Optical LSR is a transparent and flexible thermoset material that is increasingly replacing glass in various optical applications. Discover more about it in this Insight video.

What is Optical Liquid Silicone Rubber (LSR) ?

<div data-coolorigin="https%3A%2F%2Fcloud.rosariot.com%2Fcool%2Fclipboard%3FWOPISrc%3Dhttps%253A%252F%252Fcloud.rosariot.com%252Findex.php%252Fapps%252Frichdocuments%252Fwopi%252Ffiles%252F18482_oc4ufmk6haci%26ServerId%3D59a26488%26ViewId%3D4%26Tag%3D4f27f88328695857" id="isPasted">The Internet of Things (IoT) is transforming industries worldwide, offering innovative solutions and new business opportunities. However, running an IoT business requires more than just developing connected devices; it demands a strategic focus on value creation, security and seamless integration into customer workflows. At &nbsp;IoT Stars, a panel discussion took place featuring IoT thought leaders Jaap Groot (Ignion), Ellen Boehm (Keyfactor), Ryan Carlson (Soracom) and Leonard Lee (Next Curve, moderator).&nbsp;What does it take to turn IoT innovation into a thriving business? The experts shared their insights on overcoming challenges, creating meaningful value, and driving profitability in the ever-evolving IoT landscape.&nbsp;<h2><a name="_n12radirnwsu" target="_blank"></a>Understanding IoT Businesses</h2>Ryan Carlson emphasized that the concept of "IoT businesses" can be misleading.&nbsp;"There are no IoT businesses; there are just businesses,"Carlson underscored the importance of focusing on the core business value rather than the technology itself. For him, success in IoT lies in understanding the "Play, Potential, and Plan":Play: Identify what makes your product successful. What makes it valuable to customers?Potential: Explore opportunities for adoption, scalability, and lateral applications. Can I tweak the software and get into other use cases, adding additional sensing&nbsp;Plan: The This is where most companies start. Think of a engineering plan, &nbsp;deployment plan, or sales plan. However, all of these plans don’t make any difference unless the Play can be properly answered. According to Carlson, the Play is where &nbsp;people need to spend more time, and that means getting more out in the field, finding out where people have challenges, and where we can remove the friction in a secure way.<h2><a name="_jur2fiy91dgm" target="_blank"></a>Focusing on Use Cases and Value</h2>Jaap Groot advocated for a shift in mindset from technology to value-driven applications. "When I was in the TU in Eindhoven in '89, we put a data center in a truck to do navigation. Today that’s called IoT, but it’s still navigation!". Maybe things haven’t changed too much since then, of course the technology became more sophisticated but the value to the customer is still the same. He emphasized that successful IoT ventures must prioritize solving real-world challenges, generating revenue and ultimately contributing to customer happiness.<h2><a name="_7iz10vz3el5x" target="_blank"></a>Security by Design</h2>As more devices connect to networks, the risk of vulnerabilities increases. Ellen Boehm highlighted the importance of prioritizing security from the outset. "Any of these things that we connect create a weak point in the network," she warned. She urged IoT manufacturers to familiarize themselves with the <a href="https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act" target="_blank">Cyber Resilience Act</a> (CRA), which will enforce stringent security compliance by 2027. Non-compliance could lead to substantial financial penalties, underscoring the need for updatable software and robust security measures.<h2><a name="_da1kj9nwy7bp" target="_blank"></a>Seamless Integration: The Key to Adoption</h2>For IoT to achieve widespread adoption, connected solutions must integrate seamlessly into users' workflows. Carlson noted that the best connected experiences are often invisible, citing the concept of "<a href="https://enchantedobjects.com/" target="_blank">enchanted objects</a>" as an example. "The very best connected experiences are the ones you don’t even know you’re using," he explained, encouraging IoT developers to move beyond gimmicks and focus on creating meaningful, frictionless user experiences.<h2><a name="_eh4xffra3h5n" target="_blank"></a>Bringing It All Together</h2>Leonard Lee summarized the discussion with a reminder of the ultimate goal: aligning IoT solutions with business priorities. "At the end of the day, it’s all about the business!" he concluded.The key to success in the IoT space lies in a shift of focus: Stop talking about technology, stop talking about IoT. Talk about the value (or the "Play" as Carlson stated") understanding what makes your solution valuable in the first place while designing for security and ensuring seamless integration. Upcoming IoT Stars networking events are taking place during MWC Barcelona and Embedded World Nuremberg.&nbsp;<a href="https://iotstars.com/#YyuiWwUYCwUAhcMzaaFuuIAGZjMTRKpce" target="_blank">Sign up</a>&nbsp;to stay updated about the latest technologies, news and events in the ecosystem.</div>

At the end of the day, it’s all about the business

The first rule of IoT: you do not talk about IoT

In this episode, we discuss the cyber attacks threatening the automotive industry and what leading companies & researchers are doing to be prepared. 

Podcast: How Will Your Car Get Hacked?

This article explores the principles behind optical encoders, their types, and their advantages, highlighting how they enhance performance, ensure accuracy, and meet demanding standards in complex control environments.

