In an increasingly interconnected world, the Internet of Things (IoT) has revolutionized the way we live, work and interact with technology. From smart homes and industrial automation to healthcare and transportation systems, IoT devices have seamlessly woven themselves into the fabric of our daily lives. However, this proliferation of IoT technology also brings with it a pressing concern – the critical need for robust security measures. The security of IoT devices is of paramount importance due to the vulnerabilities they introduce, the vast array of sensitive data they handle and the potential consequences of inadequate protection. Safeguarding IoT devices from cyber threats and breaches is not merely a choice, but a necessity for individuals, businesses and society as a whole.
Origins of ORION
In October 2020, the first ever Cyber Tech Warrior Enterprise event was conducted. Several small businesses specializing in IoT were given permission to explore a network with 20+ IoT devices located at the Aspire Technology Demonstration Center in Albany, New York. Within a 50-foot radius of Aspire Technology, 39 devices were discovered and outside of the building, 2,918 devices were discovered (electric vehicle chargers, IoT bicycles, cameras, etc.). With the explosion of IoT devices and data, as well as what resulted from this demonstration, the Air Force Research Laboratory (AFRL) Information Directorate in Rome, New York, took this opportunity to implement the IoT environment to better understand the IoT landscape; from sensors/actuators, communications to AI/ML, security and everything in between.
The Ecosystem
The Open-Architecture, Resilient Internet of Things for Operational Networks (ORION) ecosystem is a state-of-the-art environment operated by subject matter experts to facilitate the development, testing and validation of IoT solutions. Hosted at the Innovare Advancement Center on Griffiss Business & Technology Park in Rome, New York, ORION assists IoT vendors and customers, leveraging expertise from academia, industry and government. The cloud-hosted ecosystem is specifically designed to produce sustainable, nonproprietary solutions that employ the latest technologies to solve real-world problems. The multiple ORION labs, being built to span across multiple buildings, multiple environments and even multiple locations, are secure, sustainable, scalable and interoperable.
The location of ORION at the Innovare Advancement Center has allowed for collaboration on a project that includes all stakeholders. It provides a holistic approach to securing IoT systems, a rarity in the industry, fostering a community of academic, government and commercial stakeholders. This unique environment enables seamless integration and interoperability, prioritizing collaboration over competition. That, fundamentally, is the differentiating factor.
AIS’s Role in ORION
AIS is the prime technical leadership on ORION and responsible for the general execution of this project. It is a cross-team effort, spanning across multiple operations teams including Systems Analysis and Exploitation (SAE), Agile Cyber Solutions (ACS) and Advanced Research Concepts (ARC). AIS is also in the process of building out a 20,000 square foot hangar located on Griffiss Business & Technology Park called NTROPEE, where larger IoT systems (to include vehicles, industrial control systems, unmanned aircraft systems, etc.) and projects requiring a larger footprint will be housed. This hangar will also be a location to host events and hackathons in the near future.
“ORION is affording AIS the unique opportunity to create impactful capabilities in the IoT space while getting real-world feedback through cyber exercises and partnerships,” said Patrick McHarris, Senior Software Engineer. “We feel privileged to contribute to this project and eagerly anticipate the exciting developments that lie ahead in this critical area of cyber and information security.”
Partners
Some of the players in ORION currently include:
- Air Force Research Laboratory (AFRL) Information Directorate
- Assured Information Security (AIS)
- Griffiss Institute
- NYSTEC
- Quanterion Solutions Incorporated
- CISCO