syssec_red_book

2. Introductioncover our energy needs?” Or: “What if antibiotics do not work anymore? How willwe be able to fight infections and diseases?” Or: “What if climate change results inan average sea level rise of two meters in the next few years? How will this impactour lives?” In this spirit we set out to define a few ambitious questions in thearea of security and privacy; questions that will make people think creatively;questions that will create a disruptive approach to security and an open mindto change.• What if your device can be made attacker-proof? Indeed, assume thatall computers, laptops, smartphones, etc. can be constructed in such away that they are malware-proof. Let us assume that attackers can nolonger install any kind of malicious program on any device. Would thatend our security and privacy concerns? If not, what would be the mainchallenges in such an era?• What if 50% of computers out there are compromised? Indeed, assumethat a decent percentage, say 50%, of all computers (servers, desktops,smartphones, laptops, etc.) out there are compromised. How would thisimpact our sense of security and privacy on the Internet? How wouldthis impact our everyday use of the Internet? How would this impactInternet-based financial growth and innovation?• What if you do not own your computing/communication devices anymore?Let us assume a model where users do not own their devices.Users are allowed to use the devices but (i) they do not have full privilegesto install whatever they want on the device, and (ii) at the end ofthe use period they have to return it, possibly to receive a better one withmore features and capabilities. This model of use would be similar to theway we use rented cars today, the way we use company laptops, or eventhe way we use a hotel room. What would be the impact of such a usemodel and what will be the security and privacy concerns?• What if there is no money in cyber crime? Let us assume a worldwhere attackers can make very little money, if any at all. Imagine aworld where SPAM does not pay, where click-fraud can be easily filteredout, and in general, a world where any shady activity does not pay off.Imagine a world where cyber crime simply does not make money forcyber criminals. What impact would this have on security and privacy?• What if the Internet shuts downs for a day or two? Let us assume thatsometime in the future the entire Internet shuts down for a day or two.Let us assume that all communications that are made possible by theInternet will just not be there anymore. How would this impact our lives?What kinds of activities will just not be possible? Furthermore, assume a16