Colonial Pipeline cyberattack reveals national infrastructure vulnerabilities, expert says | News | Notre Dame News | University of Notre Dame Skip To Content Skip To Navigation Skip To Search University of Notre Dame Notre Dame News Experts ND in the News Subscribe About Us Home Contact Search Menu Home › News › Colonial Pipeline cyberattack reveals national infrastructure vulnerabilities, expert says Colonial Pipeline cyberattack reveals national infrastructure vulnerabilities, expert says Published: May 11, 2021 Author: Shannon Roddel ND Experts Michael Chapple Teaching Professor, Academic Director of the Master of Science in Business Analytics Cyber Attack Colonial Pipeline, the operator of one of the largest fuel pipelines in the U.S., remains largely shut down after a cyberattack on Friday (May 7). The pipeline, which provides nearly half of the supply of gas, diesel and jet fuel to the East Coast, was the victim of a ransomware attack by a criminal group. The attack underscores U.S. infrastructure vulnerabilities, according to cybersecurity expert Mike Chapple, teaching professor of IT, analytics and operations at the University of Notre Dame’s Mendoza College of Business. Mike Chapple “The fact that this attack compromised systems that control pipeline infrastructure indicates that either the attack was extremely sophisticated or the systems were not well secured,” said Chapple, a former computer scientist with the National Security Agency and former Air Force intelligence officer. “Standard practice for this type of critical systems is to place them on their own isolated networks precisely to prevent this type of attack. These systems shouldn’t be connected to the internet, making it very difficult for an outsider to gain control of them.” The FBI has confirmed the culprit is DarkSide, a strain of ransomware allegedly operated by Russian cybercriminals. A rare emergency declaration was issued Sunday by the Department of Transportation to use alternative transportation routes for oil and gas and lift regulations on drivers carrying fuel across the southern and eastern U.S. According to Chapple, this shutdown reveals that core national infrastructure elements continue to be vulnerable to cyberattack. “Securing our energy infrastructure is a national security issue that involves several different federal agencies and requires centralized leadership,” Chapple said. “Last year, Congress authorized the creation of a national cybersecurity director within the White House, but this position remains unfilled by the Biden administration. In the wake of attacks like Colonial Pipeline and SolarWinds, it is clear that filling the role needs to be a higher priority.”  Chapple recommends a number of additional steps to increase security. “Protecting our nation’s critical infrastructure against cyberattack requires a public/private partnership that allows government agencies and corporations to work side-by-side on cybersecurity issues,” he said. “The government will only achieve this goal through a combination of regulations and incentives designed to bring private businesses to the table. “The Biden administration is likely to release an executive order this week that will outline new requirements for cybersecurity, but those requirements may only apply to the federal government and its contractors,” Chapple explained. “We need a broader set of regulations that create consistent cybersecurity standards for operations with national security implications. One of the other actions proposed in drafts of the upcoming executive order is the creation of an independent investigatory body for cybersecurity incidents modeled after the very successful National Transportation Safety Board (NTSB). In the wake of an aviation disaster, the NTSB convenes a panel of independent expert investigators to reconstruct the accident and share lessons learned with the aviation community. A similar group overseeing cybersecurity investigations would be an enormous step forward in educating businesses about cybersecurity incident prevention.”   Contact: Mike Chapple, mchapple@nd.edu Posted In: Faculty and Staff Home Experts ND in the News Subscribe About Us Related October 04, 2022 NIH awards $4 million grant to psychologists researching suicide prevention September 09, 2022 Karrie Koesel to testify before Congressional-Executive Commission on China August 18, 2022 Two faculty win NEH grants to research history of red hair, philosophy of revelation August 16, 2022 NSF names Center for Computer-Assisted Synthesis a Phase II Center for Chemical Innovation August 15, 2022 Notre Dame President Rev. John I. Jenkins, C.S.C., on Russian atrocities against clergy in Ukraine For the Media Contact Office of Public Affairs and Communications Notre Dame News 500 Grace Hall Notre Dame, IN 46556 USA Facebook Twitter Instagram YouTube Pinterest © 2022 University of Notre Dame Search Mobile App News Events Visit Accessibility Facebook Twitter Instagram YouTube LinkedIn