Hi Eduard

One of the drivers of cyber security implementations will be new and forthcoming legislation across the globe which will attempt to ensure personal privacy is both achieved and maintained. The use of draconian fines will potentially create a better incentive for companies responsible for ensuring personal privacy to actually achieve it.

While you can have security without privacy, you certainly cannot have privacy without security. Thus security will, and should, become pervasive. Whether it would become intrusive is entirely another matter, and this will very much depend on the approach taken by the organisation responsible for ensuring the security and privacy of the data.

From the human user perspective, solutions which are both pervasive and intrusive, usually result in some degree of resistance from human users. Where security and privacy systems are designed with minimal apparent impact on users, these are usualy much more successful in operation.

Achieving security and privacy is not a trivial exercise, and where cloud systems are involved, this becomes considerably more challenging. Once you add IoT and Big Data to the mix, then you face a much more difficult task again.

Providing security and privacy systems which are much less overt in operation will likely help achieve higher standards in operation. However, a much less thought about point is that companies running these systems need to pay much more attention to properly monitoring their systems in order to detect the ingress of unauthorised users. In particular, companies need to pay particular attention to ensuring a proper forensic trail is maintained, because one an attacker successfully breaches a system, the first thing they usually try to do is to delete the forensic record of their attack. This presents companies with a particular challenge, and of course, in cloud, it has yet to be solved. As, of course, is the case with IoT and Big Data.

These are very real challenges which will need to be fully addressed and properly solved before users can be assured that their personally identifiable data will remain both private and secure.

Regards

Bob

Hi Bob, thank you for very valuable comments. Indeed the interconnected world today is very complex and the possible scenarios are quite dynamic and non-linear. I remember discussing this issue with Professor David Du in Minnesota ( http://www-users.cs.umn.edu/~du/ ). David, then mentioned that Privacy vs Security is very important issue that may trigger new Legislation and Cyber Law with respect to public access to Internet and user privacy. Naturally, the current state of the art in Internet technologies assume continuous dynamic developments and innovation. This may all be possible if there are no major natural disasters, wars, etc.