Magazine menu Close Magazine menu

Internet of things

Latest stories

insight story industrial iot a doctor makes an injection to a robot using a wire syringe connected to their smartphone

Industrial ‘Internet of Things:’ Is security too far down the production line?

  • min read
    • Imagine every part of the workplace – from manufacturing equipment to energy grids, healthcare devices to farms – had the connectivity of a smartphone. That's the Industrial Internet of Things (IIoT) – sometimes known as Industry 4.0. It brings a host of efficiencies, like real-time data-analysis and improved predictive maintenance. But with great connectivity comes great responsibility. IIoT can be especially vulnerable to attack. And while it's now widely used, many businesses know their IIoT systems are poorly protected. In the second episode of Insight Story season 2, guests Chris Kubeska, Netherlands-based security researcher, cyber warfare specialist and CEO of HypaSec, and Alison Peace, patient management operations manager for UK and Ireland at Medtronic, illuminate how industry can use and protect game-changing IIoT. Where is IIoT most commonly used? All sectors are using IIoT, but some more than others. Chris says, "The maritime industry uses IIoT a lot. It's also widely used in the space industry, medical devices and critical infrastructure." Medtronic is a global developer and producer of medical devices and therapies like insulin pumps, pacemakers and implantable defibrillators – all increasingly connected. Alison explains the patient benefits: "In the UK, more than 100,000 patients receive an implanted cardiac device each year. They then have constant hospital checks, which places a burden on healthcare services. Remote monitoring for cardiac devices started in basic form almost 20 years ago. Devices can now send wireless alerts if they detect a problem. Data shows patient outcomes are better – they don't go into hospital as much." Cybercriminals have noticed loosely protected IIoT Despite its relative newness, there have been many documented attacks on IIoT. In 2014 an attack on a German steel mill's IIoT systems killed three people and injured many more. The attacker gained access to the mill's office network then compromised its industrial control system. The compromise prevented a blast furnace shutting down, leading to an explosion. Even without a breach, users finding vulnerabilities in everyday tech means reputation-damaging headlines. At-home stationary fitness bike makers Peloton were embarrassed when a security researcher found their gear included an open channel that allowed access to users' private information like weight, gender and date of birth. Similarly, a hacker accessed footage from Verkada internet-connected security cameras. Securing industrial smarts Dr. Amin Hasbini, Head of Research Center Middle East, Turkey and Africa for Kaspersky's Global Research and Analysis Team (GReAT,) is concerned about the gap between businesses who use IIoT and those who fully secure it. "A recent Kaspersky study found over 60 percent of businesses use IoT. But close to half say these systems aren't fully protected. A third of these organizations blame lack of budget, but when it's not resources stopping them, what is it?" Whatever it is, senior leaders in organizations using IIoT must shift the barriers to best-practice security. Amin says, "Some technology vendors race to add features while largely ignoring security." "The challenge starts at the top in each organization. If security becomes a priority, it gets translated into policies, guidelines and methods." Chris advises thinking about how when security may not be front of mind in your organization's tech decision-making. "Your procurement department will be looking for the least expensive deal, but that deal might not include the best security." She continues, "Many IIoT systems come with older operating systems that don't have the security settings you'd want. And then, there may not be a secure way to update the software. These are some of the risks. Know what you're buying so you can plan ahead and mitigate those risks." Alison says medical devices are now made differently to ensure security. "It's important to incorporate an encryption module to make sure others can't read the device's data. Our devices don't connect to the internet, but use a pass-through to a monitor or app. Data is encrypted in the device and sent encrypted." Alison believes the high standards of institutions they work with helps give patients confidence in their devices. "In the UK and Ireland there are strict controls when health systems engage third parties. You must have rules, regulations and systems in place to work with hospitals." Chris also has recommendations for contracts with third parties. "For encryption, your contract should specify meeting the standards of the time. So when you renew, the expectation is to keep to those standards. Have a responsible disclosure policy, and ensure your suppliers have good data security and privacy policies." She says don't be shy to end a technology vendor relationship if security conversations feel awkward. "If you don't feel comfortable speaking about cybersecurity and privacy with your supplier, look for a new one. Look at suppliers who take part in security conferences. If they're actively looking at security, that gives credence." Is regulation keeping up with IIoT? Chris thinks business should expect regulation around IIoT to speed up. "The tech's definitely moving faster than law, but there are some guidelines and frameworks." Alison feels those designing IIoT must allow for changing security requirements – something Medtronic has strived for. "Our global security office is tasked with making sure our devices comply with standards worldwide. National legislation could say, we want the data from your device in this format, and our devices are designed to enable that." Simplifying a tangled net of things Chris thinks IIoT manufacturers could aspire to lead in many ways, but chiefly, making levels of security simple to understand. "Start applying what I call 'easy standards,' like a traffic light system, so consumers and companies can know if something has a minimum level of security – for example, can it be updated? Medical uses would need a higher standard compared with consumer home grade." Alison agrees that clear and standard practice matter. "A third party can easily comply with clearly communicated, standardized security requirements. Open communication and clear criteria are essential." IIoT is already commonplace and will only grow as those organizations yet to adopt see its potential to improve productivity and reduce costs. As technology becomes increasingly connected, securing IIoT is fundamental to the safety of just about everything in our lives. As Chris warns, "I want to retire knowing my own technology won't kill me." Leaders can keep their organization and customers safe by asking the right questions and pursuing IIoT vendors who prioritize security.
Patient is in bed in a hospital room, while doctor writes on their chart. Lines show all the technology around the room and how it is centrally linked