Optical Encoder Technology: Advanced Guide to Precision Motion Control Systems

Imagine driving a car that can communicate with other vehicles and respond to road conditions in real-time. This innovation is exciting but raises serious questions about safety and security. As vehicles become more connected and reliant on advanced technology, the risk of cyberattacks increases.Cybersecurity is now a major concern for automakers, engineers, and technology experts. To help address these growing concerns, SAE is hosting a two-part course on Automotive Cybersecurity.The course is designed to provide attendees with a comprehensive understanding of automotive cybersecurity fundamentals, best practices, and emerging trends. It will cover topics such as cybersecurity standards and regulations, secure vehicle architecture, risk assessment and management, and incident response and forensics.Level 1What: Automotive Cybersecurity Certification: Level One C2105When: May 5 &amp; 6, 2025, Live Online.How: <a href="https://www.sae.org/learn/content/c2105/">Register attendance here</a>.Level 2What: Automotive Cybersecurity Certification: Level Two C2107When: May 19 &amp; 20, 2025, Live Online.How: <a href="https://www.sae.org/learn/content/c2107/">Register attendance here</a>.&nbsp;<h2 dir="ltr">Overview of the Certification Structure</h2>The course is divided into two levels. Each level will provide valuable insights into automotive cybersecurity.<h3 dir="ltr">Level 1 (May 5-6, 2025)&nbsp;</h3>This session is aimed at participants who want to build a strong foundation in automotive cybersecurity. Participants will learn about the current challenges the automotive industry faces as it becomes more connected.&nbsp;The course provides a deep dive into cybersecurity basics, including industry standards like ISO/SAE 21434 and UNECE WP.29. Attendees will also explore risk management, threat assessments, and security engineering principles. This level is ideal for engineers, managers, and auditors looking to understand the core cybersecurity requirements and how they impact vehicle design and safety.<h3 dir="ltr">Level 2 (May 19-20, 2025)</h3>This advanced session will explore more complex cybersecurity topics. Participants will dive into automotive cybersecurity requirements according to ISO/SAE 21434. Key areas include understanding standards, regulations, and planning strategies for cybersecurity management. Participants will also learn about cybersecurity-conscious culture, handling distributed development, and conducting audits and assessments.&nbsp;Additionally, the session covers post-development activities, such as maintaining cybersecurity throughout the product’s life cycle. Practical aspects like tool management, cybersecurity case development, and validation and testing methods will also be highlighted to ensure the comprehensive protection of automotive systems.This level is perfect for those with prior knowledge or experience in the field looking to expand their expertise.Both levels are designed to provide practical, hands-on knowledge that can be applied directly to real-world automotive systems.<h2 dir="ltr"><img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1730210147827-cyber2.jpg" style="width: 100%px;" class="fr-fic fr-dib"> What Will Be Discussed – Level 1 May 5-6, 2025</h2>The Level 1 session aims to introduce participants to the basic principles of cybersecurity as they apply to the automotive industry. This includes definitions, key risks, and emerging threats that professionals must be aware of.<h3 dir="ltr">Key Sessions Covered</h3>Here is what you will learn at the Automotive Cybersecurity Certification Level One C2105.<h4 dir="ltr">Day 1:</h4><ul><li dir="ltr">Introduction to Cybersecurity in Automotive: The session will start with an overview of the challenges faced by the modern automotive sector due to the increasing automation and networking of vehicles, highlighting the importance of cybersecurity in protecting vehicles from attackers.</li><li dir="ltr">Transformation of Mobility: Exploring how the mobility landscape changes with the rise of connected vehicles and the relevance of automotive cybersecurity in this context.</li><li dir="ltr">Basics of Automotive Cybersecurity: Core goals of automotive cybersecurity, including protection mechanisms, terminologies, and the fundamentals of current cybersecurity strategies.</li><li dir="ltr">Regulatory Landscape: An overview of key global regulations, including upcoming laws, ISO/SAE 21434 standards, and UNECE WP.29, which define the framework for automotive cybersecurity.</li><li dir="ltr">Automotive Cybersecurity Engineering: How the ISO/SAE 21434 standard integrates into engineering practices, providing an understanding of the procedure, terminology, and the relationship between threat assessment and security concepts.</li></ul><h4 dir="ltr">Day 2:</h4><ul><li dir="ltr">Cybersecurity Governance: Analyzing the objectives and requirements for managing cybersecurity in automotive organizations and projects, particularly through the lens of ISO/SAE 21434.</li><li dir="ltr">Lifecycle Cybersecurity: Addressing cybersecurity management throughout the entire vehicle lifecycle—from concept to decommissioning—using practical case studies for illustration.</li><li dir="ltr">Continuous and Distributed Cybersecurity Activities: Participants will explore the ongoing cybersecurity tasks that need to be addressed, even in outsourced or distributed work settings, to maintain compliance and security integrity.</li><li dir="ltr">Practical Exercises and Final Exam: The course will conclude with a summary of key concepts and an exam designed to certify participants with a TÜV SÜD certification upon successful completion.</li></ul>By attending this Level 1 course, participants will understand the challenges and tools available for implementing cybersecurity measures in the evolving automotive world. <img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1730210157702-cyber3.jpg" style="width: 100%px;" class="fr-fic fr-dib"><h2 dir="ltr">What Will Be Discussed – Level 2 May 19-20, 2025</h2>The Automotive Cybersecurity Level 2 certification (May 19-20, 2025), developed in collaboration with TÜV SÜD, focuses on practical applications and lifecycle management in compliance with ISO/SAE 21434 and other relevant regulations.<h3 dir="ltr">Key Topics Covered</h3>You will learn:&nbsp;<ul><li dir="ltr">Cybersecurity Lifecycle: The role of cybersecurity from product development to post-development, including the implementation and management of cybersecurity processes.</li><li dir="ltr">Standards and Regulations: Participants will explore not only ISO/SAE 21434 but also additional standards such as UN R155 and how these frameworks guide automotive cybersecurity practices.</li><li dir="ltr">Planning and Audits: Detailed guidance on cybersecurity planning, conducting audits and assessments, and ensuring compliance throughout distributed development processes.</li><li dir="ltr">Cybersecurity Case Development: Learn to create and evaluate cybersecurity cases. It is important to justify the security measures taken throughout the product life cycle.</li><li dir="ltr">Post-Development Activities: Managing cybersecurity beyond the development phase, including maintenance, updates, and end-of-life considerations.</li></ul>Participants will leave the session with the tools and methodologies necessary for comprehensive cybersecurity management in the automotive sector and an exam to earn TÜV SÜD certification.<h2 dir="ltr">Benefits of Attending the Certification</h2>Attending the Automotive Cybersecurity certification offers numerous advantages for professionals in the automotive industry. Here are some key benefits:<ul><li dir="ltr">Expert Knowledge and Stay Updated: Gain valuable insights from experienced professionals in the automotive cybersecurity field. Understand the latest standards and regulations in automotive cybersecurity, including ISO/SAE 21434.</li><li dir="ltr">Practical Skills and Certification: Learn real-world techniques that can be applied directly to your work, from secure design to threat management. Upon completion, participants will receive a certificate to enhance their professional credentials.</li><li dir="ltr">Networking: Connect with other professionals in the field to share ideas and solutions. This will help build relationships and share insights with peers facing similar cybersecurity challenges.</li><li dir="ltr">Career Advancement:&nbsp;By earning a certificate of completion, participants can showcase their commitment to professional development and their value to current and potential employers.</li></ul><h2 dir="ltr">Who Should Attend?</h2>This certification is designed for professionals involved in the automotive industry who are looking to deepen their knowledge of cybersecurity. Engineers, product designers, and managers responsible for vehicle safety and cybersecurity will benefit the most.&nbsp;Compliance officers and auditors who need to stay updated on industry standards, like ISO/SAE 21434, will also find it useful. Whether you are new to cybersecurity or have prior experience, this event will help you understand the current threats, regulations, and best practices in automotive cybersecurity.<h2 dir="ltr">Register Your Attendance Now!</h2>The Automotive Cybersecurity certification (Levels 1 &amp; 2) is an important event for anyone involved in the automotive industry. With the increasing number of cyber threats, it is crucial to stay informed and prepared. Attending will give you valuable insights and practical knowledge to help safeguard your vehicles and systems.Register now to secure your spot and be part of the important discussions that will shape the future of vehicle security. Join us in making the automotive industry safer and more secure for everyone!Register now for <a href="https://www.sae.org/learn/content/c2105/">Level 1</a> &amp; <a href="https://www.sae.org/learn/content/c2107/">Level 2</a>!

The Automotive Cybersecurity Certification, organized by SAE International, is a timely event that aims to address these critical issues. The online certification will be held on two separate occasions to accommodate European audiences: Level 1 on May 5 & 6, 2025, and Level 2 on May 19 & 20, 2025.


Automotive Cybersecurity Certification

Delve into the basics of absolute encoders, its applications, advancements in technologies, calibration techniques, and the advantages over encoder types.


Absolute Encoder: Precision Positioning in the Digital Age

Quantum computers, on the other hand, promise to rapidly crack complex cryptographic systems that a classical computer might never be able to unravel. This promise is based on a quantum factoring algorithm proposed in 1994 by&nbsp;<a href="https://news.mit.edu/2023/weird-weird-quantum-world-peter-shor-killian-lecture-0310" target="_blank">Peter Shor</a>, who is now a professor at MIT.But while researchers have taken great strides in the last 30 years, scientists have yet to build a quantum computer powerful enough to run Shor’s algorithm.As some researchers work to build larger quantum computers, others have been trying to improve Shor’s algorithm so it could run on a smaller quantum circuit. About a year ago, New York University computer scientist Oded Regev proposed a <a href="https://arxiv.org/pdf/2308.06572" target="_blank">major theoretical improvement</a>. His algorithm could run faster, but the circuit would require more memory.Building off those results, MIT researchers have proposed a best-of-both-worlds approach that combines the speed of Regev’s algorithm with the memory-efficiency of Shor’s. This new algorithm is as fast as Regev’s, requires fewer quantum building blocks known as qubits, and has a higher tolerance to quantum noise, which could make it more feasible to implement in practice.In the long run, this new algorithm could inform the development of novel encryption methods that can withstand the code-breaking power of quantum computers.“If large-scale quantum computers ever get built, then factoring is toast and we have to find something else to use for cryptography. But how real is this threat? Can we make quantum factoring practical? Our work could potentially bring us one step closer to a practical implementation,” says Vinod Vaikuntanathan, the Ford Foundation Professor of Engineering, a member of the Computer Science and Artificial Intelligence Laboratory (CSAIL), and senior author of a&nbsp;<a href="https://eprint.iacr.org/2023/1501.pdf" target="_blank" data-lf-fd-inspected-kn9eq4roawkarlvp="true">paper describing the algorithm</a>.The paper’s lead author is Seyoon Ragavan, a graduate student in the MIT Department of Electrical Engineering and Computer Science. The research will be presented at the 2024 International Cryptology Conference.<h2>Cracking cryptography</h2>To securely transmit messages over the internet, service providers like email clients and messaging apps typically rely on RSA, an <a href="https://people.csail.mit.edu/rivest/Rsapaper.pdf" target="_blank" data-lf-fd-inspected-kn9eq4roawkarlvp="true">encryption scheme</a> invented by MIT researchers Ron Rivest, Adi Shamir, and Leonard Adleman in the 1970s (hence the name “RSA”). The system is based on the idea that factoring a 2,048-bit integer (a number with 617 digits) is too hard for a computer to do in a reasonable amount of time.That idea was flipped on its head in 1994 when Shor, then working at Bell Labs, introduced an algorithm which proved that a quantum computer could factor quickly enough to break RSA cryptography.“That was a turning point. But in 1994, nobody knew how to build a large enough quantum computer. And we’re still pretty far from there. Some people wonder if they will ever be built,” says Vaikuntanathan.It is estimated that a quantum computer would need about&nbsp;<a href="https://quantum-journal.org/papers/q-2021-04-15-433/" target="_blank">20 million qubits</a> to run Shor’s algorithm. Right now, the largest quantum computers have around 1,100 qubits.A quantum computer performs computations using quantum circuits, just like a classical computer uses classical circuits. Each quantum circuit is composed of a series of operations known as quantum gates. These quantum gates utilize qubits, which are the smallest building blocks of a quantum computer, to perform calculations.But quantum gates introduce noise, so having fewer gates would improve a machine’s performance. Researchers have been striving to enhance Shor’s algorithm so it could be run on a smaller circuit with fewer quantum gates.That is precisely what Regev did with the circuit he proposed a year ago.“That was big news because it was the first real improvement to Shor’s circuit from 1994,” Vaikuntanathan says.The quantum circuit Shor proposed has a size proportional to the square of the number being factored. That means if one were to factor a 2,048-bit integer, the circuit would need millions of gates.Regev’s circuit requires significantly fewer quantum gates, but it needs many more qubits to provide enough memory. This presents a new problem.“In a sense, some types of qubits are like apples or oranges. If you keep them around, they decay over time. You want to minimize the number of qubits you need to keep around,” explains Vaikuntanathan.He heard Regev speak about his results at a workshop last August. At the end of his talk, Regev posed a question: Could someone improve his circuit so it needs fewer qubits? Vaikuntanathan and Ragavan took up that question.<h2>Quantum ping-pong</h2>To factor a very large number, a quantum circuit would need to run many times, performing operations that involve computing powers, like 2 to the power of 100.But computing such large powers is costly and difficult to perform on a quantum computer, since quantum computers can only perform reversible operations. Squaring a number is not a reversible operation, so each time a number is squared, more quantum memory must be added to compute the next square.The MIT researchers found a clever way to compute exponents using a series of <a href="https://en.wikipedia.org/wiki/Fibonacci_sequence" target="_blank">Fibonacci numbers</a> that requires simple multiplication, which is reversible, rather than squaring. Their method needs just two quantum memory units to compute any exponent.“It is kind of like a ping-pong game, where we start with a number and then bounce back and forth, multiplying between two quantum memory registers,” Vaikuntanathan adds.They also tackled the challenge of error correction. The circuits proposed by Shor and Regev require every quantum operation to be correct for their algorithm to work, Vaikuntanathan says. But error-free quantum gates would be infeasible on a real machine.They overcame this problem using a technique to filter out corrupt results and only process the right ones.The end-result is a circuit that is significantly more memory-efficient. Plus, their error correction technique would make the algorithm more practical to deploy.“The authors resolve the two most important bottlenecks in the earlier quantum factoring algorithm. Although still not immediately practical, their work brings quantum factoring algorithms closer to reality,” adds Regev.In the future, the researchers hope to make their algorithm even more efficient and, someday, use it to test factoring on a real quantum circuit.“The elephant-in-the-room question after this work is: Does it actually bring us closer to breaking RSA cryptography? That is not clear just yet; these improvements currently only kick in when the integers are much larger than 2,048 bits. Can we push this algorithm and make it more feasible than Shor’s even for 2,048-bit integers?” says Ragavan.

