System automation to keep fueling cyberattacks, expert says

ROME, N.Y. — Cyberattacks against critical infrastructure have grown significantly in the last few years and the numbers are likely to continue to rise as more systems are automated and connected to networks. 

That’s according to Eric Thayer, principal engineer for systems analysis and exploitation at Assured Information Security (AIS), which is based in the Griffiss Business & Technology Park in Rome.

“At AIS we regularly analyze the security of complex systems, such as those that may have been supporting the pipeline. We have a team that specializes in identifying weaknesses and hardening safety critical systems,” Thayer said in a May 12 news release.

He was referring to the May 8 shutdown of the main fuel supply line to the U.S. east coast following a cyberattack against Colonial Pipeline.

AIS — a cyber and information-security company serving government and commercial customers that is observing two decades in business — says it understands the importance of the computer systems and networks supporting critical infrastructure, such as a fuel-distribution pipeline, to be evaluated on a regular basis for secure design and implementation.

Ransomware is a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption.

“Cyber threats are constantly evolving, and it is important for companies to understand the impact of vulnerabilities before they are discovered and to be prepared with plans in place to mitigate potential threats,” said Thayer. “End to end vulnerability assessments and secure product consulting are services we often encourage our customers to consider. These services help to proactively identify weaknesses before they are exploited and we can build systems securely from the ground up, minimizing potential threats.”

About AIS

As of 2021, AIS has a national footprint with 10 office locations across the country and an additional five customer locations. Locally, it has an office at 250 South Clinton St., in addition to the Rome headquarters. AIS also has an office in Rochester.

Since inception in 2001, the company has completed 337 contracts and is currently fulfilling 45. 

AIS has an employee count of 300 as it marks 20 years in operation, per a June 28 news release. Over the past two decades, AIS has been awarded 17 patents and currently has 11 filed.

The AIS “ecosystem” is a collection of separate entities operating under the AIS umbrella, the firm says. In 2016, AIS became majority owner of GreyCastle Security, a provider of risk-assessment, mitigation, and certification-readiness services headquartered in Troy in the Capital Region. This year, AIS supported the founding of AssuredTek, a growing company that provides support and defends business systems, networks, and assets using an array of technology and professional services.

AIS focuses on research, development, consulting, testing, cyber-forensics, remediation, and training. It works with the U.S. Department of Defense (DoD) and has collaborative ties with other defense contractors and more than a dozen universities.