The hospital of the future: Could smart hospitals deliver better healthcare?

  • min read
    • Healthcare needs are getting more complex, and systems more stretched. To meet the demand for precision healthcare, hospitals need to evolve to become smarter and more efficient. The World Health Organization (WHO) estimates healthcare will face a shortfall of 10 million healthcare workers worldwide by 2030. Is it sustainable to increase the workload of already stretched practitioners? Smart hospitals could make healthcare work more efficient and improve the quality of patient care. Smart hospitals and the rise of e-health Smart hospitals are part of the e-health phenomenon. A smart hospital improves patient care using optimized and automated processes, particularly the Internet of Things (IoT), to connect medical devices to AI and data analysis. Smart tech helps healthcare practitioners focus on providing high-quality care while reducing the barriers associated with using complex medical technology. Smart tech means smarter workflows One figurehead of the smart hospital movement is Humber River Valley Hospital, Canada. It's North America's first fully-digital hospital (think: online appointment scheduling, digital check-ins and your test results emailed.) It boasts robots and other tech to automate almost 80 percent of its back-office services like pharmacy, laundry and food delivery. This gives clinical staff more time to give back to patients. Cleveland Clinic Abu Dhabi (CCAD,) UAE, uses digital apps to support treatments. Pre-treatment, patients use apps to communicate with staff. During their stay, they use smart pads to access their info, daily plans and order food. At discharge, the app sends prescriptions to local pharmacies then sends them their bill. Neat. Can robots become care workers? Smart tech could help meet labor shortages: this means more android helpers. During the first COVID-19 outbreak, Wuhan Hospital, China, was staffed entirely by robots for several days. Produced by start-up CloudMinds Technology, they improved patient care and gave respite to over-stretched workers. Smart hospitals can automate and digitize traditional, labor-intensive processes. When healthcare is delivered quicker and more accurately, more people can be treated safer and quicker. Consider Johnson Control's Code Blue Activation system; When a patient reaches critical condition, it calls up an emergency care team in just 24 seconds. Could 3D printing replace donors? There's a relatively new tech in smart hospitals: 3D printing. Imagine the opportunities if surgical teams could print body parts, like prosthetic limbs or dental implants, on-demand. While the tech is in its infancy, there are promising advancements, though it's without the speed and capabilities needed for large-scale adoption. Engineers and medical researchers from the University of Minnesota recently created silicon-made scaffolding' that could benefit those with spinal cord injuries by restoring muscle control. Cells are printed onto the structure then implanted into the patient's spinal cord, with a bridge between cells. Can smart hospitals save lives? Given increased healthcare demands, hospitals may not have any choice but to change. Smart hospitals could improve the care we deliver and benefit our societies. But it will be a group effort. Professor Daniel Kelly, Cardiff University's School of Healthcare Sciences, thinks smart hospitals will be crucial for healthcare. But we have to understand how it will affect everyone, including those funding it. "As treatment for many diseases becomes more personalized, there's an urgent need for health systems to evolve. Smart hospitals are symbolic of a future standard of healthcare where we can remove the reliance on paper records and current digital systems' inefficiencies. Securing the smart hospital From sensitive patient information to medical records, it's easy to see why cybersecurity is a hot topic in healthcare. Hospital data and equipment are goldmines for hackers and criminal groups. Those goldmines become all the more accessible when introducing a connected system like a smart hospital. Firstly, traditional medical devices are outdated – they aren't secure by design. This means many wouldn't have been tested for vulnerabilities or built to connect with smart appliances or the internet. (A tough task to foresee the fourth industrial revolution, to be fair.) This gap can allow attackers to gain illegal access to systems and data. A survey by ENISA found the most critical threat to smart hospitals is malicious attacks – like malware blitzes and denial of service (DDoS) raids that take control of systems and devices, steal patient data (most likely to be sold on the dark web) and hold patient data hostage with ransomware. Since the COVID-19 pandemic, attacks on hospitals and health organizations have increased drastically, including this fatality triggered by ransomware in Germany. Human errors still pose one of the biggest threats to patients. Take drug pumps; smart hospitals, or more specifically their workers, deliver controlled doses of medications to patients. These systems prevent over or under-administration, but they have an over-ride button for emergencies. But what if the device isn't configured correctly? Someone could tamper with drug delivery, inadvertently or intentionally, which might have deadly consequences. These technological advancements are not just projects for the IT department: The smart hospital involves participation between technologists and healthcare practitioners. Ongoing collaboration is needed to protect it from cyberthreats to ensure smart systems can save more lives.
Person wearing augmented reality (AR) glasses reaches out and touches a virtual version of themselves.

