Phil Quade, Fortinet | Fortinet Accelerate 2019
Channel: SiliconANGLE theCUBE
Date: 2019-04-09

Phil Quade, Fortinet, sits down with Lisa Martin & Peter Burris at Fortinet Accelerate 2019 in Orlando, FL

#Accelerate19 #Fortinet #theCUBE

https://siliconangle.com/2019/04/10/cybersecurity-science-not-art-says-fortinet-ciso-accelerate19/

Cybersecurity is a science, not an art, says Fortinet CISO

The current explosion of data has been compared to the oil boom of the 1900s, and the analogy holds true in more ways than as a catalyst for wealth and power. Just like oil, data needs to be stored securely, transported securely, and effectively managed to maximize its value. Without the proper security measures, data can escape like an oil gusher — fast and out of control.

“In the last century, those who could find oil, exploit it, put it to good use and protect it, dominated that century,” said Phil Quade (pictured), chief information security officer at Fortinet Inc. “I think the same words apply to data. Those who can find it, generate wisdom from it, insight from it, and protect it will dominate, in a good way, the 21st century.”

Quade spoke with Peter Burris (@plburris) and Lisa Martin (@LisaMartinTV), co-hosts of theCUBE, SiliconANGLE Media’s mobile livestreaming studio, during the Fortinet Accelerate event in Orlando, Florida. They discussed adopting a scientific approach to securing data and the benefits and challenges of cyber-physical systems (see the full interview with transcript here). (* Disclosure below.)

‘Cy-Phi’ is the new endpoint
Oil and data may need to be managed similarly on the surface, but the critical difference is that oil is a physical, limited resource whereas data is abstract and unlimited. This increases the potential for innovation using data, however; while data is fueling the transformation of society, it is simultaneously creating new problems as the cyberattack surface continues to expand, Quade pointed out.

The traditional value endpoint (think laptops, smartphones and medical devices) has evolved, but it has always remained within the cyber-domain. Quade sees this changing as operational technology becomes magnified by the internet of things and increased automation.

“Value is moving further, further and out into the endpoint — defined as the collection of information about physical processes and things,” Quade stated. “The definition of value is going to be places that can collect data about physical processes and things, protect that data, and then commoditize it.”

This environment is known as cyber-physical, or as Quade prefers, the more catchy Cy-Phi. “It’s where cyber data and physical data will be intermingled to provide value and efficiencies,” he explained. “It’s a really important area; that’s the new end point.”  

The benefits of interweaving cyber and physical components are far-reaching, and Quade admits to being “heady” about the possibilities of a field that could revolutionize medicine and even end world hunger through heavy instrumentation of food production. However, the risks of giving machines power over the physical properties of an environment are equally great.

“We’re creatures of the physical domain … and there will be new data connected about this physical domain that can affect us very personally,” Quade said. These effects go beyond the loss of personal information or resources through machine error or cyberattack and open the possibility of failure of medical devices or criminals gaining control of instruments that control critical physical variables, such as temperature.

Addressing this challenge requires treating cybersecurity as a science rather than an art, according to Quade. Scientific understanding grows from study and discipline, and each new insight builds from a base of previous discoveries. “Collect data, make it better, send it back out, bring it back in …” Quade said, describing the circular augmentation process he believes should be adopted. “I think this Cy-Phi domain is a great place to start practicing that; accumulating knowledge in a very, very scientific way to build on the successes of our forefathers.”

Watch the complete video interview below, and be sure to check out more of SiliconANGLE’s and theCUBE’s coverage of the Fortinet Accelerate event. (* Disclosure: TheCUBE is a paid media partner for Fortinet Accelerate 2019. Neither Fortinet Inc., the sponsor for theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)