{"691666":{"#nid":"691666","#data":{"type":"news","title":"The Cybersecurity Imperative in Smart Factories ","body":[{"value":"\u003Cdiv\u003E\u003Cp\u003EAs manufacturing systems become more connected, the cyberthreat grows with them. \u003Ca href=\u0022https:\/\/ece.gatech.edu\/directory\/saman-zonouz\u0022 rel=\u0022noreferrer noopener\u0022 target=\u0022_blank\u0022\u003ESaman Zonouz\u003C\/a\u003E has spent years documenting how vulnerable smart manufacturing environments are. He\u2019s an associate professor in the \u003Ca href=\u0022https:\/\/scp.cc.gatech.edu\/\u0022 rel=\u0022noreferrer noopener\u0022 target=\u0022_blank\u0022\u003ESchool of Cybersecurity and Privacy\u003C\/a\u003E and the \u003Ca href=\u0022https:\/\/ece.gatech.edu\/\u0022 rel=\u0022noreferrer noopener\u0022 target=\u0022_blank\u0022\u003ESchool of Electrical and Computer Engineering\u003C\/a\u003E, where he co-leads the Cyber-Physical Security Lab with \u003Ca href=\u0022https:\/\/provost.gatech.edu\/about-the-provost\u0022 rel=\u0022noreferrer noopener\u0022 target=\u0022_blank\u0022\u003ERaheem Beyah\u003C\/a\u003E, Georgia Tech\u2019s provost and executive vice president for Academic Affairs.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003E\u0022Disrupting the manufacturing sector doesn\u0027t just shut down individual shops. It can directly impact national security and public safety,\u0022 Zonouz said. Because manufacturing is one of 16 federally designated critical infrastructure sectors, it is deeply intertwined with energy, water, and defense, meaning disruptions can cascade far beyond the factory floor.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003EThe threats Zonouz documents go beyond ransomware. His research has demonstrated how adversaries can insert logic bombs into design files, compromising Computer Numerical Control machines or 3D printers.\u0026nbsp;\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003E\u0022We\u0027ve shown how logic bombs can be inserted remotely into design files so that everything looks normal when the part is printed, but once it\u0027s in operation, the attacker can decide when it fails,\u0022 Zonouz said, citing drone propellers, aircraft wings, and power grid transformer components as examples where invisible sabotage could have catastrophic consequences.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003EInternet-wide scans conducted by his team found that many shop-floor controllers are directly exposed to the internet, with no meaningful barrier between an adversary and the machines running a production line. Imported equipment compounds the risk, because controllers and firmware from unknown developers may carry unintentional vulnerabilities or deliberately planted backdoors. \u0022In manufacturing, many controllers and machines can still be accessed easily from outside,\u0022 Zonouz said, echoing the kind of supply chain exposure seen in high-profile attacks on widely used software platforms.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003EHis prescription is straightforward but still largely unimplemented across the sector: Build security into the system design rather than adding it afterward. \u0022The number one principle is to think about cybersecurity and risk when you design the system, not as an afterthought once everything is already built,\u0022 Zonouz said.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003EHis team has explored this through the $65 million \u003Ca href=\u0022https:\/\/georgiaaim.org\/\u0022 rel=\u0022noreferrer noopener\u0022 target=\u0022_blank\u0022\u003EGeorgia AIM initiative\u003C\/a\u003E, a collaboration with Aaron Stebner, Steven Ferguson, and Animesh Chhotaray, led by Ph.D. student Twisha Chattopadhyay. Using AI for automated anomaly detection allows complex production lines to be monitored continuously without requiring constant human oversight.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003EGeorgia Tech\u0027s standing at the intersection of manufacturing and cybersecurity is, by most measures, singular. \u0022Georgia Tech is the only top university with a dedicated School of Cybersecurity and Privacy, with about 30 professors focused solely on cybersecurity, and you rarely see this level of collaboration between cybersecurity and manufacturing faculty anywhere else,\u0022 Zonouz said. That collaboration is already producing joint publications and a patent application for AI-driven attack detection systems developed through Georgia AIM.