Does virtual and augmented reality mean augmented cybercrime too?

  • min read
    • Not so long ago, augmented reality (AR) and virtual reality (VR) were the stuff of science fiction. Now they've become more than just niche experimental technologies. They're rapidly entering the mainstream, particularly in the consumer world of interactive media. But it's not just things like video games that are being transformed by the rise of VR platforms – there are some promising business cases for AR and VR too. In fact, some experts estimate that they will become indispensable technologies in the business world by as early as 2025. What is augmented and virtual reality? Although augmented and virtual reality are closely related, they're not the same thing. AR 'augments' the real world around the user by adding digital elements to the real-world view. Perhaps the most familiar example is the mobile game Pokémon Go, as well as less successful products like the infamous Google Glass. VR, by contrast, provides a far more immersive experience, since it relies on shutting out the physical world entirely. Popular VR devices include gaming platforms like HTC Vive and Oculus Rift, as well as lower-tech and more affordable experiences like those offered by Google Cardboard. Another term you'll encounter is mixed reality (MR), which refers to experiences that combine elements of both VR and AR. One of the best-known examples is Microsoft HoloLens, an MR platform designed specifically for business applications. What are the business applications of augmented and virtual reality? Rapid prototyping One of the most promising applications is product prototyping, a process which involves creating a complete digital model of a product (or, a so-called digital twin) and merging it with a VR experience. This allows for extensive testing and ideation without the high costs of developing multiple physical prototypes. Employee training Another popular business application, and one that's already entering mainstream use, is employee training. By applying VR or AR to training programs, it's possible to build a safe and highly interactive simulated environment with real-time feedback. Similarly, AR and VR can help improve workplace safety, especially in hazardous environments, be they workshop floors or nuclear reactors. AR can also help workers assemble, operate and maintain complex machines by providing real-time information overlaid onto their headsets. These are just a few of the exciting applications of augmented and virtual reality. And, though they might still sound like science fiction to the layperson, they're actually not. Companies like Ford, Airbus and Sotheby's are already using them. The wearable camera problem Augmented reality headsets depend on their abilities to understand the local environment, which means cameras are often essential components and they can pose a security risk. Ever since the first Google Glass prototype was released to much fanfare back in 2013 (only to fail miserably by 2015), there have been growing concerns around privacy and security. The launch of Google Glass even gave rise to the colorful term 'glasshole', which refers to those people who behaved inappropriately while using the device (such as by spying on others and taking photos without their knowledge). But edgy names aside, this has serious implications in fields such as healthcare where organizations are subject to strict compliance regulations like HIPAA to protect patient privacy. A new frontier for social engineering Aside from privacy concerns, AR and VR devices are connected like any other. They're part of a rapidly growing global network that's often dubbed the Internet of Things (IoT). And, like any connected device, they handle the transmission and storage of data, which might be misappropriated by hackers. When it comes to the immersive experiences of AR and VR, this has especially worrying potential in corporate espionage and social engineering. When technology can reach the point of convincing the brain it's somewhere where it's not, the opportunities for taking advantage of human