RSAC 2026: What is the Future of Integrated Cybersecurity Systems?
The Era of Integrous Systems
At the recent RSA Conference, renowned cybersecurity expert Bruce Schneier emphasized the importance of ensuring data integrity in the face of rapidly evolving technologies like AI and machine learning.
CIA Triad Evolution
Schneier traced the evolution of web development through the CIA triad, noting that Web 1.0 prioritized availability, while Web 2.0 focuses on confidentiality through encryption and access controls. However, Schneier believes that the emerging Web 3.0 will require a focus on integrity – the accuracy and completeness of data ingested by AI systems.
“Integrity is about the accuracy and completeness of data,” Schneier said. “It’s about making sure that the data we feed into our AI systems is correct and complete.”
Risks Associated with Integrity Failures
- The 2024 CrowdStrike update error, which crippled tens of thousands of Windows machines worldwide, particularly those used by major airlines.
- The SolarWinds supply-chain attack of 2020, where update files were not properly validated for malicious changes.
Schneier emphasized that integrity is crucial for building trustworthy IT systems, citing examples from the human sphere, such as double-entry bookkeeping and peer review in scientific journals.
Mitigating Risks
- Authenticating sources
- Maintaining granular access controls
- Providing human-centered integrity interfaces
- Implementing the principle of least privilege
- Creating software bills of material (SBOMs)
- Establishing a hard separation between content and command in AI processes
Schneier argued that correctness is paramount when computers have the ability to influence the world, emphasizing the need for “integrous system design” to prevent integrity failures.
About Author
English