The Hidden Race to Protect the US Bioeconomy From Hacker Threats

There is a need for more resources to better secure bio, bioindustrial, and biotech, which is highlighted by a new partnership between the cybersecurity nonprofit Bioeconomy Information Sharing and Analysis Center (BIO-ISAC) and the APL, which works on emerging research with US government agencies.

Regular people around the world thought about the logistics of vaccine development and production in a tangible and immediate way after the Covid-19 Pandemic. The bioeconomy is hidden from the public, from the development of biofuels to the use of breeding programs in agriculture. Researchers are realizing that the bioeconomy is vulnerable as industry faces a reckoning about the state of their cybersecurity defenses. Russia, China, and other state actors raced to hack vaccine makers and distributors in a scramble that US officials warned could have been disruptive.

If Moderna got hacked four years ago, it would be a big deal. Small companies can go bankrupt very easily, and then we lose the work they are doing for the future. I am very grateful that APL understood the mission of the BIO-ISAC and joined as a founding member. They want to help.

Many industries have information sharing and analysis centers. The lab has been collaborating with ISACs for many years according to Charles Frick, a principal staff member. APL collaborated with the Department of Homeland Security and the National Security Agency to study the most efficient methods for large-scale threat intelligence sharing. APL was involved in a pilot project in which a process that took 14 hours was reduced to eight minutes.

Digital attacks on critical services and trends in attacks are important. The more information an organization has the better chance it has of defending itself against similar hacks. The funding for the BIO-ISAC will go toward regular operations. It will also support incident response services the BIO-ISAC is launching, so if they are dealing with a digital attack or otherwise suspect that something is wrong, they will have someone to call. You can pay what you can to make the services accessible to as many organizations as possible. The BIO-ISAC may not be able to respond to every request immediately. The group hopes to fill a crucial gap in the services currently available.

As we begin to identify threats, it is a natural fit for us to say that we have an existing set of capabilities and skills that can be applied to this area. It is the biggest bang for your buck.