The most recent email you sent was likely encrypted using a tried-and-true method that relies on the idea that even the fastest computer would be unable to efficiently break a gigantic number into factors.

Toward a code-breaking quantum computer

EPFL researchers in computer and communication sciences are hacking and fixing Android phones before malicious hackers do. They uncovered 31 critical security flaws in the Android system, explored its risks and developed methods to mitigate some of the key ones through better testing and broader mitigations.“Vulnerabilities in smart devices are the Achilles heel that can compromise the most critical aspects of a mobile device,” says Mathias Payer who leads EPFL’s <a href="https://hexhive.epfl.ch/" target="_blank">HexHive Laboratory</a> which conducts research in cyber security. “The main risk is that hackers can get a foothold in your system and gain lifelong access to your data as long as you have the same phone. Your phone is no longer secure.”<img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1724286999382-ce540686.jpg" style="width: 100%px;" class="fr-fic fr-dib">Mathias Payer, head of EPFL’s HexHive Laboratory - - 2024 EPFL/Murielle Gerber - CC-BY-SA 4.0The diverse critical security flaws revealed by the researchers could have been exploited to steal personal information like fingerprints, face data, along with other sensitive data stored on one’s phone like credit card or social security information.“We studied the Android system because of the open nature of its platform, but similar security flaws are likely present in the iPhone ecosystem as well. We see much less public security research on iPhones due to Apple’s closed approach which forces researchers to first reverse engineer essential information that is publicly available on Android,” explains Payer.Marcel Busch, a postdoc in the HexHive Laboratory with Payer, spearheaded the efforts into privileged layers of Android together with the PhD students Philipp Mao and Christian Lindenmeier that resulted in three publications presented at this year’s <a href="https://www.usenix.org/conference/usenixsecurity24" target="_blank" rel="noopener">Usenix Security Symposium</a>, one of the world’s four top tier cybersecurity venues. In their work, they show exactly how these security flaws manifest themselves and which layers of the Android system’s architecture are affected.<h2>The details of the Android security flaws over three layers</h2>The Android system essentially processes information via three layers of code (iPhone’s iOS follows a similar architecture.)The first layer is the secure monitor, it’s the code that processes switches to and from the world of encrypted data known as the secure world. The second layer is divided into two parts, the secure world where sensitive data is encrypted, and the normal world built on a Linux kernel. The third layer builds on top of the second layer and contains all the apps. Day-to-day apps, like the photo app or messaging app, in the normal world talk to secure apps called Trusted Applications (TA) such as the key master app which manages cryptographic keys or the biometric information management app that contain sensitive data about the user running in the secure world.<img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1724287024267-3bf4537a.jpg" style="width: 100%px;" class="fr-fic fr-dib">2024 EPFL/HexHive Laboratory - CC-BY-SA 4.0<h2 id="isPasted">Numerous defects and vulnerabilities discovered</h2>The EPFL team discovered security flaws across all three layers of the Android system. The researchers developed a program (called <a href="https://github.com/HexHive/EL3XIR" target="_blank" rel="noopener">EL3XIR</a>) that essentially throws unexpected inputs at the target code to reveal software defects and vulnerabilities, a technique called fuzzing. EL3XIR revealed 34 bugs in the most fundamental and most privileged layer of Android security, the secure monitor level, of which 17 were classified as security critical (the most severe risk level).The researchers also revealed a confusion in how the Android system communicates with trusted applications. The confusion arises when information from trusted applications are mislabeled when processed between layers. In particular, the complex and critical interaction between accessible day-to-day apps and trusted applications that has to first go down through the secure monitor, and then back up through the secure world and into the trusted applications, is affected by this issue. Across 15,000 trusted applications that the team analyzed, the researchers discovered 14 new critical security flaws, uncovered 10 silently fixed bugs that vendors patched without notifying users and confirmed 9 known bugs.<img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1724287049262-c3e4c300.jpg" style="width: 100%px;" class="fr-fic fr-dib">Mathias Payer, Marcel Busch and Philipp Mao from the HexHive Laboratory - 2024 EPFL/Murielle Gerber - CC-BY-SA 4.0They also discovered that, if vendors did not update the Android system properly with secure patches, then hackers could force a downgrade to previous vulnerable versions of trusted applications and retrieve sensitive information, compromising the entire Android ecosystem throughout the three layered architecture. The researchers scanned over 35,000 trusted applications deployed across numerous phone manufacturers.“Android is a complex ecosystem with many different vendors and devices. Patching security vulnerabilities is complex,” says Mao, PhD candidate with the HexHive. “We followed industry standards by responsibly disclosing all our findings to the affected vendors and gave them 90 days to develop patches for their systems – which they did – before publishing any details. The insights from our findings and our automated tooling will support securing future systems.”What’s the bottom line for the consumers? Keep your system and apps up-to-date by installing updates whenever they become available, download apps only through trusted app stores and buy a device from a manufacturer that guarantees long update cycles. Busch observes that “for some of the manufacturers we studied, time-to-market is the key metric which doesn't leave much room for the diligence required for building secure systems.”<hr>ReferencesSpill the TeA: <a href="https://www.usenix.org/conference/usenixsecurity24/presentation/busch-tea" target="_blank" rel="noopener">https://www.usenix.org/conference/usenixsecurity24/presentation/busch-tea</a> EL3XIR: <a href="https://www.usenix.org/conference/usenixsecurity24/presentation/lindenmeier" target="_blank" rel="noopener">https://www.usenix.org/conference/usenixsecurity24/presentation/lindenmeier</a> Global confusion: <a href="https://www.usenix.org/conference/usenixsecurity24/presentation/busch-globalconfusion" target="_blank" rel="noopener">https://www.usenix.org/conference/usenixsecurity24/presentation/busch-globalconfusion</a>

EPFL researchers have found numerous security flaws in Android’s most privileged components © iStock

Are you concerned about hackers stealing your fingerprint and face data for accessing your smartphone? EPFL researchers have found numerous security flaws in Android’s most privileged components before hackers do and give advice to users on how to reduce risks.

