What are the vulnerabilities of critical US infrastructure, and how could it be protected from cyber-attacks?

Abstract

This study explored six areas of US critical infrastructure and their vulnerabilities. In addition, the type of incidents where these infrastructures could be most vulnerable to attack. These incidents include Cyber-attacks, Natural disasters, and Physical attacks. The problem researched was to understand the critical infrastructure vulnerabilities in the United States. The purpose is to review factors that created these vulnerabilities and find ways to mitigate them. The digitalization of systems appears to have created vulnerabilities to the U.S. critical infrastructure. This study elucidated why critical infrastructure should be protected. In this study, we used a quantitative method approach with a non-parametric test specifically the Kruskal-Walli’s test to analyze various critical infrastructure areas highly vulnerable to an attack. This research is grounded in Evolutionary Theory. The Evolutionary theory argues that cyber threats constantly evolve; thus, cybersecurity mechanisms must continuously adapt to keep pace. The NIST Risk Management Framework “RMF” (NIST SP 800-53) was used to mitigate the risk. The possible impact of cyber-attacks on critical systems cannot be ignored. This study explored key cyber vulnerabilities facing U.S. critical infrastructure, as well as mitigation and remediation strategies. The rapid integration of Internet of Things (IoT) devices into critical infrastructure systems has exacerbated the attack surface. These devices often lack adequate security measures, making them easy targets for cybercriminals looking to infiltrate extensive networks. We compared the vulnerabilities amongst these vital infrastructures based on the nature of the attack. The result showed that the incidence of cyber-attacks was higher than physical and natural disasters. This research could benefit government agencies, critical infrastructure policymakers, and organizations that provide critical services. Also, this research could be adopted in academia to teach students who may have professional initiatives on how to manage critical infrastructure. Further research is needed in this field to understand the gaps in protecting these infrastructures.