Israel and US Collaborate to Boost Critical Infrastructure Cybersecurity

Joint US–Israel Cybersecurity Initiative Aims to Enhance Critical Infrastructure Resilience

Introduction

In an effort to address the growing need for enhanced cybersecurity solutions in critical infrastructure sectors, the US Department of Homeland Security (DHS) Science and Technology Directorate (S&T), the Israel National Cyber Directorate (INCD), and the Israel–US Binational Industrial Research and Development (BIRD) Foundation have collaborated to establish the BIRD Cyber Program. This joint initiative aims to bolster the cyber resilience of vulnerable critical infrastructure in both the United States and Israel. The program, managed by the BIRD Foundation, recently approved funding for four joint cybersecurity projects, leveraging both public and private-sector investments totaling approximately $10 million.

The Challenge of Cybersecurity in Critical Infrastructure

While the cybersecurity industry has seen impressive growth in recent years, with a focus on solutions for industries such as banking, defense, eCommerce, and insurance, the demands for cybersecurity on a national level have been outpacing the industry’s ability to support them. Companies, utilities, and small to medium-sized ports and airports face constant pressure to adopt enhanced cybersecurity measures in order to keep up with the ever-increasing number and complexity of threats they face. Recognizing this challenge, the BIRD Cyber Program aims to bridge the gap and provide innovative solutions specifically tailored for critical infrastructure sectors.

The Approved Projects

The four joint cybersecurity projects that have received funding from the BIRD Cyber Program are:

1. Rescana (Tel-Aviv, Israel) and Trend Micro (Irving, Texas): This project focuses on developing an operational cyber threat intelligence capability to inform cyber risk maritime decision-making. By leveraging advanced threat intelligence technologies, the goal is to enhance cybersecurity measures in maritime infrastructure, safeguarding against cyber-attacks and reducing risk.

2. Salvador Technologies (Rehovot, Israel) and Bastazo (Fayetteville, Arkansas): This project aims to develop a comprehensive solution for Industrial Control Systems (ICS) vulnerability management, monitoring, and rapid recovery from cyber-attacks. It addresses the critical need for robust cybersecurity measures in industrial environments, where attacks can have serious consequences.

3. Cyber 2.0 (Rishon Letzion, Israel) and Cincinnati/Northern Kentucky International Airport (Hebron, KY): This project focuses on developing a platform for airports and air traffic that provides continuous cyber visibility, real-time monitoring, and data traffic detection to minimize risks and ensure compliance with regulations. By enhancing cyber resilience in the aviation sector, this project aims to safeguard critical infrastructure and passenger safety.

4. A project of developing an airport cyber protection solution across the entire attack surface: This project aims to support the cybersecurity efforts of airports by developing a comprehensive solution that covers all potential attack vectors. By identifying vulnerabilities and implementing robust cybersecurity measures, this project aspires to safeguard airports from cyber-attacks.

The Role of the BIRD Foundation

The BIRD Foundation plays a crucial role in promoting collaboration between US and Israeli companies in various technological fields for joint product development. In addition to providing conditional grants for approved projects, the foundation assists companies in identifying potential strategic partners and facilitating introductions. Through these collaborative efforts, the BIRD Foundation aims to foster innovation and enhance the cyber resilience of critical infrastructure in both nations.

Editorial: Strengthening National Cyber Resilience

The establishment of the BIRD Cyber Program and the funding of these four joint cybersecurity projects highlight the commitment of the US and Israel to bolstering national cyber resilience. Cyber threats continue to evolve and pose significant risks to critical infrastructure sectors. By investing in collaborative initiatives and innovative solutions, both countries can enhance their ability to detect, prevent, and mitigate cyber-attacks that could have far-reaching consequences.

Advice for Enhancing Cybersecurity in Critical Infrastructure

As the cyber threat landscape becomes increasingly complex, it is imperative for critical infrastructure operators to prioritize cybersecurity. The following are some key recommendations for enhancing cybersecurity in critical infrastructure sectors:

1. Adopt a Risk-Based Approach:

Each critical infrastructure sector should conduct comprehensive risk assessments to identify potential vulnerabilities and prioritize cybersecurity investments accordingly. This approach ensures that resources are allocated based on the specific risks faced by each sector.

2. Establish Strong Public-Private Partnerships:

Collaboration between government agencies, industry stakeholders, and cybersecurity providers is crucial for sharing threat intelligence, best practices, and technological advancements. Public-private partnerships can help enhance cybersecurity capabilities, facilitate information sharing, and ensure a coordinated response to cyber-attacks.

3. Implement Robust Cybersecurity Measures:

Critical infrastructure operators should invest in robust cybersecurity measures, such as network segmentation, multi-factor authentication, encryption, intrusion detection, and incident response capabilities. Regular vulnerability assessments and penetration testing should also be conducted to identify and address any weaknesses in the system.

4. Provide Training and Awareness Programs:

Human error remains a significant contributor to cybersecurity incidents. Therefore, providing comprehensive training and awareness programs for employees and stakeholders is essential. These programs should cover topics such as phishing awareness, password hygiene, and incident reporting procedures.

5. Continuously Monitor and Update Security Controls:

Cybersecurity is an ongoing process that requires constant monitoring and updating of security controls. Regular system patching, software updates, and threat hunting activities can help identify and mitigate potential vulnerabilities before they can be exploited by attackers.

6. Stay Informed About Emerging Threats:

It is crucial for critical infrastructure operators to stay informed about the latest cybersecurity threats and trends. This can be achieved through active participation in information-sharing forums, subscribing to threat intelligence services, and engaging with cybersecurity communities.

By implementing these recommendations and leveraging collaborative initiatives like the BIRD Cyber Program, critical infrastructure sectors can enhance their cyber resilience and better protect themselves against emerging cyber threats.