Finding security flaws in Android ahead of malicious hackers

Murata Digital Transformation (MDX) was launched with the goal of driving both business and IT, in order to realize Murata's long-term concept, "Vision 2030." In this article, executive officer Fumiyuki Suchi (Corporate Unit, Business Engineering &amp; Information System Group) explains the company's strategy for engaging with DX and transforming a wide range of fields including business models, value chains, and core competencies.<h2 id="isPasted">1. Aiming for a high-cycle organization where people and data are connected</h2>Murata launched MDX as a company-wide initiative. According to Suchi, the foundation for this was based on three Ds: "Diversity &amp; Decision Making Process," "Definition," and "Digital."<img src="https://images.wevolver.com/eyJidWNrZXQiOiJ3ZXZvbHZlci1wcm9qZWN0LWltYWdlcyIsImtleSI6ImZyb2FsYS8xNzIzMjIzODYwMjM2LW11cmF0YSBhLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6OTUwLCJmaXQiOiJjb3ZlciJ9fX0=" style="width: 100%px;" class="fr-fic fr-dib">Autonomous and decentralized organizational management, and the three DsSuchi:&nbsp;"We want to implement digital transformation with digitization and digitalization as drivers. We will optimize decision-making processes based on diverse mutual understanding and cooperation that goes beyond individuals, teams, organizations, and sites ('Diversity &amp; Decision Making Process'), and then redefine KGIs/KPIs and how organizations should function ('Definition')."Describing transforming business models through DX as "extremely difficult," Suchi continues, "we're first focusing on a high-cycle organization where people and data are connected."Suchi:&nbsp;"A high-cycle organization is an organization where the cycle of establishing, trying, and verifying a hypothesis and then moving on to the next hypothesis is accelerated and spirals up, allowing for agile decision-making. In order to make that possible, we aim to build a data infrastructure that allows multiple people to access the same data at the same time, so that information can be connected between management, sites, customers, and suppliers, allowing us to autonomously make use of information and data to establish policies focused on collectiveness."<img src="https://images.wevolver.com/eyJidWNrZXQiOiJ3ZXZvbHZlci1wcm9qZWN0LWltYWdlcyIsImtleSI6ImZyb2FsYS8xNzIzMjIzODg3Mzg4LW11cmF0YSBiLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6OTUwLCJmaXQiOiJjb3ZlciJ9fX0=" style="width: 100%px;" class="fr-fic fr-dib">A high-cycle organization where people and data are connected<h2 id="isPasted">2. Connecting all business processes for comprehensive and efficient optimization</h2>According to Suchi, the company will focus on Value Provided &amp; Business Model, Holistic Value Chain, and Enhancement of Core Competencies, as specific MDX initiatives.<img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1723224029515-img4-003-en.jpg" style="width: 100%px;" class="fr-fic fr-dib">MDX overall diagramSuchi:&nbsp;"Value Provided &amp; Business Model means launching new businesses outside of conventional standard businesses and specific application businesses, that are more focused on solving problems, and implementing transformation. Holistic Value Chain will be crucial in using digital to enhance this three-layer portfolio."The demand chain starts with customers and the market, while the engineering chain is rooted in manufacturing processes such as product development and manufacturing, and the supply chain extends from raw material and part procurement to sales. Holistic Value Chain is the process of connecting all of these and optimizing processes.Suchi:&nbsp;"One of Murata's strengths has been our ability to meet the needs of customers with superior technology and a willingness to bounce ideas off each other. However, this is not enough now. We need to also compete on being able to deliver quickly without loss. We will need to connect all business processes and aim for comprehensive and efficient optimization."According to Suchi, the company will aim to Enhance Core Competencies in order to realize Holistic Value Chain.Suchi:&nbsp;"Manufacturing is Murata's greatest strength, and it's in this area that we will promote the use of cyberphysical systems, the utilization of materials informatics (MI) in developing technologies, and the use of digital in marketing and promotion. We will create a high-cycle organization that enables more sophisticated decision-making, by visualizing and linking operations in the areas of Value Provided &amp; Business Model, Holistic Value Chain, and Enhancement of Core Competencies. We want to promote MDX in a way that encompasses all of this."<h2>3. Building a digital infrastructure focused on autonomy, collectiveness, and evolution</h2>Building a next-generation digital infrastructure will serve as the foundation for bringing more sophisticated decision-making, based on Value Provided &amp; Business Model, Holistic Value Chain, and Enhancement of Core Competencies. Suchi: "The goal is not simply to build infrastructures for data and applications and promote DX."<img src="https://images.wevolver.com/eyJidWNrZXQiOiJ3ZXZvbHZlci1wcm9qZWN0LWltYWdlcyIsImtleSI6ImZyb2FsYS8xNzIzMjIzOTM2Mjk5LW11cmF0YSBkLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6OTUwLCJmaXQiOiJjb3ZlciJ9fX0=" style="width: 100%px;" class="fr-fic fr-dib">Next-generation digital infrastructure conceptSuchi:&nbsp;"Our keywords for the next-generation digital infrastructure are Autonomy, Collectiveness, and Evolution. Autonomy means that people on site autonomously use digital to bring about transformation and create new value. In order for that to happen, we will build a data infrastructure that provides data governance functionality to ensure that data is used safely and securely. That's Collectiveness."Autonomy has been an important value at Murata for some time.Suchi:&nbsp;"The improvements being made at all of our sites are based on autonomy. However, as an organization expands, it tends to become more vertically aligned with regard to businesses and functions. This also means that the company becomes weaker horizontally across organizations. This is why we think it's so important to press forward with Holistic Value Chain while also considering the proper balance between Autonomy and Collectiveness, and to promote collaboration between business divisions and sites."Evolution means making use of the latest technologies, such as application programming interface (API) linking and virtualization technology.Suchi:&nbsp;"In Europe, suppliers and customers are connected to the same data infrastructure or cyberphysical system, and the pace of business continues to increase. We want to introduce the latest technology and enhance our infrastructure linked with external services and applications, so that we won't be left behind by global trends like this."<h2>4. Business and IT driven by each employee undergoing DX</h2>According to Suchi, creating environments for employees to autonomously engage in DX is also important for MDX.Suchi:&nbsp;"For example, we're preparing environments at Murata and providing ChatGPT, so that people can get familiar with digital. We're also implementing a range of policies to democratize IT, such as establishing a cloud utilization promotion organization to make it easier for people to use the latest information technology safely, establishing a digital architecture consultation service for people to get answers to their questions, and enhancing security against cyber attacks and information leaks."The company is now implementing several policies, and Suchi stresses the importance of sharing information.Suchi:&nbsp;"In addition to presenting our vision of MDX, it's important to share information and show employees how things will change and how it will benefit them. That's why we launched our new portal site. Employees can access this information and begin using digital to solve problems and build success stories. We believe that, by taking the lead in promoting DX, employees will transform themselves and then drive business and IT."Although the company has launched MDX as a company-wide challenge and continues to promote initiatives, Suchi is quick to clarify that MDX is just one means of realizing what Murata wants to be for "Vision 2030."Suchi:&nbsp;"'Vision 2030' calls for four management transformations: Management that creates a continuous cycle of social value and economic value, autonomous and decentralized organizational management, change-responsive management based on hypothetical thinking, and DX promotion. MDX is just one means of accomplishing this. The use of digital will be crucial for expanding our three-layer portfolio and four business opportunities (communications, mobility, environment, and wellness), and for accelerating our results cycle. By 2030, we will realize MDX to the point where it has a definite effect, and will also realize a high-cycle organization where people and data are connected."

In this article, executive officer Fumiyuki Suchi explains the Murata's strategy for engaging with DX and transforming a wide range of fields including business models, value chains, and core competencies.

