovels hit the ground," said Harknett.

Go deeper

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 3 a.m. ET: 665,164 — Total deaths: 30,852 — Total recoveries: 140,225.
  2. U.S.: Leads the world in cases. Total confirmed cases as of 3 a.m. ET: 124,665 — Total deaths: 2,191 — Total recoveries: 1,095.
  3. Federal government latest: President Trump announces new travel advisories for New York, New Jersey and Connecticut, but rules out quarantine enforcement. Per the CDC, residents of those states must now "refrain from non-essential domestic travel for 14 days," with the exception of critical infrastructure industry workers.
  4. State updates: Alaska is latest state to issue a stay-at-home order — New York is trying to nearly triple its hospital capacity in less than a month and has moved its presidential primary to June 23. Some Midwestern swing voters who backed Trump's handling of the virus less than two weeks ago are balking at his call for the U.S. to be "opened up" by Easter.
  5. World updates: In Spain, over 1,400 people were confirmed dead between Thursday to Saturday.
  6. 🚀 Space updates: OneWeb filed for bankruptcy amid the novel coronavirus pandemic.
  7. Hollywood: Tom Hanks and Rita Wilson have returned to U.S. after being treated for coronavirus.
  8. What should I do? Answers about the virus from Axios expertsWhat to know about social distancingQ&A: Minimizing your coronavirus risk
  9. Other resources: CDC on how to avoid the virus, what to do if you get it.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.

Coronavirus updates: Global death toll tops 30,000

Data: The Center for Systems Science and Engineering at Johns Hopkins, the CDC, and China's Health Ministry. Note: China numbers are for the mainland only and U.S. numbers include repatriated citizens and confirmed plus presumptive cases from the CDC

The novel coronavirus has now killed more than 30,000 people around the world — with Italy reporting over 10,000 deaths, per Johns Hopkins data.

The big picture: The number of deaths from COVID-19 in the U.S. surpassed 2,000 on Saturday. The United States leads the world in confirmed coronavirus infections — more than 124,000 by early Sunday. The number of those recovered from the virus in the U.S. passed the 1,000-mark on Saturday evening.

Go deeperArrowUpdated 3 hours ago - Health

Gilead expands access to experimental coronavirus drug in emergency cases

Photo: Olivier Douliery/AFP via Getty Images

Gilead Sciences CEO Daniel O’Day said in an open letter Saturday the company is expanding access to its experimental anti-coronavirus drug remdesivir to include severely ill COVID-19 patients.

The big pig picture: President Trump has called the antiviral drug "promising," but the results of six clinical trials on this investigational medicine are still being conducted, so its effectiveness the treatment of the novel coronavirus has yet to be proved. The World Health Organization is involved in the tests.

Go deeperArrow3 hours ago - Health