vulnerabilities are enormous. As with any technology, the weakest link is normally the users themselves, which makes AR and VR a unique target for exploiting people. For example, attackers might inject features into VR platforms designed to mislead users into giving away personal information. There are also new implications for ransomware, in which attackers could sabotage platforms and interrupt important meetings before asking for a ransom. VR and AR experiences are only going to get more immersive and more realistic. On the one hand, this might make them more engaging and widely used. On the other, it makes them more dangerous. Fake identities, or so-called 'deepfakes' generated by machine-learning technologies, for example, allow for the manipulation of voices and videos to the extent they still look like genuine footage. If a hacker could access the motion-tracking data from a VR headset, they could potentially use it to create a digital replica. They could then superimpose this on someone else's VR experience, such as an immersive business conference, to carry out a social engineering attack. With people interacting more and more through avatars, this brings an entirely new dimension to the disturbing world of cybercrime. Data breach risks Aside from potentially providing cybercriminals with new ways to manipulate their victims, VR and AR present all the classic cybersecurity risks too. As systems that transmit and store data, they're fair game for anyone wanting to get their hands on the most valuable commodity in the world: personal data. They're also possible targets for denial of service attacks (DDos), which could have very serious implications for those depending on AR in critical situations such as surgical procedures or when operating dangerous machinery. Mitigating the risks isn't as hard as you think To address the risks associated with AR and VR, it's best to start with the core principles of information security – the very same ones that should be governing the wider IT infrastructure across the organization. Although attacks against AR and VR systems manifest themselves in different ways, the technological and administrative measures used to safeguard them are similar to other forms of connected technology. They use the same protocols as any other connected device, so all the standard rules apply – include them in your risk assessments, keep firmware up to date and encrypt any sensitive data. And never take security for granted. Most AR and VR devices don't encrypt data by default, and they may integrate with third-party apps which themselves have dubious security. On top of all the standard measures, AR and VR present some unique challenges, particularly when it comes to physical security and safety. One of the biggest problems with VR specifically is that it completely blocks off a user's visual and auditory connection to the outside world. It's always important to evaluate the physical safety and security of the user's environment first. This also applies to AR, in which it's important for users to maintain a high degree of situational awareness, particularly in more immersive environments. And, it should go without saying, but don't run around in a busy workspace wearing a VR headset! Although identity and access management are central to any information security strategy and concern any device, this is an area that's often overlooked when it comes to the adoption of AR and VR systems. You might, for example, be able to identify other people you're working with by their avatars, but there's also the potential risk of the avatar being copied and used by an unauthorized party. Fortunately, used in the right way, AR and VR can potentially improve identity and access management with multifactor authentication (MFA) – for example using eye-tracking sensors to verify your identity before you can access the rest of the system. While the challenges are undeniable, so is the potential of adopting augmented and virtual reality into the workplace.
ATTACHMENT Dglobal cybersecurity priorities

COVID-19 has changed global cybersecurity. What must nations do now?

