Emerging Technologies

The digital security of emerging technologies can quickly transform the cyber security landscape today, for better and for worse. The greatest promise of digital security lies in the potential for advancement of methods to protect against evolving threats. The greatest concerns attach to the abuse and exploitation of cybersecurity threats attached to emerging technologies by threat actors. A key area of concern internationally for service providers and policymakers alike is the governance of potentially intrusive and data-intensive dual-use technologies and services, and the implications especially for human rights protection.

Key emerging technologies salient to digital security include: Artificial Intelligence (AI), the blockchain, the Internet of Things (IoT), Zero Trust Security, 5G, and Non-Terrestrial Network (NTN) telecommunications.

Artificial Intelligence

While Machine Learning (ML) has been around for decades and is increasingly spoken of as Artificial Intelligence (AI) particularly in cybersecurity, we remain really only at the dawn of adoption of true AI in cybersecurity today. AI promises to revolutionize cybersecurity not just by enabling the development by humans of more advanced tools but by taking over completion of many time-consuming tasks that cybersecurity analysts tackle day to day. Recent advancements in Large Language Models (LLMs) heralding the arrival of Artificial Generative Intelligence - AI rivalling or even surpassing human intelligence - bring the added promise of AI itself being able to autonomously develop cybersecurity tools for anomaly detection, threat intelligence, and automated response. For the same reason, concerns have arisen over the potential for AI to autonomously write malicious code for use in cyberattacks and even to develop never-before-seen ‘Zero Day’ threats at a much faster scale than human attackers have been able to develop up to now. Already today, the capacity for AI algorithms to analyze vast amounts of data and learn to better identify patterns indicative of cybersecurity threats is leveraged for quicker and better threat detection.

Blockchain Technology

The promise of blockchain technology is that of a decentralized and immutable ledger system, enhancing data integrity and security. Blockchain applications in cybersecurity include securing transactions, ensuring data provenance, and protecting against tampering. Blockchain can also support identity verification and secure voting systems, making it a versatile tool in the fight against cybercrime. For all its initial promise however, blockchain is not without its own cybersecurity threats.

Security Weaknesses and Incidents:

• 51% Attacks: One notable vulnerability in blockchain technology is the 51% attack, where a malicious actor or group gains control of the majority of the network's mining hash rate, allowing them to manipulate the blockchain. This was famously exploited in the Ethereum Classic attack in 2019, leading to double-spending and significant financial loss.
• Smart Contract Exploits: Another area of concern is the security of smart contracts. These self-executing contracts can contain vulnerabilities that hackers exploit. The DAO hack in 2016 is a prime example, where a flaw in the Ethereum-based smart contract led to the theft of $50 million worth of cryptocurrency.
• Exchange Hacks: Centralized exchanges, which act as intermediaries for trading cryptocurrencies, have been frequent targets of attacks. The Mt. Gox hack in 2014, where 850,000 bitcoins were reportedly stolen, remains one of the most significant incidents, highlighting the need for stringent security measures in blockchain applications.

Internet of Things (IoT)

The Internet of Things (IoT) refers to a network of interconnected devices that communicate and exchange data. The proliferation of IoT devices introduces new cybersecurity threats, vulnerabilities, and attack surfaces. Securing these devices is critical as they often lack robust security measures. Effective IoT security strategies include network segmentation, regular updates, and implementing strong encryption protocols.

Connected Systems and Security Challenges: Emerging technologies in IoT devices range from household appliances and wearable health monitors to industrial machinery and smart city infrastructure. For instance, in smart homes, IoT devices such as smart thermostats, security cameras, and lighting systems are interconnected to improve convenience and energy efficiency. In industrial settings, IoT devices monitor machinery performance, optimize production processes, and enhance safety.