Strategies and challenges for accelerating digital transformation

This is the introductory article in a six-part series featuring articles on "<a href="https://www.wevolver.com/article/engineering-the-quantum-future/" target="_blank" rel="noopener noreferrer">Engineering the Quantum Future</a>". The series explains the revolutionary advancements in quantum computing and their implications for various industries. Each article discusses a specific aspect of this transformative technology, from the fundamental concepts of quantum computing to the practical applications and challenges. This series is sponsored by Mouser Electronics. Through the sponsorship, Mouser Electronics promotes innovation and the exchange of knowledge, aiming to harness the revolutionary capabilities of quantum computing for a smarter and safer technological future.This article was originally published in '<a href="https://resources.mouser.com/methods/engineering-the-quantum-future" target="_blank">METHODS: Engineering the Quantum Future</a>,' an e-magazine by Mouser Electronics. It has been edited by the Wevolver team and <a href="https://www.wevolver.com/profile/ravi.rao" target="_blank">Ravi Y. Rao</a> to adapt its presentation for a wider audience. While the foundational ideas originate from William Hurley (whurley), this version enhances accessibility and discussion context.&nbsp;<h2 dir="ltr">Introduction</h2>It is a challenge to imbue people with excitement about the practical realities of quantum computing. After all, the vast majority of voices evangelizing the topic routinely pull examples from science fiction rather than fact. At the same time, the naysayers cite how far we are from world-changing quantum breakthroughs. We’re still at the phase where we’re cool enough to fire up people’s imaginations while simultaneously causing the more right-brained among us to dismiss quantum computing as nothing more than a tech hype bubble sector, the latest technology buzz destined to fizzle.This article explores the current state of quantum computing, highlighting its challenges and potential. It addresses the excitement and skepticism surrounding quantum advancements and emphasizes the need for practical understanding and education. The article serves as an introduction to the six-part series "Engineering the Quantum Future" which covers various aspects of quantum computing, from fundamental concepts and technical breakthroughs to practical applications and ethical considerations. Each subsequent article delves into specific trends and technologies shaping the future of quantum computing.<h2 dir="ltr">Dual Nature of Quantum Computing's Promise</h2>Quantum computing garners support for its transformative potential while facing skepticism from those who question its immediate practicality. Both perspectives on quantum computing have a certain validity, with the truth currently hovering somewhere between the two poles.&nbsp;For professional developers who understand how to code for both classical and quantum machines, the future is now.&nbsp;Of course, we all create our own bubbles in life and being so deeply embedded within the quantum sphere, researchers surrounded by people who DO understand, and it’s only when they talk to people outside their field that they realize how much work there is still to do in terms of educating people on quantum computing’s potential.<h2 dir="ltr">Transformative Potential of Quantum Computing</h2>Quantum computing holds limitless potential, representing not just a more efficient way of computing but a whole new way of thinking about computing itself. The future power of quantum computers is unparalleled, and the potential applications are as vast as they are varied.&nbsp;So much of what currently limits our ability to solve problems comes down to time, translated into lifetimes. Since time travel has been deemed impossible (for now), going faster is the next best substitute. Quantum computing is how we unlock it and, in doing so, jumpstart the next technological revolution.&nbsp;Quantum can potentially be even more transformative than the industrial or informational revolutions combined. It is about improving our current systems and redefining them at the most fundamental level. It is strongly believed that the impact of quantum computing on our lives will be profound and far-reaching. It will not only affect our work and daily lives, but it will also significantly impact the future of our species. From eliminating diseases to healing the damage we have done to our planet—even taking us to Mars and beyond—the keys to humanity’s literal survival may well lie inside these magic machines.<h3 dir="ltr">Revolutionizing Healthcare</h3>Quantum computing possesses the remarkable potential to revolutionize the field of medicine and transform healthcare as we know it. Imagine a world where diseases currently deemed incurable, such as cancer and Alzheimer's disease, can be effectively cured. This seemingly far-fetched notion is moving closer to reality through the power of quantum computing.In a recent groundbreaking paper titled "Insights from Incorporating Quantum Computing into Drug Design Workflows" (Bioinformatics, Volume 39, Issue 1), published in January 2023, researchers explored the integration of quantum neural networks to predict the impact of mutations on drug binding.[1] This study exemplifies the promising applications of quantum computing in drug design, where intricate molecular interactions must be analyzed and optimized with unprecedented precision and efficiency. Leading global pharmaceutical companies are actively exploring the use of today's quantum computers to propel scientific discovery. By leveraging the immense computational power of quantum algorithms, quantum-friendly pharma companies aim to accelerate the drug discovery and development process, expediting the identification of potential therapeutic compounds and bringing effective treatments to patients in a fraction of the time.<img src="https://images.wevolver.com/eyJidWNrZXQiOiJ3ZXZvbHZlci1wcm9qZWN0LWltYWdlcyIsImtleSI6ImZyb2FsYS8xNzIyMjM3ODAwOTg0LWltYWdlMy5qcGciLCJlZGl0cyI6eyJyZXNpemUiOnsid2lkdGgiOjk1MCwiZml0IjoiY292ZXIifX19" style="width: 100%px;" class="fr-fic fr-dib" alt="quantum-computing-healthcare">Quantum computing enhances medical research and treatment accuracy, from genomic analysis to personalized medicineThe impact of quantum computing on healthcare, however, goes beyond pharmaceutical advancements. With the ability to process vast amounts of data and optimize complex algorithms, quantum computers will enhance medical imaging techniques, enable more accurate diagnoses, reduce surgery wait times by making hospital administration far more efficient, and contribute to personalized medicine. By analyzing individual patient data and genetic profiles, quantum computing has the potential to assist in tailoring treatments and therapies to specific individuals, optimizing outcomes, and improving patient care on a profound level.Human longevity aside, let’s examine the potential for humanity’s longevity on our planet.<h3 dir="ltr">Addressing Global Climate Challenges</h3>Quantum computing stands poised to make a significant impact in addressing urgent global climate challenges. By harnessing quantum computing’s power, we can greatly enhance our ability to model and predict climate change with unprecedented accuracy. This newfound precision empowers us to take proactive and effective measures to mitigate its impact on our planet and its various ecosystems.Furthermore, quantum computing offers a ray of hope in our pursuit of sustainable energy solutions by assisting in the development of novel and efficient energy sources to replace or reduce our dependence on fossil fuels. These advancements can revolutionize renewable energy technologies, optimize energy distribution systems, and accelerate the transition to a low-carbon future.From a material science environmental angle, quantum computing also has much to offer. By unraveling intricate molecular structures and properties, quantum computers can guide researchers towards innovative solutions that mitigate the environmental impact of single-use plastics, providing a sustainable path towards a cleaner and greener planet.<h3 dir="ltr">Solving Global Issues</h3>Poverty, inequality, and global conflict are also big problems that can be broken down into data sets that quantum computers could munch through, allowing us to see solutions we may not have been able to see before through the extraction of meaningful insights.&nbsp;<h2 dir="ltr">Ethical and Social Implications</h2>Every light casts its shadow, however, and as we embark on this exciting new era of quantum computing, we must also be mindful of the technology's ethical and social implications.&nbsp;One critical aspect of the ethical considerations surrounding quantum computing is the potential exacerbation of existing inequalities or the creation of new ones. As this technology advances, it is crucial to address the digital divide and ensure equitable access to quantum computing resources, knowledge, and opportunities. Efforts must be made to prevent the marginalization of underprivileged communities or perpetuate societal disparities. By fostering inclusivity and providing equal access to quantum computing education and infrastructure, we can strive for a future where everyone has the chance to benefit from its advancements.Additionally, privacy and data security are critical concerns in the age of quantum computing. Quantum computers possess the potential to break currently challenging encryption algorithms, raising questions about the security of sensitive information. Robust encryption methods must be developed and implemented to safeguard personal data, financial systems, and sensitive communications from potential threats. Ethical frameworks and regulations should be established to protect individuals and organizations from the misuse of quantum computing capabilities, ensuring responsible and secure practices.Furthermore, we must actively engage in ongoing discussions surrounding the ethical implications of quantum computing in fields such as healthcare, artificial intelligence, and autonomous systems. Transparent and inclusive dialog involving experts, policymakers, and society can help navigate the ethical challenges that arise and shape the development of guidelines and best practices while safeguarding against unintended consequences.Future articles in the "Engineering the Quantum Future" series will dive into these topics in great detail, providing comprehensive insights and developments in the field of quantum computing.<h2 dir="ltr" id="isPasted">Conclusion</h2>All caveats aside, we remain &nbsp;quantum computing optimists and enthusiasts, with the belief that the technology will be the savior of the future of our species.&nbsp;Let us embrace this technology with open arms and use it to create a better and brighter future for all. It won’t be long before you connect the quantum dots between quantum’s potential and every primary sector of society.This article was initially published in "<a href="https://resources.mouser.com/methods/engineering-the-quantum-future" target="_blank">METHODS: Engineering the Quantum Future</a>," an e-magazine by Mouser Electronics. It has been substantially edited by the Wevolver team and <a href="https://www.wevolver.com/profile/ravi.rao" target="_blank">Ravi Y Rao</a>. It's the introductory article to Engineering the Quantum Future Series. Upcoming articles will introduce readers to more trends and technologies transforming quantum computing.<hr>The&nbsp;<a href="https://www.wevolver.com/article/engineering-the-quantum-future/" target="_blank">introductory article</a>&nbsp;explores the current state of quantum computing, highlighting its challenges and potentialThe&nbsp;<a href="https://www.wevolver.com/article/from-bits-to-qubits-an-introduction-to-quantum-computing/" target="_blank">first article</a>&nbsp;dives into the foundational concepts of quantum computing, covering its theoretical basis, technological evolution, and potential applicationsThe&nbsp;<a href="https://www.wevolver.com/article/breakthroughs-in-quantum-computing/" target="_blank">second article</a>&nbsp;takes a look at some transformative breakthroughs in quantum computingThe <a href="https://www.wevolver.com/article/quantum-computing-and-energy-optimization-a-future-beyond-moores-law/" target="_blank">third article</a>&nbsp;examines the role of quantum computing in enhancing energy efficiencyThe <a href="https://www.wevolver.com/article/the-quantum-web-interconnecting-quantum-processors-for-larger-scale-machines/" target="_blank">fourth article</a>&nbsp;explains quantum interconnectivity, detailing how linking quantum processors can amplify computing powerThe <a href="https://www.wevolver.com/article/the-quantum-threat-to-cybersecurity-and-the-quest-for-quantum-proof-encryption/" target="_blank">fifth article</a>&nbsp;addresses how the advancements in quantum capabilities pose significant challenges to traditional encryption methods and cybersecurityThe&nbsp;<a href="https://www.wevolver.com/article/technical-and-ethical-issues-in-quantum-computing-the-quantum-challenge/" target="_blank">sixth article</a>&nbsp;discusses the technical and ethical challenges of quantum computing as the technology progresses<hr><h2 dir="ltr">Reference</h2>[1] Lau B, Emani PS, Chapman J, Yao L, Lam T, Merrill P, et al. Insights from incorporating quantum computing into drug design workflows. Bioinformatics. 2023 Jan 1;39(1). doi: 10.1093/bioinformatics/btac789. PMID: 36477833; PMCID: PMC9825754. Available from: <a href="https://pubmed.ncbi.nlm.nih.gov/36477833/" target="_blank">https://pubmed.ncbi.nlm.nih.gov/36477833/</a>

