Internet of Things

Why the internet of things isn't as vulnerable as it looks

Shutterstock image: illuminated connections between devices. 

The internet of things isn't an enemy of critical infrastructure, according to the new head of the Department of Homeland Security Science & Technology Directorate.

Use of connected devices has exploded across critical infrastructure industries, resident in everything from industrial controls to financial systems, where the devices generate loads of data. That data, said Robert Griffin, lures attackers but also serves to boost security for infrastructure protectors.

"For homeland security operators, IoT is now a component of critical infrastructure, where security is viewed as a common good for protecting each of our different 16 critical infrastructure sectors," said Griffin in a March 20 blog post, one of his first as acting undersecretary at S&T. He assumed that position in January, after Reginald Brothers moved to the private sector.

Griffin said connected sensors provide data analytics that can be shared among security operators, helping improve performance, reduce costs and enhance security measures. Griffin used road safety and interconnected cars as an example. Interconnected cars, he said, are equipped to signal each other and control centers about road conditions and hazards, delivering real-time warnings to other drivers.

"Knowing IoT is increasingly becoming a digital representation of a community's heartbeat, our challenge today is to apply this technology to the homeland security landscape -- to embrace how technology is already changing the way we communicate, conduct commerce, and move people and products," he said.

Last May as deputy undersecretary at S&T, at the 2016 IoT World convention, Griffin said electronic device interconnectivity, while providing major benefits, also poses potential threats to infrastructure, security and personal privacy. He said securing that new environment calls for new thinking on how government partners with tech innovators.

"However, for every piece of technology that is connected to our critical infrastructure, whether to facilitate more reliable transit or collect data to increase efficiencies, the threat to our security is real," he said in his blog post.

In an emerging world where more than a billion devices will be inserted into robots, buildings and medical devices, along with thousands of different algorithms used to collect data, changing the way key security decisions are made, a better understanding of cloud computing is needed, he said.

Griffin vowed to continue to reach out to industry about connected devices and collaborate with experts with programs through its Cyber Security Division and Silicon Valley Innovation Program.

About the Author

Mark Rockwell is a senior staff writer at FCW, whose beat focuses on acquisition, the Department of Homeland Security and the Department of Energy.

Before joining FCW, Rockwell was Washington correspondent for Government Security News, where he covered all aspects of homeland security from IT to detection dogs and border security. Over the last 25 years in Washington as a reporter, editor and correspondent, he has covered an increasingly wide array of high-tech issues for publications like Communications Week, Internet Week, Fiber Optics News, magazine and Wireless Week.

Rockwell received a Jesse H. Neal Award for his work covering telecommunications issues, and is a graduate of James Madison University.

Click here for previous articles by Rockwell. Contact him at [email protected] or follow him on Twitter at @MRockwell4.


  • Comment
    customer experience (garagestock/

    Leveraging the TMF to improve customer experience

    Focusing on customer experience as part of the Technology Modernization Fund investment strategy will enable agencies to improve service and build trust in government.

  • FCW Perspectives
    zero trust network

    Why zero trust is having a moment

    Improved technologies and growing threats have agencies actively pursuing dynamic and context-driven security.

Stay Connected