Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Risk Management

Pessimism Pervades World Economic Forum Annual Survey

The annual World Economic Forum (WEF) Global Risks Perception Survey this year again includes two cybersecurity risks in the top five perceived long-term (10-year) risks. It is the same five as last year, although the order has changed. ‘Data fraud or theft’ is still considered the fourth risk, but ‘cyber-attacks’ have dropped from third to fifth.

The annual World Economic Forum (WEF) Global Risks Perception Survey this year again includes two cybersecurity risks in the top five perceived long-term (10-year) risks. It is the same five as last year, although the order has changed. ‘Data fraud or theft’ is still considered the fourth risk, but ‘cyber-attacks’ have dropped from third to fifth.

The top three risks are environmental, largely driven by increasing concern over the effects of climate change. As last year, ‘extreme weather events’ is the primary concern. Second is ‘failure of climate-change mitigation and adaptation’ (up from fifth last year). Third is ‘natural disasters’ (down from second last year).

Word Economic Forum Logo

This is not a celebratory optimistic report — rather it reflects deep concern among the world’s business leaders. “Is the world sleepwalking into a crisis? Global risks are intensifying but the collective will to tackle them appears to be lacking. Instead, divisions are hardening.” Central to this is increasing worldwide nationalism. “We are drifting deeper into global problems from which we will struggle to extricate ourselves.”

This underlying growth in nationalism over globalism is hindering efforts to solve the world’s problems.

“The challenge of establishing norms that can be enforced globally is exacerbated by geo-economic competition across advanced technologies,” says the report (PDF). It is here specifically discussing biological risks, but the argument could be applied to all the risks highlighted in the survey. In the cyber world, it is the primary cause for the lack of interest in Microsoft’s norms for international cyber behavior and its calls for a Cyber Geneva Convention.

Reflecting such concerns, the top three short-term risks are all political: ‘economic confrontations between major powers’, ‘erosion of multilateral trade agreements’, and ‘political confrontations between major powers’. The fourth is cyber-attacks involving the theft of data or money, and the fifth is cyber-attacks involving the disruption of operations and infrastructure.

In reality, all five risks are likely — at least initially — to be played out in cyber. The current confrontation between the West and Russia is likely behind Russia’s widespread election meddling via fake news distributed via social media. “In the digital era, efforts to promote (or disrupt) political values in other countries have become increasingly contentious,” notes the report.

The current trade war with China is partly caused by China’s cyber theft of U.S. intellectual property, but will likely result in increased efforts to steal more. And ‘political confrontations’ between major powers are already causing deep cyber intrusions into national infrastructures as each side seeks an advantage over the other in case of future kinetic warfare.

Advertisement. Scroll to continue reading.

Direct cyber concerns are discussed in their own section of the report: ‘Technological instabilities’. Eighty-two percent of respondents to the survey expect increased risks to the cyber theft of data and money in 2019. Eighty percent expect disruptions to operations. Around 66% expect risks associated with fake news and identity theft to increase. Sixty percent expect loss of privacy to companies and governments to increase.

These concerns are built on the history of massive data breaches through 2018. The largest was in India, where breaches reported by Aadhaar potentially compromised the records of all 1.1 billion registered citizens. The MyFitnessPal breach affected around 150 million users, and a Facebook breach affected 50 million users. The Marriott Hotels breach of 383 million people in November probably came too late in the year for inclusion. Forbes has suggested that the total cost to Marriott may approach $9 billion.

Cyber-attacks against critical infrastructure get a special mention. “The second most frequently cited risk interconnection in this yearís GPRS was the pairing of cyber-attacks with critical information infrastructure breakdown.”

So too does artificial intelligence — but more in its ability to create problems than to solve them. The Brookings survey that showed 32% of respondents see AI as a threat to humanity while only 24% do not, is cited. IBM’s DeepLocker AI-powered malware is cited as an example of the negative potential of AI in cybersecurity.

Cyber figures strongly in the section titled ‘Future Shocks’. These are not predictions, but areas where current developments may lead to unforeseen and unwanted effects. Technology pervades these possibilities generally, but figure specifically in three of the ten potential shocks. The first is the effect of quantum computing on current digital cryptography. Current cryptography will be effortlessly cracked by quantum computing, and by the time new protections are in place, many secrets will likely be already lost.

“A collapse of cryptography would take with it much of the scaffolding of digital life,” warns the report. “These technologies are at the root of online authentication, trust and even personal identity. They keep secrets — from sensitive personal information to confidential corporate and state data — safe. And they keep fundamental services running, from email communication to banking and commerce.”

The second future shock is that advanced biometric surveillance could allow new forms of social control. It is the combination of increasing, improving and pervasive biometric recognition systems, massive personal data collection into huge big-data banks, and advances in artificial intelligence that are the problem. “Global politics will be affected,” warns the report: “authoritarianism is easier in a world of total visibility and traceability, while democracy may turn out to be more difficult.”

‘Emotional disruption’ is the third future shock, based on ‘affective computing’. Built on the existing success of fake news and echo chambers in social media aimed at electoral interference and micro-targeted advertising, what else could happen? “New possibilities for radicalization would also open up, with machine learning used to identify emotionally receptive individuals and the specific triggers that might push them toward violence. Oppressive governments could deploy affective computing to exert control or whip up angry divisions.”

The WEF Global Risks Perception Survey 2019 combines the opinions of around 1000 experts and decision makers in the survey with the invited opinions of selected specialist experts. It is produced in partnership with Marsh & McLennan Companies and Zurich Insurance Group.

Related: World Economic Forum Announces Global Centre for Cybersecurity 

Related: Cyberattacks Top Risk to Business in North America, EAP, Europe: WEF 

Related: World Economic Forum Publishes Cyber Resiliency Playbook

Written By

Kevin Townsend is a Senior Contributor at SecurityWeek. He has been writing about high tech issues since before the birth of Microsoft. For the last 15 years he has specialized in information security; and has had many thousands of articles published in dozens of different magazines – from The Times and the Financial Times to current and long-gone computer magazines.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Understand how to go beyond effectively communicating new security strategies and recommendations.

Register

Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Cybersecurity Funding

2022 Cybersecurity Year in Review: Top news headlines and trends that impacted the security ecosystem

Endpoint Security

Today, on January 10, 2023, Windows 7 Extended Security Updates (ESU) and Windows 8.1 have reached their end of support dates.

Email Security

Many Fortune 500, FTSE 100 and ASX 100 companies have failed to properly implement the DMARC standard, exposing their customers and partners to phishing...

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

CISO Strategy

Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...