Introducing the Engineering the Quantum Future Series: Quantum computing redefines our approach to complex challenges, expanding the scope of what's possible across multiple disciplines.

Engineering the Quantum Future

In recent years, the rise of Generative Artificial Intelligence (AI) has been nothing short of revolutionary. This technology, capable of producing content that closely mimics human output, has paved the way for innovations across various fields. From writing convincingly real emails to creating impressive images, generative AI's capabilities are vast and transformative.However, as with any technological advancement, there are two sides to the story. The same capabilities that offer numerous benefits also pose significant risks, particularly concerning cybersecurity. Specifically, one of the most concerning developments has been the enhancement of phishing schemes, making them more sophisticated and challenging to detect than ever before. This article explores the rise of generative AI, how it's changing the phishing landscape, and best practices to avoid becoming a victim.&nbsp;<h1 dir="ltr">The Evolution of Generative AI</h1>Generative AI is marked by its ability to learn from a vast dataset of existing digital content and generate new, unique outputs that can pass for human-created. This process involves complex algorithms and neural network models that analyze patterns, styles, and structures within the data they're fed. As a result, generative AI can produce a wide range of outputs, including textual content, images, music, and even synthetic voices. Its applications are far-reaching, offering potential benefits in areas such as content creation, entertainment, education, and beyond. [1]However, the power of generative AI extends beyond positive use cases. Its very capabilities, particularly in mimicking human communication styles and generating personalized content, have opened new avenues for cybercriminals. These advancements have led to a new generation of phishing attacks that are significantly more difficult to identify and combat.<h1 dir="ltr">The Transformation of Phishing Tactics</h1>Phishing schemes have long been a staple in the arsenal of cybercriminals. Traditionally, these attacks involved sending generic, often poorly written emails, attempting to lure recipients into divulging sensitive information or downloading malicious software. While effective to a degree, these attempts were easier to spot and avoid due to their lack of personalization and sophistication. [2]Enter generative AI, and the landscape of phishing has changed dramatically. With the ability to analyze and replicate communication styles, generative AI enables cybercriminals to craft highly convincing and personalized messages. These messages can mimic the tone, style, and even specific phrases used by individuals or organizations, making them far more likely to deceive recipients.<h1 dir="ltr">Understanding AI-Enhanced Phishing</h1>The core threat of AI-enhanced phishing is its personalization and realism. Generative AI can create emails, text messages, or social media messages that look and sound like they're from a trusted source, such as a colleague, friend, or a reputable organization. This level of personalization is achieved by analyzing publicly available data or previously breached information to tailor attacks to individual targets. [3]<img src="https://images.wevolver.com/eyJidWNrZXQiOiJ3ZXZvbHZlci1wcm9qZWN0LWltYWdlcyIsImtleSI6ImZyb2FsYS8xNzE0Mzg4NjY3Mjg2LWN5YmVyMi5wbmciLCJlZGl0cyI6eyJyZXNpemUiOnsid2lkdGgiOjk1MCwiZml0IjoiY292ZXIifX19" style="width: 100%px;" class="fr-fic fr-dib">Phishing attacks begin with tricking users out of their important credentials. Image credit:&nbsp;<a href="https://www.valimail.com/guide-to-phishing/" target="_blank">Vailmail</a> For instance, a generative AI-powered phishing email might reference recent transactions, use language that matches the supposed sender's usual tone, or mimic the layout and design of legitimate correspondence. With such attention to detail, these fraudulent messages are incredibly persuasive, increasing the likelihood that recipients will comply with their requests, whether that involves providing passwords, financial information, or other sensitive data.<h1 dir="ltr">The Signs of AI-Generated Phishing Attacks</h1>Despite their sophistication, AI-generated phishing attacks are not foolproof. There are still telltale signs that can help discerning individuals identify them. These include slight inconsistencies in language or format, unusual requests, or links to websites that, upon closer inspection, have subtle differences from legitimate addresses. Moreover, these messages might lack the personal touch or in-depth knowledge that genuine communications from friends or colleagues would have, relying instead on information that could be publicly accessed or inferred.<h1 dir="ltr">Strategies for Personal and Organizational Protection</h1>Naturally, the advancement of AI-enhanced phishing schemes necessitates stronger defensive measures, both at personal and organizational levels. Awareness is the first step; understanding that no one is immune to these attacks is crucial. From there, adopting a multi-layered approach to security can significantly mitigate risks. [4]<h2 dir="ltr">For individuals:</h2><ul><li dir="ltr">Be Skeptical of Unsolicited Communications: Always approach unexpected requests for information or action with caution, even if they appear to come from known contacts or organizations.</li><li dir="ltr">Verify Independently:&nbsp;If a message asks for sensitive information or to perform a specific action, verify its authenticity through an independent channel. For example, if you receive an email from your bank asking for personal details, contact the bank directly using a phone number from their official website.</li><li dir="ltr">Use Advanced Security Features:&nbsp;Enable two-factor authentication (2FA) wherever possible. This adds an extra verification step that can protect your accounts even if your password is compromised.</li><li dir="ltr">Regularly Update Software:&nbsp;Ensure that your operating system, applications, and anti-virus software are up to date to protect against known vulnerabilities.</li></ul><h3>For organizations:</h3><ul><li dir="ltr">Conduct Regular Training: Employees should be regularly trained on the latest cybersecurity threats and how to recognize phishing attempts. Simulated phishing exercises can be particularly effective.</li><li dir="ltr">Implement Strict Information Handling Policies: Limit the amount of personal and sensitive information that can be shared or accessed based on job roles.</li><li dir="ltr">Adopt Advanced Security Technologies: Utilize email filtering, intrusion detection systems, and AI-based security solutions that can identify and block phishing attempts.</li><li dir="ltr">Establish Clear Reporting Procedures:&nbsp;Employees should know how to report suspected phishing attempts promptly, allowing IT security teams to respond quickly.</li></ul><h1 dir="ltr">The Role of Continuous Education</h1>As generative AI continues to evolve, so too will the tactics used by cybercriminals. For this reason, staying informed about the latest developments in AI and cybersecurity is essential. For individuals, this means staying abreast of the latest security advice and best practices. For organizations, it involves regular training sessions and updates on cybersecurity trends and threats. [5]Awareness campaigns, workshops, and online courses can play significant roles in educating the public and employees about the dangers of AI-enhanced phishing schemes and how to protect against them. Knowledge is power, and in the context of cybersecurity, it's also the best defense.<h1 dir="ltr">Looking Ahead: The Future of AI in Cybersecurity</h1>The dual-use nature of generative AI in cybersecurity presents a continuous game of cat and mouse between cybercriminals and defenders. As AI technologies become more sophisticated, so too do the tools and strategies to combat malicious use. Future developments in AI could offer more robust detection mechanisms, identifying and neutralizing phishing attempts before they reach their intended targets. Similarly, advancements in natural language processing could enable more effective filtering of phishing content, while machine learning models might predict and block new phishing tactics.[6]However, as technology advances, the complexity and novelty of phishing attacks will likely increase as well. A proactive and adaptive approach to cybersecurity, emphasizing technological solutions and human vigilance and education, will be necessary to combat these advances.<h1 dir="ltr">Conclusion</h1>The rise of generative AI has brought with it an era of enhanced phishing schemes, presenting new challenges in the realm of cybersecurity. While these sophisticated attacks pose significant risks, the combination of advanced security measures, continuous education, and heightened awareness provides a formidable defense. As we navigate this evolving landscape, staying informed, cautious, and prepared is essential for protecting personal and organizational integrity in the digital age. Through collective effort and the strategic application of technology, we can mitigate the threats posed by AI-enhanced phishing and secure our digital future.<h3 dir="ltr">References</h3><ol><li dir="ltr"><a href="https://www.techtarget.com/searchenterpriseai/definition/generative-AI" target="_blank">https://www.techtarget.com/searchenterpriseai/definition/generative-AI</a></li><li dir="ltr"><a href="https://www.phishing.org/what-is-phishing" target="_blank">https://www.phishing.org/what-is-phishing</a></li><li dir="ltr"><a href="https://withpersona.com/blog/ai-phishing-attacks" target="_blank">https://withpersona.com/blog/ai-phishing-attacks</a></li><li dir="ltr"><a href="https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams" target="_blank">https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams</a></li><li dir="ltr"><a href="https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing" target="_blank">https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing</a></li><li dir="ltr">https://sennovate.com/the-role-of-artificial-intelligence-in-detecting-phishing-attacks/</li></ol>

Generative AI has opened up an entirely new world of cybersecurity threats. 


