Enhancing U.S. Defense Infrastructure Against Cyber and Physical Threats

Key Infrastructure Vulnerabilities in U.S. Military Mobility Exposed in New Report

Recent findings from the Cyberspace Solarium Commission highlight the vulnerabilities in the United States' critical infrastructure, which adversaries could exploit through cyber and physical attacks. Such vulnerabilities pose significant threats to America's readiness for large-scale military operations. The report stresses the importance of rapid and efficient deployment of military forces across various transportation modes, including land, sea, and air, during potential conflicts.

U.S. Transportation Command (TRANSCOM) plays a pivotal role in logistics, relying heavily on civilian-owned rail networks, ports, and airports for swift mobilization. The Foundation for Defense of Democracies (FDD) has suggested enhancing cybersecurity measures within maritime, railroad, and aviation sectors to bolster national security. Annie Fixler, the director of the Center on Cyber and Technology Innovation at FDD, and Mark Montgomery, senior director at CCTI, emphasized, “The cybersecurity of the critical air, rail, and maritime infrastructure that underpins U.S. military mobility is insufficient.”

The U.S. intelligence community's 2024 threat assessment warns of China's potential aggressive cyber operations targeting American infrastructure and military assets during conflicts. These operations could serve as both deterrence and interference with U.S. force deployments. Fixler and Montgomery referenced examples of Chinese hacking groups, such as Volt Typhoon, which have infiltrated U.S. critical systems and demonstrated capabilities to maintain persistent access and preemptively position damaging cyber payloads.

The Department of Defense (DoD) has established ten defense infrastructure sectors since 2005, each with a designated Defense Infrastructure Sector Lead Agent (DISLA). While the term DISLA has been phased out, it remains useful to describe agencies' roles in protecting critical infrastructure. TRANSCOM, along with its Air Force, Army, and Navy components, was tasked with safeguarding these essential infrastructures, which, if compromised, could severely impact U.S. defense missions.

The report also addresses how critical infrastructure’s reliance on the Global Positioning System (GPS) poses additional threats. Vulnerabilities in GPS, due to outdated encryption and anti-jamming features, make it susceptible to interference. GPS serves vital functions beyond navigation, such as timing synchronization in financial and energy sectors. Efforts are ongoing to transition to more secure systems like GPS III and the L5 frequency, which offer better resistance to jamming and spoofing.

FDD recommends a coordinated approach among Congress, the executive branch, and regulatory bodies to unify cybersecurity standards across all transportation infrastructure sectors vital to military mobility. Suggested actions include reviewing DoD's coordination efforts, conducting exercises simulating cyberattacks, and advancing GPS governance. Explore more here.

For maritime security, the Government Accountability Office (GAO) should evaluate the U.S. Coast Guard's fulfillment of its responsibilities, and cyber initiatives need more funding. In aviation, Congress should ensure collaboration between the FAA and TSA is sufficiently supported, while the freight rail sector requires enhanced cooperation with rail operators and an interagency risk assessment.

The ongoing threats underscore the necessity for robust infrastructure security to maintain U.S. military readiness. The report urges timely action to prevent adversaries from leveraging these vulnerabilities during conflicts, emphasizing the need for resilience in critical systems. Read more about the strategic threats here.