Aloysius Cheang:全球十大网络发展趋势

在上个月,成都‧世界信息安全大会迎来了全球性的机构-「战略网络空间与国际研究中心」(简称CSCIS)作为大会的支持单位;此外,我们还请到了CSCIS的董事兼亚太区执行副总裁Aloysius Cheang加入我们的海外专家顾问团,金秋十月于成都‧世界信息安全大会也会有来自CSCIS的神秘嘉宾作为大会的讲师

我们把握了与Aloysius接触的机会,请教了几个从跨国角度看待信息安全发展的几个问题。让我们接着看下去,关于“全球网络发展”,以Aloysius的观点分享了哪十大趋势:

全球十大网络发展趋势

当前,我们将以全球政治的视角解读网络发展趋势。因此,网络空间的发展已被逐渐分类为直接受政治管辖或受到相关法规限制。在此前提下,我们预期会有下列十点全球趋势:

1.资料分析、人工智能及区块链(智能协议)的融合,成为了新兴形态攻击的绝佳潜在目标;

2.边缘计算在各自的领域发展太快,其发展将造成爆炸式的数据泄露;

3.三大类别的应用群体将被揭露成为攻击目标:关键信息基础设施、工业4.0、智慧城市应用。当所有元素结合在一起,所产生的大量数据及内容将帮助潜在骇客更加容易的进行侦查活动;

4.透过移动应用程式及新形态授权方式(例如面容认证)所收集到的数据将成为传统保护规范所覆盖不到的范围;

5.电子钱包将成为一个醒目的攻击目标; 跨国界的数据泄露及隐私权监管,在迥异的司法管辖和合规要求下,将会成为一大挑战;

6.个人失去在大型网络平台下对于后台管理及私人数据的自主权,将真实上演《1984》小说里一个无时无刻、无所不在监看着人们的“老大哥”情境;

7.国家机器资助的网络攻击将在未来占所有大型攻击行动的90%;骇客攻击行动已经武器化,如同今日动漫故事里的情景;

8. 因此,具有网军的政权们将展开一场军备竞赛、并尽可能的透过各种辅助武装国家的网络军火库;

9.最后,网络造成的集体伤害将是不可避免的;

10.网络将不只是大型干扰武器、而是“大型毁灭武器”。

CSCIS简介

成立于英国的「战略网络空间与国际研究中心」(简称CSCIS)是个多团体、多国籍的国际机构,致力于提供信息决策者网络空间战略洞察及政策因应方案,以强化全球网络空间的发展与安全。CSCIS的董事兼亚太区执行副总裁Aloysius Cheang不仅是成都‧世界信息安全大会的海外专家顾问团成员,还是AC3LABS的董事、ISyncGroup物联网安全初创公司的联合创始人。

Aloysius Cheang受访英文版:

Globally we are seeing cyberspace trending alongside global political outlook at this point in time. Hence, cyberspace is becoming increasingly segmented through either direct political sanctions or regulatory requirements. Additionally, we are seeing the following global trends:

1. Convergence of Data analytics, AI and Blockchain (smart contracts) are potential great source for a new, blended vector of attack.

2. Edge clients are getting too smart for their own good. Smart things leaks data in gushes.

3. 3 big groups of attack targets are waiting to be exploited: CII, Industrial 4.0, Smart City applications. When everything comes together, the rich data and context are helping potential hackers’ reconnaissance activities much easier.

4. Collection of data via all new mobility apps and new authentication methods such as facial recognition is going to poke a big hole in traditional parameters of what to protect.

5. E-wallets are going to be such a huge scam(target).

6. Managing data leakages and privacy will be challenging in the backdrop of contrasting legal jurisdiction and compliance requirement across borders.

7. Relinquishing control of your backend infrastructure and your data over to the big corporations who will become BIG BROTHER and it is 1984 all over again.

8. Nation state-sponsored attack are going to be responsible for 90% of the big hacks that are going to happen in the future; hacking is weaponized as a commodity today.

9. As such, there is going to be a cyber arm race where nation-state players are going to build up their repertoire of cyber arsenal through their auxiliary vehicles.

10. At the end of the day, collateral damage is going to be unavoidable. Cyber is going to be WMD – not Weapons of Mass Disruption but Weapons of Mass Destruction!