Safety, Security, and Privacy
Safety, Security, and Privacy continue to be merged together as IoT increases its reach into new devices. IoT devices are being develope with little security in mind, these devices continue to be attacked successfully. I attended a talk at ZonCon by (Senrio) in which their VP of Research outlined the many, many issues they’ve discovered in connected medical devices. Microsoft released Azure Sphere which aims to help their customers build more secure IoT devices with easy Azure connectedness and a standard Linux based platform.
Privacy & GDPR
Facebook has been raked over the coals time and time again over their treatment of shared data. Meanwhile GDPR is ramping up in the EU to help protect customers privacy and how their usage data is used. At least one company, https://www.streetlend.com, has shuttered their doors under the pressure of GDPR and privacy concerns. Facebook https://www.facebook.com/zuck/posts/10104899855107881 is rolling out a clear history feature to combat these concerns as well.
Blockchain and Smart-Contracts technologies continue to be interesting to our customers, especially in financial services. A number of companies are researching ways to use this technology (not directly related to Bitcoin or other cryptocurrencies) to solve novel problems.
Security Innovation Launched blockchain CTF, training, and services
We released our Blockchain CTF a couple weeks ago, with good adoption. We also have a could really cool training options and services to help secure your smart contract.
Mixing AI/ML and other expert systems with a human can be a powerful marriage. DARPA is researching this with a program called CHESS. DARPA Wants to Merge Human and Computer Cyber Defenders - Defense One. We’re getting to the point of AI/ML where we’re throwing a ton of data at an expert systems and asking it to infer meaning. This can be powerful and good, especially in domains like medical diagnosis, but it can be dangerous when applied to other domains like the legal system. The system’s predictions are only as good as the data it ingests. In diagnosis expert systems have been out performing doctors since early systems (1960’s I believe). In the legal system predictors are acting as a proxy for racism and oppression.
Posted By: Joe Basirico