DOD’s 3D printers are vulnerable to hackers, IG finds — FCW
Emerging Tech
DOD’s 3D printers are susceptible to hackers, IG finds
The Protection Department did not correctly protected additive production programs, this kind of as 3D printers, from overseas intrusion and information tampering since they have been considered applications alternatively than IT, in accordance to an inspector basic report introduced July 7.
Additive production programs, which incorporate printers and desktops made use of to develop a few-dimensional solutions, are ever more utilized — especially with the Air Drive and national labs, to create prototypes, types, and supplies, including alternative parts for navy products in the field.
But an inspector basic report launched July 7 observed that DOD was inconsistent when securing or managing additive manufacturing units “to avoid unauthorized variations and ensure the integrity of the structure data” since staff regarded them to be “tools” applied “to deliver offer elements instead of details technologies techniques that needed cybersecurity controls.”
The devices ended up “incorrectly categorized” as standalone units and as a result assumed to not need authority to run, even although they related to DOD’s network. That mislabelling resulted in “vulnerabilities that exposed the DoD Information and facts Network to needless cybersecurity risks,” the report states.
“The compromise of AM style facts could permit an adversary to re-create and use DoD’s technological know-how to the adversary’s gain on the battlefield. In addition, if malicious actors transform the AM layout knowledge, the alterations could have an impact on the end energy and utility of the 3D-printed items.”
The results appear as the country contends with a spate of cybersecurity assaults, such as SolarWinds and the Colonial Pipeline ransomware assault. DOD has also been trying to mitigate issues about cyberattacks on its defense contractors and the potential effect to its provide chain.
Additionally, President Joe Biden achieved with government company leaders July 7 to talk about the high-profile attacks and ordered intelligence companies to launch a probe to appraise a modern attack involving Kaseya, a Florida-dependent IT organization.
The IG advised additive production units be provided in DOD’s IT methods portfolio alongside with cybersecurity controls, and include things like authorities to run. The watchdog also prompt that DOD’s CIO difficulty particular assistance to clarify that additive producing programs have been info programs that required to be protected and “ to cut down the chance of ongoing noncompliance” with current applicable DOD guidance. The DOD CIO disagreed with that advice.
The IG also advisable all additive manufacturing units be upgraded to Windows 10 or get an correct waiver.
About the Writer



Lauren C. Williams is senior editor for FCW and Defense Systems, covering defense and cybersecurity.

Prior to signing up for FCW, Williams was the tech reporter for ThinkProgress, the place she coated every little thing from net culture to nationwide protection difficulties. In past positions, Williams lined well being care, politics and crime for different publications, which include The Seattle Times. 

Williams graduated with a master’s in journalism from the University of Maryland, Faculty Park and a bachelor’s in dietetics from the University of Delaware. She can be contacted at [email protected], or adhere to her on Twitter @lalaurenista.
Simply click right here for past articles by Wiliams.