  • min read
    • During the pandemic, lockdowns and 'shelter in place' orders around the world have done much good. They've not only saved lives, they've shown us our cities without pollution and let businesses realize employees working from home can be more business benefit than business challenge. I spoke about the growing cyberthreat landscape and what we must do about it as part of a high-level leaders discussion on international cybersecurity during the United Nations Internet Governance Forum (IGF) 2020. During the pandemic, cybercriminals used new-found time to hone their skills and test out new methods. We saw a sharp rise in cybercrime of all kinds, from malware to advanced persistent threats (APT.) New hacking groups came on the scene, and with them, new kinds of attacks. New attacks and actors unmasked Here's just a sample of the expansion of cybercrime our researchers detected since the coronavirus pandemic came into our lives. This year we've seen unique malicious file detection rise 20 to 25 percent a day. Most threats, like malware, are relatively easy to deal with. But when what we're seeing is a rise in more professional cybercrime gangs, that's a different story. Kaspersky researchers are now monitoring more than 200 cybercrime gangs who've been launching hyper-targeted attacks against targets such as banks and governments. We've also seen more 'juniors' entering cybercrime. While they're easy to stop now, many will graduate from hacker kindergarten and join the pros. With the increasing use of the internet of things, the number of points where cybercriminals can attack has grown exponentially. We know they're willing and able. Take, for example, one of the most successful global attacks, the 2016 Mirai malware attack on domain name system provider Dyn. It took down hundreds of news websites around the world. How should nations respond to the new threat landscape? The cybersecurity impact of the pandemic has two parts. First, people are at greater risk of cyber-intrusion thanks to working from home and spending more time online. Second, there are more cybercriminals, and they've become better at what they do. Meanwhile, the digital economy has been growing fast. Many businesses decided to use the breathing space and necessity of the pandemic to digitalize new parts of their business. So we're at a place and time when organizations and their customers need to feel confident in these new ways of buying and delivering services. Building that confidence will help economies thrive. So how do we get there? I've got three priorities. Leaders discuss international cybersecurity in the United Nations Internet Governance Forum (IGF) 2020 1. Secure technology by design We can make technologies much more difficult and expensive to compromise, but they must be designed that way from the start. We have operating systems in devices already on the market that are so secure we had to devise a new way of talking about them – so we call this cyber-immunity. The chances of an attack on these systems succeeding means the cost to the criminal of a successful cyberattack is higher than the damage caused. To make critical infrastructure safer, we could deploy cyber-immune technologies across the network. The time to do it is now. 2. Enforcing cybersecurity law on an international level International cooperation is crucial for hunting down cybercriminals, but it looks as though the world isn't going in a 'cooperation' direction – it's becoming more fragmented. We need a space in cybersecurity where nations can cooperate safely, without geopolitical fractures getting in the way. 3. High-level cooperation requires high-level cybersecurity education As well as needing to overcome our differences, international cooperation against cybercrime will require 'cyber diplomats' to stay continually informed about the changing threat landscape. Good news for those imagining a boring slide talk in a dark basement – cybersecurity education keeps pace with innovation and developments in learning science. For example, learning through immersive gamified simulations like Kaspersky Interactive Protection Simulation (KIPS) is popular and effective. While the world recovers from the shocks of the COVID-19 pandemic, we must recognize much has changed, not least in cyberthreats. We need a new era of international cooperation to hunt cybercriminals. We need to make sure 'cyber diplomats' (those who develop and enforce national and international policy against cybercrime) fully understand the threats. As professional cybercrime gangs hone their skills, I predict we'll see cyberattacks grow at every level, harming business and governments. Thankfully, technology keeps evolving, and no one is powerless. Adopting cyber-immune systems will help nations keep the lights, water and internet running at times of crisis and beyond.
iot report 2020

