Look into your Crystal Ball - what do you think Security will look like in 2025
So we all seem to understand the issues facing security for 2020 and probably 2021.....but given our past history (which seems to re-invent itself), what are you thoughts or predictions for 2025?
My thoughts (only):
1. There will still be a shortage of skilled security workers (or so the vendors and certification organizations will tell us)
2. Ransomware will be still be around but will morph into its new format (similar to virus' from the 90s), I wont be gone but will still stick its head up from time to time and folk will need to deal with it
3. Privacy and Regulations will continue to increase the workload required to answer the many audits.
4. Smart devices will be the bane of the CISO as more of these devices find their way into the workplace.
So, what do folks think may or may not happen in 2025? Will CISOs finally be in a happy place?
1). Deepfakes become so intrinsic and embedded, the general public will have a very hard job, of being able to tell the difference between what is fake and what is not. As most people are asleep this will become acceptable to society as they cannot prevent the inherent bias and influence.
2). The manufactures refuse to keep an inventory via their reseller and distribution outlets as to who actually paid, or bought their solutions and who were they then on sold too, as it just becomes too hard for them to manage and update the firmware on their IoT embedded solutions.
3). Smart buildings and smart solutions will hold non paying users and clients to ransom, through extortion.
4). Due to the current 180 known bias within Artificial Intelligence, this will increase, and once again, people will have great difficulty telling the difference between what is good code and bad.
5). Everything we do will be monitored, tracked, passively, transparently, will be collected, analysed and sold to the highest bidder via every solution, device we handle on a daily basis. Which could also be used in a court of law, through enforcement agencies - however, they themselves cannot for certain be sure the information has not been tampered with injected bias.