Google has announced a collaboration with Australia’s national science agency to create software aimed at automatically identifying and resolving network vulnerabilities for operators of critical infrastructure. This initiative comes in response to an increase in cyberattacks targeting essential services such as hospitals, defense agencies, and energy providers, and will be tailored to comply with Australia’s regulatory framework.
Stefan Avgoustakis, head of security practice for Google Cloud in Australia and New Zealand, emphasized that vulnerabilities in software supply chains are a worldwide concern, with Australia leading the charge in legislative measures to mitigate these risks. In light of a series of breaches over the past two years that compromised the personal information of half of Australia’s 26 million residents, the government has enforced stricter protocols for critical infrastructure operators to report and address cyber threats.
The partnership will integrate Google’s open-source vulnerability database and cloud storage with the research methodologies of the Commonwealth Scientific and Industrial Research Organisation (CSIRO). This initiative is part of Google’s ongoing commitment, which began in 2021, to invest A$1 billion (approximately $675 million) into Australia, amidst a period of strained relations with the U.S. tech firm due to the country’s regulatory demands on global technology companies.
Additionally, Google is providing cybersecurity services to the U.S. under a $9 billion contract with the Department of Defense involving several large tech firms.
Ejaz Ahmed, the project lead at CSIRO, stated that creating locally developed cybersecurity solutions will ensure better alignment with Australian regulations, leading to improved compliance and trust. The results of the project will be publicly available, facilitating access to crucial information for operators of critical infrastructure.