Neat yet slippery: Getting a more secure grip on your Internet of Things

  • min read
    • Now and again, a tool comes along that can be used in so many different ways, to meet so many different goals, that it changes everything. Like the Internet of Things (IoT). Whatever business outcome is challenging you most – health and safety, reducing waste or simply, being more efficient – IoT can help. All sectors are adopting these devices and systems at top speed, for an almost limitless range of reasons. And in this fast-expanding market, research suggests business security practices around IoT have some catching up to do. It's a neat yet slippery name, 'the Internet of Things.' The term defines any device that can connect to the internet, but think less smartphone or laptop, and more the raft of new devices that send or receive data through networks for more precise reasons. While consumers eye fridges that connect to the internet with wry suspicion, they nonetheless sell well. From wearable exercise monitors to virtual assistants, to smart lightbulbs, there's been strong uptake. But in business, IoT has been a bombshell. Using IoT for business is now more common than not. Kaspersky's 2020 report, With superpower comes super responsibility: Benefits and challenges of IoT in business found nearly two-thirds of companies worldwide use IoT. Analyst firms Gartner says there'll be 25 billion global IoT connections by 2025, and IDC (International Data Corporation) and GSMA forecast business spending on IoT will reach $1.1 trillion in the same year, up over 500 percent on 2016. Why has the world gone mad for IoT? IoT can save money, create new revenue streams and optimize processes, to name but a few advantages. Kaspersky's research showed the most common applications in business were things like metering, transportation and heating, venting and air conditioning (HVAC), but their application is almost without limit. Take Singapore. To reduce pollution and congestion, and improve residents' experience of getting around the city, they've recently implemented the IoT-based Green Link Determining (GLIDE) system. It links adjacent traffic signals to allow journeys with minimal stops, detecting vehicles and pedestrians and adjusting traffic signals for them. Or Barcelona, where they're using IoT for smart street lighting, and air quality and noise sensors to make their urban systems data-driven. Meanwhile, in manufacturing, IoT is making it possible to automate more, spot problems before they happen and better maintain equipment. Netherlands' Tata Steel uses IoT sensors across its plant. Analyzing the data has helped the business optimize raw material use, increase yields and reduce waste. IoT has even let loose a whole new industry – 'equipment as a service' – where customers pay by how much they use something, rather than leasing it for a period of time. A whole new world of potential! What's the catch? As with any new technology that expands fast, we see many cases where the gate needs closing after the horse has bolted. The same reasons IoT is changing the business world are why attacks on it are such a risk. The data these devices collect is often personal, commercially sensitive, or both. And as IoT devices are increasingly used for critical systems like traffic, electricity and transport, attacks that aim to stop services working risk public safety. Overcoming the IoT security challenge This high rate of compromise must not go on. What's going wrong, and how can you make sure you get it right when implementing IoT? Minimize the IoT cybersecurity risk by following good processes and asking good questions. Kaspersky's report recommends six areas of action. 1.   Look at security during selection Assess the device and system security before you decide to use it. Give preference to devices with cybersecurity certificates and from makers who are upfront about information security. Look for industry- or use-specific frameworks your business can use to research the device security, such as Industrial Internet Consortium's IoT security maturity model. 2.   Lock the gate Gateways described as 'secure' or 'trusted' sometimes protect only connected devices and not the gateway itself. If the gateway is compromised, cybercriminals can deactivate security, affecting all IoT devices on the network. Use an IoT Secure Gateway solution. 3.   Audit regularly Schedule regular cybersecurity audits and risk assessments on IoT systems. Make sure the team responsible for protecting IoT systems has up-to-date, high-quality threat intelligence. 4.   Update regularly Have a process for getting information on software and application vulnerabilities and making timely updates. 5.   Analyze network traffic Smart devices sometimes use a corporate network to communicate with the data center. Use a cybersecurity solution that analyzes network traffic, and detects and prevents network attacks on IoT. Integrate the analysis into the business's network security system. 6.   Stay in control of your partner and supplier relationships Have an up-to-date list of your partners and suppliers, and the data they can access. Give all partners requirements to follow, including compliance and security practices. Ensure those you no longer work with can't access your data and assets. We all stand to benefit from the efficiency, health and safety, and environmental improvements IoT is already making. If businesses can implement IoT securely, it needn't pose a greater risk of compromise than other technologies. In the coming years, I believe we'll see more and more impressive IoT applications that make a difference not only to the business bottom line but to our daily lives.
5 trends shaping cybersecurity

What’s about to change cybersecurity forever? Five factors to watch.