Security Weaknesses:

• Default Passwords and Lack of Updates: Many IoT devices come with default passwords and lack mechanisms for regular software updates, making them vulnerable to attacks. The Mirai botnet attack in 2016 exploited these weaknesses, leading to a massive distributed denial-of-service (DDoS) attack that disrupted major internet services.
• Data Privacy Issues: The extensive data collection by IoT devices raises significant privacy concerns. Unauthorized access to sensitive data collected by IoT devices can lead to severe privacy breaches. For example, smart health devices collecting patient data need robust encryption and secure data storage solutions to protect patient confidentiality.

Use Case Examples:

• Smart Homes: remotely manageable IoT devices in smart homes such as thermostats, appliances, and security systems, enhance convenience but are vulnerable to disruption among other threats.
• Industrial IoT (IIoT): In manufacturing, IIoT devices monitor equipment health and predict maintenance needs. Securing these devices ensures uninterrupted production and prevents industrial espionage.
• Healthcare IoT: Wearable health devices monitor patients' vital signs in real-time, improving patient care. Securing these devices ensures the privacy and integrity of patient data.

Zero Trust Architecture

Zero Trust Architecture (ZTA) is a security model that assumes no entity, inside or outside the network, is trusted by default. ZTA requires continuous verification of user identities, device security, and access permissions. Implementing ZTA involves stringent identity and access management, micro-segmentation, and real-time monitoring to ensure that only authorized entities can access critical resources. This approach minimizes the risk of internal and external cybersecurity threats by enforcing strict access controls.

Artificial Intelligence and Machine Learning are being integrated into Zero Trust frameworks to enhance threat detection and response capabilities. These combined emerging technologies enable faster and more accurate identification of anomalies and potential threats. With the increasing adoption of cloud services globally, Zero Trust Security is also seeing adaptation to better secure cloud environments. This involves implementing strict access controls, continuous monitoring, and approaches such as micro-segmentation in cloud infrastructures.

5G Security

5G technology offers numerous benefits, including higher speeds, lower latency, and the capacity to connect a massive number of devices simultaneously. However, these advantages come with significant security challenges:

• Network Slicing: 5G enables network slicing, which allows multiple virtual networks to be created on a single physical infrastructure. Each slice can be customized for different use cases, such as autonomous vehicles or smart cities. However, an attack on one slice can potentially affect others if not properly isolated and secured.
• Increased Attack Surface: The proliferation of connected devices in a 5G environment means that each device can be a potential entry point for attackers. Ensuring the security of these devices, especially IoT devices, is crucial.
• Secure Communication Channels: With 5G's high-speed data transmission, the need for secure communication channels becomes even more critical. Encrypting data and securing communication protocols are essential to prevent eavesdropping and data breaches.

Use Cases of 5G Technology

• Smart Cities: 5G enables the development of smart cities with interconnected systems for traffic management, energy distribution, and public safety. For example, intelligent traffic lights can communicate with vehicles to optimize traffic flow. Securing these channels prevents malicious actors from disrupting city infrastructure.
• Healthcare: 5G can revolutionize healthcare by supporting telemedicine and remote surgery. High-speed, low-latency connections allow doctors to perform surgeries remotely using robotic systems. Ensuring the security of these connections protects patient data and ensures the safety of medical procedures.
• Autonomous Vehicles: 5G networks facilitate real-time communication between autonomous vehicles and traffic management systems, enhancing safety and efficiency. However, securing these communication channels is vital to prevent hackers from interfering with vehicle operations.

Non-Terrestrial Networks

Wireless communications networks operating above the earth’s surface are referred to collectively as Non-Terrestrial Networks (NTNs). Comprising multiple kinds of aerial platforms from balloons to drones (UAVs) as well as satellite-based communication systems, NTNs are becoming integral to global connectivity. Securing these networks involves addressing vulnerabilities unique to emerging technologies supporting space-based infrastructure, such as ensuring secure satellite communication links, protecting ground stations, and mitigating the risks of signal interception and jamming. As these networks expand and evolve, the development of fit-for-purpose frameworks for resilience against their associated cybersecurity threats will be essential to safeguard data transmission and maintain the integrity of global communications and non-terrestrial network (NTN) communications alike.

» to the blog homepage