What is meant by IT security in the hardware sector?

This refers to the protection of the technical components of a computer system from damage, theft, or unauthorized access. To successfully defend against cybercriminals, both companies and users must rethink their security standards. Comprehensive IT security encompasses not only software but also computer hardware. This applies to the entire lifecycle, from commissioning and ongoing management and maintenance to the disposal of the devices.

What specific threats exist to hardware components?

• The most common cause of DRAM errors is DDR RAM, which can be triggered by defective DRAM modules or other hardware defects such as faulty power supplies. The so-called Rowhammer attack is a well-known example. The main reason for this is the increasing integration density of DRAM chips, which makes the memory systems of laptops and PCs particularly vulnerable to such attacks.

• Another security problem is hard drives. These can contain malware modules that can take control in so-called "God mode." Once a hard drive is infected with such malware, only physical destruction can help.

• An equally dangerous security vulnerability concerns the USB interface. Networking devices via USB allows malicious code to infiltrate USB controllers. This risk affects USB flash drives, keyboards, and other devices.

• Another security issue concerns the BIOS. Although BIOS was largely replaced by UEFI (Unified Extensible Firmware Interface) in 2007, many UEFI motherboards still support BIOS in legacy mode. Current UEFI vulnerabilities can then be exploited to overwrite the BIOS.

• An often neglected threat to IT security for computers There are also various types of interference that computers can be exposed to today. These include, for example, magnetic interference, RF interference, voltage dips, current fluctuations, and electrostatic discharges. Such interference can lead to irreversible damage to hardware components. Embedded computers, in particular, which are characterized by a high degree of automation, are frequently affected.
• However, malware such as Trojans, spyware, or ransomware can also threaten IT security for computers. This affects clients and servers, mobile devices like smartphones, and network components such as routers and switches. The malware can permanently damage and render certain hardware components unusable.

These are special chips on the computer's motherboard that securely store cryptographic keys used for encryption and decryption. Secure Boot, in turn, is a UEFI-supported security standard that ensures a computer can only boot a trusted operating system. TPM also controls which operating systems the PC boots. This prevents bootstrap loaders (boot managers) from gaining access to the computer via a malicious operating system.

How can companies securely procure and operate their hardware? What are the current trends and technologies?

To own IT strategy To optimize and simplify IT processes, companies often rely on cloud infrastructures. Cloud solutions enable the seamless and secure connection of virtually all IT areas. To minimize the risk of firmware-based attacks on deployed hardware, the concept of the Root of Trust (RoT) has become particularly prevalent. Root-of-trust programs, such as the Hardware Security Module (HSM), utilize specialized hardware hardening technologies.

These are tamper-proof devices that generate and protect the keys used to encrypt and decrypt corporate data and to create digital signatures and certificates. HSMs not only protect cryptographic processes but also enable computer systems and networked mobile devices to verify the authenticity of received information.

Another cybersecurity solution is RISC-V Security.

Another cybersecurity solution to make cyberattacks more difficult is RISC-V security. Often referred to as the computer kernel, RISC-V is actually a computer bus architecture (ISA) that governs how software and the CPU interact and which instructions the CPU is allowed to respond to. RISC-V is open-source hardware. This means that users can create and run RISC-V implementations, typically on Linux, at any time without needing a license or incurring license fees. Since licenses are expensive, RISC-V is a particularly good solution for smaller companies. The free use of the open RISC-V instruction set architecture helps uncover architectural vulnerabilities in RISC-V applications and prevents them from propagating to other CPU developments. This makes life difficult for hackers.

Have there been any known attacks on hardware recently?

Joe Pichlmayr, Managing Director of Ikarus Security Software GmbH, says: "We expect attacks to become even more individualized this year. Attackers have long recognized that targeted attacks offer significantly greater potential. The Spectre and Meltdown CPU vulnerabilities discovered in Intel, AMD, Apple, and ARM processor chips bypass and disable security and encryption methods."

An attacker can exploit this vulnerability to access sensitive data in kernel memory, such as passwords, encryption keys, emails, etc. Currently, no cases of abuse by Meltdown or Spectre are known. However, the patches now available significantly impact processor performance. Two further new attack methods were also recently discovered: "Zombie Load" and "Store-to-Leak Forwarding." These affect almost all current processors in PCs and servers. The new attack methods allow direct access to data or metadata from processes running on adjacent CPUs.

Which regulatory requirements are relevant?

The new EU directive on network and information security, NIS-2-RIt establishes criteria for identifying operators of critical infrastructure and defines minimum standards for their information security. The directive has not yet been transposed into national law but is scheduled for adoption in 2025. Another standard is ISO 27001, which specifies the requirements that an information security management system (ISM) must meet.

ISO certification is the most important cybersecurity certification. It includes a detailed risk analysis as well as the implementation and continuous monitoring of security controls. A prerequisite is the effective identification and management of all risks associated with processing sensitive data.

Where is hardware security headed in the next 5 years?

Security threats will continue to evolve in the coming years. To successfully counter them, a full-stack strategy is necessary, combining hardware and software security features.