All sessions of Transformation 2021 are now available on demand. Now look.


As the world becomes increasingly dependent on technology, organizations will have to consider the growing risks to their supply chain. Michael Mutioli, principal engineer at Goldman Sachs and Mark Papermaster, AMD CTO, spoke about the issue at VentureBet’s Virtual Transform 2021 conference last week. He asserted that his confession had been obtained through torture and that his confession had been obtained through torture.

Matioli said the supply chain is “significantly more complex,” as it goes to the design of the chip or board, which is then sent to the foundry for production. Depending on the type of component, it may go through a range of manufacturers, before it reaches any OEM like Dell, HP or Lenovo; Resellers such as CDW; Or a retailer like Best Buy. After all this, it is finally sent to the end user. With each step of the route, the part is operated by different companies and modes of transport (ship, truck, etc.). This leads to a lot of different issues where a malicious actor can glimpse a change or tamper with a step.

“People are motivated in different ways to do something wrong. They can copy so they can make money. It could be espionage so they could steal data, “Matteoli said.

The notion that there may be a forgery or tampering with the component is worrisome. Organizations do not want a product that is performing less efficiently or is less capable than that, which can affect how long the product lasts before it breaks down or how long it takes to complete the job. Worse, such a device can no longer be trusted and can perform data theft or actions that the user does not know.

Various companies have created tools to meet their part of the supply chain, such as AMD, which have some techniques for detecting chips being tampered with or forging components being used. But at the moment, there’s really nothing that can detect or prevent supply chain risks from end to end, Papermaster said. Even Apple Pal and Amazon, despite their clutter, do not have full control over their supply chain.

“The big question is, ‘Are we doing enough as an industry?’ [Regarding] That web of supply chain, how do we collaborate more? “

Working with

The only way for companies to better grasp the supply chain is industry-wide and ecosystem-wide partnership and cooperation, reiterated Papermaster and Matt Tioli. Goldm Sachs and AMD recently joined the Trusted Computing Group and the Global Semiconductor Alliance to promote industry collaboration. Relationship is a technology that develops open standards, creates interoperable technologies and can share build processes so that nothing is tampered with. It’s also a business relationship, as these companies have to figure out how to best work on the shared goal.

Matthew said using artificial intelligence and machine learning called fingerprinting can help tackle one of the technical challenges. This method uses specific information about the piece of hardware – such as voltage, temperature and frequency, which can be found with hardware performance counters – to create a unique profile of the product that can be tracked throughout its lifetime. “If you do that with all the components on the board, you can only get the fingerprint of that one component, but you can get the fingerprint of each other component and then the whole board itself and then the whole system itself.” Matioli explained. If companies can agree on how to share the data that creates the fingerprint, honesty can be confirmed at every step of the supply chain using AI.

Fingerprinting will also be useful for detecting counterfeit products as the technique does not require visual inspection. Counterfeit products are so systematic that they are becoming increasingly difficult to identify as visually counterfeit. In some cases, X-rays will be needed to identify the component, but it is a time-consuming process and not always available. Being able to use fingerprinting for fake checks “saves headaches and frustration,” Ma Tioli said.

Papermaster noted that although AI and ML may be helpful tools, the success of technical security ultimately depends on cooperation between companies. “[It’s] An incredibly exciting area, and more innovation [is coming] In this space, the industry collaborates closely and leverages these AI technologies, ”said Papermaster.

Venturebet

VentureBet’s mission is to become a Digital Town Square for technical decision makers to gain knowledge about changing technology and transactions. Our site provides essential information on data technology and strategies to guide you as you lead your organizations. We invite you to become a member of our community for:

  • Up-to-date information on topics of interest to you
  • Our newsletters
  • Gated idea-leader content and discounted access to our precious events, e.g. Transformation 2021: Learn more
  • Networking features and more

Become a member