The Rise of Generative AI and Enhanced Phishing Schemes

Health-monitoring apps can help people manage chronic diseases or stay on track with fitness goals, using nothing more than a smartphone. However, these apps can be slow and energy-inefficient because the vast machine-learning models that power them must be shuttled between a smartphone and a central memory server.Engineers often speed things up using hardware that reduces the need to move so much data back and forth. While these machine-learning accelerators can streamline computation, they are susceptible to attackers who can steal secret information.To reduce this vulnerability, researchers from MIT and the MIT-IBM Watson AI Lab created a machine-learning accelerator that is resistant to the two most common types of attacks. Their chip can keep a user’s health records, financial information, or other sensitive data private while still enabling huge AI models to run efficiently on devices.The team developed several optimizations that enable strong security while only slightly slowing the device. Moreover, the added security does not impact the accuracy of computations. This machine-learning accelerator could be particularly beneficial for demanding AI applications like augmented and virtual reality or autonomous driving.While implementing the chip would make a device slightly more expensive and less energy-efficient, that is sometimes a worthwhile price to pay for security, says lead author Maitreyi Ashok, an electrical engineering and computer science (EECS) graduate student at MIT.“It is important to design with security in mind from the ground up. If you are trying to add even a minimal amount of security after a system has been designed, it is prohibitively expensive. We were able to effectively balance a lot of these tradeoffs during the design phase,” says Ashok.Her co-authors include Saurav Maji, an EECS graduate student; Xin Zhang and John Cohn of the MIT-IBM Watson AI Lab; and senior author Anantha Chandrakasan, MIT’s chief innovation and strategy officer, dean of the School of Engineering, and the Vannevar Bush Professor of EECS. The research will be presented at the IEEE Custom Integrated Circuits Conference.<h2>Side-channel susceptibility</h2>The researchers targeted a type of machine-learning accelerator called digital in-memory compute. A digital IMC chip performs computations inside a device’s memory, where pieces of a machine-learning model are stored after being moved over from a central server.The entire model is too big to store on the device, but by breaking it into pieces and reusing those pieces as much as possible, IMC chips reduce the amount of data that must be moved back and forth.But IMC chips can be susceptible to hackers. In a side-channel attack, a hacker monitors the chip’s power consumption and uses statistical techniques to reverse-engineer data as the chip computes. In a bus-probing attack, the hacker can steal bits of the model and dataset by probing the communication between the accelerator and the off-chip memory.Digital IMC speeds computation by performing millions of operations at once, but this complexity makes it tough to prevent attacks using traditional security measures, Ashok says.She and her collaborators took a three-pronged approach to blocking side-channel and bus-probing attacks.First, they employed a security measure where data in the IMC are split into random pieces. For instance, a bit zero might be split into three bits that still equal zero after a logical operation. The IMC never computes with all pieces in the same operation, so a side-channel attack could never reconstruct the real information.But for this technique to work, random bits must be added to split the data. Because digital IMC performs millions of operations at once, generating so many random bits would involve too much computing. For their chip, the researchers found a way to simplify computations, making it easier to effectively split data while eliminating the need for random bits.Second, they prevented bus-probing attacks using a lightweight cipher that encrypts the model stored in off-chip memory. This lightweight cipher only requires simple computations. In addition, they only decrypted the pieces of the model stored on the chip when necessary.Third, to improve security, they generated the key that decrypts the cipher directly on the chip, rather than moving it back and forth with the model. They generated this unique key from random variations in the chip that are introduced during manufacturing, using what is known as a physically unclonable function.“Maybe one wire is going to be a little bit thicker than another. We can use these variations to get zeros and ones out of a circuit. For every chip, we can get a random key that should be consistent because these random properties shouldn’t change significantly over time,” Ashok explains.They reused the memory cells on the chip, leveraging the imperfections in these cells to generate the key. This requires less computation than generating a key from scratch.“As security has become a critical issue in the design of edge devices, there is a need to develop a complete system stack focusing on secure operation. This work focuses on security for machine-learning workloads and describes a digital processor that uses cross-cutting optimization. It incorporates encrypted data access between memory and processor, approaches to preventing side-channel attacks using randomization, and exploiting variability to generate unique codes. Such designs are going to be critical in future mobile devices,” says Chandrakasan.<h2>Safety testing</h2>To test their chip, the researchers took on the role of hackers and tried to steal secret information using side-channel and bus-probing attacks.Even after making millions of attempts, they couldn’t reconstruct any real information or extract pieces of the model or dataset. The cipher also remained unbreakable. By contrast, it took only about 5,000 samples to steal information from an unprotected chip.The addition of security did reduce the energy efficiency of the accelerator, and it also required a larger chip area, which would make it more expensive to fabricate.The team is planning to explore methods that could reduce the energy consumption and size of their chip in the future, which would make it easier to implement at scale.“As it becomes too expensive, it becomes harder to convince someone that security is critical. Future work could explore these tradeoffs. Maybe we could make it a little less secure but easier to implement and less expensive,” Ashok says.

A new chip can efficiently accelerate machine-learning workloads on edge devices like smartphones while protecting sensitive user data from two common types of attacks — side-channel attacks and bus-probing attacks. Image: Chip figure courtesy of the researchers; MIT News; iStock.

Researchers have developed a security solution for power-hungry AI models that offers protection against two common attacks.

This tiny chip can safeguard user data while enabling efficient computing on a smartphone

Harnessing cutting-edge technology to optimize energy efficiency, comfort, and security in modern buildings