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003ENot every attacker wants a quick payoff. Zonouz also tracks advanced persistent threats, where a nation-state actor quietly compromises a controller and does nothing for months, waiting for the right geopolitical moment to act. \u0022They get into the house and just sit there, because by sitting still nobody can detect them,\u0022 Zonouz said. That patience turns an idle, exposed controller into tomorrow\u0027s leverage.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E\u003Cdiv\u003E\u003Cp\u003E\u0022Manufacturers do not need to solve every problem at once,\u0022 Zonouz said. Finance and energy already operate under mandatory cybersecurity frameworks, while manufacturing\u0027s own standard, the Cybersecurity Maturity Model Certification, is still being phased in. \u0022The security of these systems right now is so weak that basic, easy-to-deploy solutions would stop the majority of attacks that are succeeding simply because the door is wide open,\u0022 he said. The hardest attacks will always be the patient, targeted ones, and closing the obvious gaps first is what buys manufacturers time.\u0026nbsp;\u003C\/p\u003E\u003C\/div\u003E","summary":"","format":"limited_html"}],"field_subtitle":"","field_summary":[{"value":"\u003Cp\u003EAs manufacturing becomes more connected, Saman Zonouz\u2019s research shows why cybersecurity must be built into industrial systems from the start, before hidden vulnerabilities become threats to production, public safety, and national security.\u003C\/p\u003E","format":"limited_html"}],"field_summary_sentence":[{"value":"As manufacturing becomes more connected, Saman Zonouz\u2019s research shows why cybersecurity must be built into industrial systems from the start, before hidden vulnerabilities become threats to production, public safety, and national security."}],"uid":"36757","created_gmt":"2026-08-13 19:23:46","changed_gmt":"2026-08-14 15:24:23","author":"ychernet3","boilerplate_text":"","field_publication":"","field_article_url":"","location":"Atlanta, GA","dateline":{"date":"2026-08-13T00:00:00-04:00","iso_date":"2026-08-13T00:00:00-04:00","tz":"America\/New_York"},"extras":[],"hg_media":{"680875":{"id":"680875","type":"image","title":"26-R10410-P134-059--2-.jpg","body":"\u003Cp\u003EGeorgia Tech doctoral candidates Neel Shah and Jamila Khanfri discuss how smart factories have the potential to autonomously incorporate domain expertise into additive manufacturing process development, saving industry partners time and money.\u003C\/p\u003E","created":"1786715179","gmt_created":"2026-08-14 13:46:19","changed":"1786715179","gmt_changed":"2026-08-14 13:46:19","alt":"Georgia Tech doctoral candidates Neel Shah and Jamila Khanfri in discussion","file":{"fid":"265205","name":"26-R10410-P134-059--2-.jpg","image_path":"\/sites\/default\/files\/2026\/08\/14\/26-R10410-P134-059--2-.jpg","image_full_path":"http:\/\/hg.gatech.edu\/\/sites\/default\/files\/2026\/08\/14\/26-R10410-P134-059--2-.jpg","mime":"image\/jpeg","size":4555456,"path_740":"http:\/\/hg.gatech.edu\/sites\/default\/files\/styles\/740xx_scale\/public\/2026\/08\/14\/26-R10410-P134-059--2-.jpg?itok=g2qupnzh"}}},"media_ids":["680875"],"groups":[{"id":"155831","name":"Georgia Tech Manufacturing Institute (GTMI)"},{"id":"1188","name":"Research Horizons"}],"categories":[],"keywords":[],"core_research_areas":[{"id":"39461","name":"Manufacturing, Trade, and Logistics"}],"news_room_topics":[],"event_categories":[],"invited_audience":[],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[{"value":"\u003Cp\u003E\u003Ca href=\u0022mailto:jennifer.martin@research.gatech.edu\u0022\u003EJennifer Martin\u003C\/a\u003E\u003Cbr\u003EAssistant Director of Research Communications Services\u003Cbr\u003E\u003Cbr\u003EWriter: Anne Wainscott-Sargent\u003C\/p\u003E","format":"limited_html"}],"email":[],"slides":[],"orientation":[],"userdata":""}}}