From connected cars to oil pipelines: Engineering innovators aim to protect 'Internet of Things'
Around the world, countries are on the cyber offense. Researchers from the University of Arizona College of Engineering have invented new strategies to mitigate future cyberattacks by helping make cybersecurity for the "Internet of Things" more accessible for companies and organizations of all sizes. Based on the technology, they have launched a startup, BG Networks, to bring their technology from UArizona to the public.
The Internet of Things, or IoT, is made up of interconnected sensors and devices networked with computers. While personal items like smartwatches, smart doorbells and smart speakers are all part of this network, so are many of the technologies used in the management of utility companies and oil pipelines. And if those technologies are brought down, it has the potential to significantly impact the economy and society, making them prime targets for cyberattackers.
U.S. citizens experienced the realities of such attacks in summer 2021 when attackers targeted systems at the world's largest meat processor, JBS, as well as the computerized equipment that manages the Colonial Pipeline, a 5,500-mile-long pipeline system that transports 3 million barrels of fuel between Texas and New York every day. JBS paid an $11 million ransom to regain control of its systems, and the Colonial Pipeline Company paid a $4 million ransom to restore operations. Any network-connected system is vulnerable to such attacks, including industrial control systems, autonomous vehicles and the power grid.
UArizona researchers have developed a two-part technology – consisting of a Security Automation Tool and an Embedded Security Software Architecture – that allows engineers without cybersecurity backgrounds to implement complex security protocols to prevent such attacks. The team developed security automation tools that work with open-source software to allow engineers to add IoT cybersecurity functions such as encryption, authentication and secure software updates quickly and efficiently to their systems.
"Hundreds of thousands of bad actors are at work, and the United States has already seen its share of impactful attacks," said Roman Lysecky, UArizona professor of electrical and computer engineering and co-founder of BG Networks.
Lysecky developed the technology along with BG Networks co-founder and Distinguished Professor of Electrical and Computer Engineering Jerzy Rozenblit, graduate student researcher Aakarsh Rao, former graduate student researcher Nadir Carreon, and professor Johannes Sametinger of Joannes Kepler University Linz in Austria.
"Implementing cybersecurity has always been a complex feat," Lysecky said. "We've developed tools that enable engineers to much more easily and quickly include cybersecurity in their applications."
The team worked with Tech Launch Arizona, the UArizona office that commercializes inventions stemming from university research and innovation, to protect the innovation and develop strategies and skills to position the startup for a successful launch.
"I've been so impressed with this concept and this team," said Tech Launch Arizona Assistant Vice President Doug Hockstad, who has a background in software. "The impact that this kind of innovation is positioned to have on society to protect the people and systems we depend upon aligns with the University of Arizona's goals for research – to create impact and improve lives."
"Our vision is to enable IoT security everywhere," said BG Networks co-founder and CEO Colin Duggan, who has 29 years of international leadership, marketing and management experience in the automotive, consumer, industrial and defense markets. "We aim to remove obstacles that prevent embedded engineers from including cybersecurity in their applications."