Avoiding technology meltdown

Cyber security with globe

Prevention is the most vital and effective means of fighting crime, and nowhere is it more critical than in the area of cyber security. In the online world, data can be stolen, exploited or sold without victims even being aware until the damage is done.

But great progress is being made. In recent years, three critical design flaws have been discovered and addressed in commonly used computer chips, or processors, before any attacks could take place. Known as Spectre, Meltdown and Foreshadow, all had the potential to allow catastrophic data theft from millions of modern PCs, mobile phones and cloud servers.

The flaws were uncovered by small groups of independent computer science researchers from just a handful of leading institutions and organisations around the world. On each occasion, the 最新糖心Vlog of Adelaide was among them.

Our own Dr Yuval Yarom co-wrote all three papers announcing the vulnerabilities. The threats, he says, were significant.

鈥淭hey could鈥檝e enabled hackers to gain unauthorised access to passwords, banking and credit card details, personal photos, emails, instant messages and other sensitive documents.听

鈥淔oreshadow even had the potential to break down the separation between 鈥榲irtual鈥 machines鈥攄istinct, private computing environments created on individual computers to allow many people to use the same hardware鈥攕uch as widely offered by cloud-computing companies.鈥

While the best advice for consumers remains installing legitimate software updates in a timely manner, Dr Yarom is confident his research, and that of his peers, will lead to fundamental industry advance鈥攁nd safer digital activity all over the world.

"Ultimately, our discoveries will lead to improved processor design and help prevent cybersecurity concerns like these resurfacing.鈥


Featured researcher

Dr Yuval Yarom
Centre for Distributed and Intelligent Technologies
School of Computer Science
Faculty of Sciences, Engineering and Technology听

Tagged in Defence, cyber and space, cyber security, spectre, meltdown