Building Management: The Power of Building Automation Systems

While embedded systems tend to lack the processing horsepower of servers or even modern personal computers, the sheer number of devices is making them an increasingly valuable target for bad actors looking to run illegal botnets and cryptocurrency mining operations. One of the first major security-related wake-up calls for embedded system designers was the 2016 Nest thermostat botnet attacks. Given the consumer-facing nature of the particular Internet of Things (IoT) coupled with an increased sensitivity regarding privacy and security; the Nest botnet caused a huge amount of discussion. Those discussions tended to center on how companies should build security into their low-cost IoT products and how consumers can safely operate the devices in their homes and businesses.With the growing threat of cyberattacks, it is essential that developers keep security considerations in mind throughout the design process. By following some practical tips and recommendations, developers can guard against a wide range of attack scenarios. Read on for an outline of security measures developers can use in their embedded designs.<h2>Build Secure</h2>While there are numerous chip architectures, operating systems, and communications protocols; many IoT devices tend to be built around Arm®-based architectures, and if they run an OS it tends to be a Linux distribution. This commonality is good in many ways; lower costs and faster development times; it also comes with quite a few negatives. Attack vectors tend to become “one-size-fit-all”, especially for devices running a Linux-based OS. To mitigate the threats associated with widespread devices that share a common architecture, developers should implement the following “quick win” security design principles:<ul><li>Do NOT hardcode passwords into the firmware. Also, do not use a common default password for all devices. Require the user to create a custom username and password during device initialization.</li><li>Do NOT enable insecure protocols such as HTTP, FTP, or Telnet by default. Data going off the device via wired or wireless protocols must be strongly encrypted. Avoid “homebrewed” encryption solutions.</li><li>Ship the device with the most restrictive configuration possible and let the end-user make a proactive decision to reduce security-related settings.</li><li>All mechanisms used to access the devices should require authentication and authorization controls. Two-factor authentication (2FA) should be used if practical.</li><li>All user-facing inputs should be filtered to avoid injection-type attacks.</li><li>Implement a secure device management interface for the end-user that will allow them to manage their assets, update devices, monitor devices, and securely decommission the devices that have reached their end-of-life (EOL).</li><li>Over-The-Air (OTA) update mechanisms must be validated on-device. The update files must be sent encrypted en route to the device. Lastly, ensure there are anti-rollback features to prevent a device from being reverted to a previous, insecure firmware.</li><li>If third-party software libraries are used in the design of your device, they must be continually monitored to ensure that third-party updates are integrated and that they do not become deprecated. Abandoned software projects can become nasty vulnerabilities for your device. Change the third-party software default passwords before committing them to your project.</li><li>Limit what sensitive data should be stored on the device. Store such information in a secure enclave only.</li><li>Remember that with the IoT that embedded systems are only one part of a larger ecosystem. Ensure that security is built into the cloud, desktop, and mobile applications as well. Ecosystem security is only as strong as the weakest link.</li><li>Consider establishing a bug bounty program to encourage end-users and security researchers to submit flaws in a secure, responsible manner.</li></ul>Physical access to a device tends to be the game-over situation for devices. That doesn’t mean that there aren’t things that can be done to make it harder physically exploit these types of devices. Entire books have been written on making circuit boards and associated enclosures tamper-resistant but for a few “quick wins” consider the following physical design rules-of-thumb to harden your device:<ul><li>Pins for debugging ports such as JTAG and UARTs are very useful when developing and testing a device. They are also tempting targets for those seeking to reverse engineer a device with ill-intent. Obfuscating these pins and/or removing header pins for production units is recommended. Note that this will come at the expense of making it more difficult to troubleshoot once fielded. Designers must consider a balance between security and maintainability.</li><li>The use of adhesives, ultrasonic welding, and/or specialty security screws can make it more difficult to open a device.</li><li>Applying a non-conductive epoxy over sensitive components can obfuscate their identity and purpose.</li><li>You might be tempted to use older components that might have vulnerabilities. Be aware of the counterfeit components as well. If a deal seems too good to be true, it probably is. Balancing security and time-to-market considerations is not a decision to be taken lightly.</li><li>Multilayer boards can be used to route traces in a way that makes it harder to discern how the board functions.</li></ul><img src="https://s3-us-west-1.amazonaws.com/wevolver-project-images/froala%2F1723102912865-shutterstock_2343572457.jpg" style="width: 100%px;" class="fr-fic fr-dib">Some of the following recommendations might be a bit much for consumer-grade IoT devices. However, as we will elaborate on later, industrial control systems and defense systems would likely benefit from these more robust physical security measures:<ul><li>Build security features into the board itself, such as microswitches, mercury switches, or magnetic switches that can detect if a board is being unintentionally handled or opened. Nichrome wire or fiber optics can also be used. If the wire or fiber is negatively impacted by someone trying to tamper with a device, then there will be a detectable change in the current flow of the wire or the behavior of photons through the fiber.</li><li>Side Channel or glitching attacks, while perhaps not common, provide a unique advantage to adversaries in that they use the laws of physics against a device and thus are very difficult to prevent though can be detected. By attacking the timing or restricting the flow of electrons to a CPU, it’s possible to get a device to act in unintended ways that negate security features. Voltage and current sensors can be implemented onboard circuit boards to detect if glitching may be occurring, though there is potential for false positives.</li><li>Significant adversaries can employ x-ray machinery to peer into microchips and discover the topography of the transistors to determine function and more. Sensors that detect x-rays can be added to detect tampering, though can do nothing to prevent an adversary from extracting useful information.</li></ul>It should be noted that there is quite a dichotomy between the paradigms of security and openness. Security values obfuscation. Open hardware values understanding. Regardless, keep in mind the old adage that locks only keep honest people honest, and so too with security-at-large. For more information on how to build secure IoT devices, visit the Open Web Application Security Project (OWASP) IoT Project.<h2>Operate Secure</h2>Even if a manufacturer could implement all the best secure design principles in their product, they would be mostly for naught if the end-user does not operate their device in a secure manner.<ul><li>Change the default router name, router password, network name (SSID), and network encryption key. Be sure to use strong password principles and do not use the same password for both networks.</li><li>Segment your home network into two “virtual” networks so that IoT devices cannot be “seen” by the desktop computers, Network Attached Storage (NAS) devices, etc. To do this quickly and easily, use the guest network feature for your IoT network.</li><li>Most IoT devices rely on a smartphone app to control the device. Keep the app up to date and use 2FA for login if available.</li><li>Disable any features of your IoT devices that you do not intend to use.</li><li>Update the firmware of both your router and IoT devices on a regular basis.</li><li>When an IoT device reaches the end of life and no longer receives updates consider replacing it with a newer model.</li></ul><h2>Industrial Strength Security</h2>Consumer-facing IoT products may be plentiful, but their industrial counterparts, collectively&nbsp;<iframe id="65f2ad2682d39cfbc40c772a" width="250" class="specs-iframe" height="440" src="https://wevolver.com/iframe/specs/microchip-technology-evb-pci11400-pcie-switch-evaluation-board?iframe=true" frameborder="0" scrolling="no" data-lf-form-tracking-inspected-kn9eq4roawkarlvp="true" data-lf-yt-playback-inspected-kn9eq4roawkarlvp="true" data-lf-vimeo-playback-inspected-kn9eq4roawkarlvp="true"></iframe> referred to as Industrial Control Systems (ICS) manage numerous extremely important and potentially dangerous processes. Everything from energy production to factories uses embedded digital technology (referred to as Operational Technology or OT; in contrast to office-centric Information Technology or IT) to control the facilities and associated machinery responsible for performing the various processes. The ICS environment is sufficiently different from a strict IT environment that special considerations for hardening OT devices and ICS networks are warranted. The most fundamental principle is that ICS should not have a connection to the internet. While this seems like a no-brainer, it is surprising how often this fundamental rule is violated. For more information on how to secure ICS networks and devices, there are two security frameworks you should review: MITRE ATT&amp;CK for ICS and the MITRE ATT&amp;CK for Enterprise.The nature of where ICS systems are typically found (e.g., areas that are environmentally, chemically, or otherwise hazardous) means ICS has been designed to prioritize the availability of the systems over confidentiality. From a positive perspective, this typically means there are redundant systems, and those systems are designed to fail safely. However, ICS systems can be left in operations for several decades and may not always be kept up-to-date. In addition, many of the protocols are older and were built with efficiency, not security in mind. Bottom line, security in the ICS or IIoT space is uniquely challenging and best practices may be difficult to implement. However, embedded developers for such machinery should be cognizant of the need to modernize their design practices and incorporate security into future designs and not treat it as a bolt-on afterthought.

With the growing threat of cyberattacks, it is essential that developers keep security considerations in mind throughout the design process. By following some practical tips and recommendations, developers can guard against a wide range of attack scenarios.

Why are security protocols crucial for your embedded systems?

Are you an EE looking for a new podcast?  Here's a list of MacroFab Circuit Break episodes to get you started. 

The Perfect Binge! Top 8 Circuit Break Episodes for New Listeners

Intrinsic ID-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

Intrinsic ID-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Intrinsic ID-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Intrinsic ID-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

Intrinsic ID-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

THINC Lab-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

THINC Lab-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

THINC Lab-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

THINC Lab-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

THINC Lab-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

49 Pound Social-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

CREATE Education Project-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

CREATE Education Project-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

CREATE Education Project-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

CREATE Education Project-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

CREATE Education Project-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Sculpteo-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

Sculpteo-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Sculpteo-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Sculpteo-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

Sculpteo-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Sculpteo-Tue Oct 31 2023 23:59:59 GMT+0200 (Eastern European Standard Time)

SHINING 3D-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

SHINING 3D-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

SHINING 3D-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

SHINING 3D-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

SHINING 3D-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Jiga-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

Jiga-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Jiga-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

Jiga-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

Jiga-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

BCN3D Technologies-Fri Jun 30 2023 23:59:59 GMT+0200 (Central European Summer Time)

BCN3D Technologies-Mon Jul 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

BCN3D Technologies-Thu Aug 31 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

BCN3D Technologies-Thu Aug 31 2023 23:59:59 GMT+0200 (Central European Summer Time)

BCN3D Technologies-Sat Sep 30 2023 23:59:59 GMT+0300 (Eastern European Summer Time)

cybersecurity

Network System Control Center Operator Working

Dive into our comprehensive guide on defense in depth layers, unravelling the complexities of multi-tiered security strategies for robust protection.

Unraveling Defense in Depth Layers: A Comprehensive Guide

This article provides a detailed overview of the Modbus TCP protocol fundamentals, communication, data representation, security, daily life applications, and integration.

Modbus TCP: A Comprehensive Guide to the Protocol and Its Applications

Exploring the design, development, connectivity, security, and more aspects of IoT devices

Internet of Things: A Comprehensive Guide to its Engineering Principles and Applications

cybersecurity

Profiles