All Things Innovation: As tech grows, security must grow with it

Technology is in a constant state of change, and reliance on it has become ingrained in nearly every facet of our lives.

Twenty years ago, 55 percent of U.S. adults used the internet. Today that same measure is now reported as 93 percent.

Not only do we have more people online, it is done so in a more deeply integrated way with every facet of our daily lives.

Chances are that while you are reading this, there is a piece of technology within reach or view that was not a part of your life 10 years ago.

Perhaps it is an internet-connected thermostat. Maybe it’s a security camera, or a garage door opener, or a medical device, or a music device.

Each of these items has introduced a new way to work, live or play.

All these devices make a big impact, from internet bandwidth issues to storage.

However, there is one very important impact that also keeps changing — the risk to our security.

Each time a device connects between our personal network and the internet, it creates a potential opportunity for misuse or attack.

“Cybercriminals are increasing the frequency and sophistication of their attacks,” said Brandon Potter, chief technology officer of ProCircular in Coralville.

“It's crucial to develop training to combat and protect us from the cyber crime syndicates and the rampant threat landscape.”

As Brandon pointed out, while businesses need to be able to incorporate emerging technologies into the workplace, it must be done in a careful and calculated manner. Just as Underwriters Laboratories might test the circuits of an air fryer to ensure they don’t overheat, a scientific approach should be applied to software and internet-connected devices.

Soon, additional analysis and tools will reveal more information about what is happening and what types of data can be revealed about the environment.

Indiana University researchers recently shared one challenge to this work. While security professionals have a code of ethics and process that must be followed, criminals will attack using any means necessary.

At a recent DefCon Security conference, cybersecurity researchers looked specifically at potential vulnerabilities and risks in agricultural equipment and websites.

While harnessing the power of artificial intelligence to make decisions can improve farm yield productions, misuse of equipment also can cause irreparable harm.

For example, if an attacker were to refer to a data input feed to a system designed for irrigation, and indicate that four inches of precipitation was expected that day on a cycle when no rain was measured, the ratio of a chemical application could be manipulated. This would cause damage to the crop.

As equipment becomes more automated, it is important that we continue to protect our ecosystem. To do that, we need to think the same way attackers do.

Many of these attacks can be avoided with training, awareness and simple changes. Failing to configure devices, not changing default passwords, of not physically locking up and monitoring equipment are mistakes that are at the root of many successful cyberattacks.

At the DeltaV Code School, we’re doing more than just training network and cybersecurity professionals on how to prevent the latest attacks. We’re also challenging them to consider more broadly how to create systems and tools to understand the how and why behind these attacks.

Technology is only going to keep increasing in the years ahead, and the threat of attack will never go away.

For our workforce, it’s critical we always keep security needs front and center, so that we can prevent those threats in proven and scientific ways.

Dan Tuuri is a DeltaV Ops instructor for NewBoCo in Cedar Rapids.

Watch for the “Cyber Sunday” column by members of SecMidwest, a Cedar Rapids-based not-for-profit focused on cybersecurity education. It runs the first Sunday of each month in Business 380.