  • min read
    • In business, you've got to be able to predict the future. But rather than juggling a crystal ball, deduct from what you already know. Leaders should scan the horizon for innovation and think through the consequences for their customers' expectations and lives. And with technological change always comes information security challenges. I've been keeping my eye on a number of developments I believe will change IT security as we know it, in the year ahead. Look into these five innovations and their implications for your business. 1. New data sources will raise new privacy concerns Tech giants just keep seeking more of customers' personal data. At the end of 2019, Google announced plans to acquire health tracking company Fitbit, and a partnership with Ascension, a healthcare records system used in 21 US states. Apple and Amazon have made similar moves toward customer's health data. Other companies of all sizes will take a similar path to track customers' habits and preferences. The sources of customer data will keep getting more diverse. One autonomous car could generate 40 terabytes of data for every eight hours of driving. What does this mean for business? Headline-grabbing examples like these mean activists and broader society will pay ever-closer attention to how data is handled. Expect increasingly stricter government regulation on data use. 2. Cybersecurity will move to a service model Many companies who've handled some cybersecurity in house are now looking to outsource, because it's faster and cheaper, and they get a better overall service. The market for managed services might almost double by 2023. It's a competitive landscape. Service providers will need to distinguish themselves by providing more specific cybersecurity services, where expertise is crucial. According to a recent Kaspersky survey, 74 percent of managed service providers named cybersecurity expertise as a key client need. And for business? Information security vendors must adapt their intelligence and expertise to a service model. Simplify delivery as services rather than products, through managed service providers. 3. Industrial cyberattacks will change cybersecurity expertise Industrial cybersecurity is now moving fast. It's all about letting organizations protect industrial endpoints as they would corporate ones. In 2019, four in five industrial organizations said they were prioritizing managing operational technology (OT) and Industrial Control System (ICS) network cyber risks in the year ahead. This emphasis will help build industrial protection expertise. We need more people who understand vulnerabilities in equipment and the Internet of Things (IoT). More industry and manufacturers will use smart components and entire IoT platforms  to improve efficiency, such as smart meters, predictive maintenance and digital twins. What should business do? The focus should be on identifying vulnerabilities in industrial equipment, and patching them fast. If you're responsible for systems critical to your industry, consider advanced threat detection and response systems, and look for industrial threats expertise. Identify what smart components you're using and make sure they're protected. 4. Machine Learning will need its own cyberattack protection Businesses are using machine learning and artificial intelligence systems more, because they can expand product and service use, from finance and banking, to manufacture and biometric authentication. Their security will be strategically important. They're also popular targets for compromise attempts, including using adversarial techniques meant to spoil machine learning algorithms. For example, bombarding an algorithm with data that may appear clean, but includes deviations too small to detect a bad sample, gradually erasing a once-clear line between clean and harmful files, triggering false positives. What should you do? Protect machine learning-driven systems from compromise with dedicated experts who understand machine learning and adversarial techniques, and can build cyber protection for each case. The same applies to cybersecurity systems that use machine learning for attack detection and response. Review these systems for vulnerability. 5. Businesses will need new ways to innovate Many tech companies innovate by acquiring start-ups. Cloud infrastructure developer VMware acquires start-ups and integrates their technology with existing products. They have a team that looks for innovations that could be useful. This approach demands resources and expertise, and it's only relevant when a company constantly seeks fresh blood. On the other hand, companies that sometimes need highly specialized innovations, but don't have internal resources to search for or nurture start-ups, will look to outsource the search and selection process to a third party with the right expertise. Third parties build a shortlist. You get to choose the best-fit start-up and how you'll interact. What should your business do? Those companies that adopt new technologies first can better attract customers and oust the competition by providing convenient, tailored services and products. But to get the most out of new projects, make sure there are no hidden risks. These five factors should give you a starting place to look in your industry for what could be about to re-shape the cybersecurity you know. There may be further niche trends that matter in your unique field. A business that's always thinking ahead is one that can use that the inevitability of change to its advantage.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries