Volunteer Hackers Unite to Protect US Water Systems & Schools
Published On: August 11, 2024
DEF CON, the world’s largest hacker conference, has initiated a volunteer-driven project aimed at bolstering the cybersecurity of America’s vulnerable water systems and schools. Known as "Def Con Franklin," this initiative seeks to harness the talents of approximately 30,000 hackers who attend the annual Las Vegas event, deploying their expertise to protect critical infrastructure from rising cyber threats.
The project, named after Benjamin Franklin in honor of his contributions to public safety and information dissemination, focuses on two primary goals. The first is to compile and publish a comprehensive report detailing the findings of the hackers at the conference. This report aims to inform and enhance US cybersecurity policies by making the research accessible to the broader public and relevant authorities.
The second, and perhaps more impactful goal, is to connect volunteer hackers with institutions that are in dire need of cybersecurity assistance, starting with water and wastewater facilities and schools. These sectors are particularly vulnerable to cyberattacks due to their reliance on outdated systems and limited resources to implement robust security measures.
The water sector, comprising roughly 50,000 independent facilities across the US, has been identified as a critical area of concern. While larger facilities may have dedicated cybersecurity teams, smaller operations often run with minimal staff and limited technological safeguards, making them prime targets for cyberattacks. Recent warnings from US officials have highlighted that nation-state actors, particularly from China, Russia, and Iran, have been positioning themselves to potentially disrupt US critical infrastructure, including water systems, in the event of escalating geopolitical tensions.
Cyberattacks on water utilities have become increasingly frequent and severe. The Environmental Protection Agency (EPA) recently reported that about 70% of inspected water facilities did not meet basic cybersecurity standards, underscoring the urgent need for intervention. Cyberattacks could lead to catastrophic outcomes, such as interruptions in water treatment, damage to infrastructure, and even the alteration of chemical levels in the water supply to hazardous amounts.
To address these vulnerabilities, DEF CON has partnered with the National Rural Water Association (NRWA) to facilitate connections between hackers and water facilities in need. This collaboration is designed to provide immediate cybersecurity support to smaller utilities that lack the resources to defend against sophisticated cyber threats.
In tandem with the volunteer effort, the Hackers’ Almanack, another arm of Def Con Franklin, will chronicle significant findings from various specialty areas, or "villages," at the conference. These villages, which range from AI to biohacking, provide a real-world environment for hackers to test their skills and uncover vulnerabilities. By documenting these activities, the Almanack aims to capture insights that could influence future cybersecurity policies and practices.
How you can help protect your community
You can play a vital role in defending against cyber threats by advocating for stronger cybersecurity in your local water systems and schools, staying informed about potential risks, and supporting cyber education initiatives. If you have IT skills, consider volunteering with programs like Def Con Franklin to provide critical cybersecurity assistance. Additionally, prepare for emergencies by having a plan in place in case of service disruptions.