Kudelski IoT attended the Global Semiconductor Alliance's European Executive Forum on June 18 & 19, 2024, lead by the Chairman and CEO of the Kudelski Group, Mr. André Kudelski. Our longstanding partnership with the semiconductor industry and our deep understanding of the global threat landscape uniquely positions us to respond to the opportunities and threats represented by quantum computing and AI. Mr. Kudelski spoke to the plenary session of semiconductor industry executives, and here is a summary of that presentation.
The rapid advancements in artificial intelligence (AI) and quantum computing are poised to revolutionize our world, presenting both unparalleled opportunities and significant challenges. As these technologies evolve, the necessity for robust security measures becomes increasingly critical. Embedded security, integrated at the core of technological infrastructure, emerges as the bedrock for ensuring the safe and sustainable growth of AI in a post-quantum computing landscape.
AI and quantum computing represent a dual-edged sword in technological advancement. On one hand, they hold the potential to solve some of humanity's most pressing issues, from climate change to complex medical diagnoses. On the other hand, they introduce new vulnerabilities and amplify existing cybersecurity threats. The integration of quantum computing into our digital ecosystem will mark a paradigm shift, particularly in the realm of cryptography, where traditional algorithms like RSA could become obsolete. This shift necessitates a proactive approach to security that anticipates and mitigates potential threats before they materialize.
RSA, a cryptographic algorithm that has underpinned internet security for decades, is particularly vulnerable to quantum attacks. Quantum computers' ability to solve complex mathematical problems exponentially faster than classical computers means that the encryption methods protecting our data today could be rendered ineffective. Given that 90% of internet connections begin with RSA exchanges, this vulnerability poses a significant risk to global digital infrastructure. Despite the urgency, less than 1.75% of internet connections have migrated to quantum-resistant algorithms, highlighting the critical need for accelerated adaptation.
The rise of AI introduces a multi-dimensional threat landscape. AI can be exploited to enhance the sophistication of cyberattacks, personalize attacks on a massive scale, and even manipulate AI models to alter their behavior. The potential for AI systems to be compromised or misappropriated underscores the importance of embedding security measures directly into AI frameworks. Without such measures, the risk of "out of control" AI causing significant damage becomes a daunting possibility.
The semiconductor industry stands at the forefront of addressing these security challenges. Integrating security measures into chip designs is crucial to combating technology obsolescence and ensuring the longevity of products. Security features must be anticipatory, addressing future regulatory requirements and protecting against AI misuse. The industry must prioritize the development of secure enclaves—isolated execution environments that protect sensitive data and processes from external threats.
Secure enclaves provide a dynamic and adaptable security architecture essential for maintaining resilience in a post-quantum world. Kudelski IoT’s approach to secure, flexible, and evolutive chip architecture exemplifies this strategy. By enabling real-time adaptation to changing threats and regulatory landscapes, secure enclaves ensure that devices remain protected throughout their lifecycle. This approach not only addresses current security needs but also prepares for future quantum threats by incorporating algorithm readiness and post-quantum resilience.
Innovative concepts such as positive addressing play a vital role in maintaining control over advanced technologies. Positive addressing requires periodic key updates for continued chip operation. Without these updates, the chip either ceases to function or enters a low-performance mode, effectively preventing unauthorized use. This method, along with features like geo-locking and AI kill switches, ensures that even if a device is compromised, its potential for harm is significantly mitigated.
To navigate the complexities of a post-quantum world, semiconductor players and technology developers must adopt a forward-thinking approach. Comprehensive risk assessments and threat analyses are essential for understanding the vulnerabilities and potential attack vectors associated with their products. Investing in securely upgradable silicon security that supports quantum-resistant cryptography will be crucial. Early adopters of these technologies will not only gain a competitive edge but also contribute to a more secure digital landscape.
The convergence of AI and quantum computing heralds a new era of technological capability and complexity. As we stand on the cusp of this transformation, embedded security must be recognized as the foundational element for safe and sustainable growth. By integrating robust security measures at the core of technological development, we can ensure that the benefits of AI and quantum computing are realized while mitigating their inherent risks. The proactive steps we take today will define the security and integrity of our digital future, making embedded security not just a necessity but a fundamental imperative for the technological advancements of tomorrow.
In summary, the Kudelski Group's emphasis on secure-by-design principles and its innovative approach to evolving security challenges provide a blueprint for the industry. As we advance into a post-quantum world, the integration of embedded security will be crucial in safeguarding our digital infrastructure and ensuring the responsible development and deployment of AI technologies. The journey towards a secure and resilient digital future begins with embedding security at the heart of technological innovation.
Kudelski IoT is the Internet of Things division of Kudelski Group and provides end-to-end IoT solutions, IoT product design, and full-lifecycle services to IoT device manufacturers, ecosystem creators, and end-user companies. These solutions and services leverage the group’s 30+ years of innovation in digital business model creation; hardware, software and ecosystem design and testing; state-of-the-art security lifecycle management technologies and services and managed operation of complex systems. For more information about Kudelski IOT, please visit www.kudelski-iot.com.
The Kudelski Group (SIX: KUD.S) is a world leader in digital business enablement technologies that encompass digital content security, cybersecurity, and IoT.
NAGRAVISION provides end-to-end convergent media solutions to the digital entertainment industry including services and applications requiring access control and rights management to secure the revenue in digital television, internet, mobile and interactive applications.
Kudelski Security is an innovative, independent provider of tailored cybersecurity solutions to help enterprises and public sector institutions assess risks and vulnerabilities and protect their data and systems.
Kudelski IoT provides end-to-end solutions, IoT product design, and full-lifecycle services to IoT device manufacturers, ecosystem creators and end-user companies.
The Kudelski Group is headquartered in Cheseaux-sur-Lausanne, Switzerland and Phoenix (AZ), USA with offices in 32 countries around the world. For more information, please visit www.nagra.com.
