We propose that primary government, private and academic institutions establish Luxembourg as the World leader in cybersecurity through the creation Trustless Computing Cluster and Campus.
It will be a public-private initiative to realize the World leading local ecosystem and technology park for the leading-edge of cybersecurity in communications, financial, blockchain, cyber-physical, and artificial intelligence, by offering an unmatched array of scientific, quality of life and economic incentives to the very best talents, researchers, startups, companies and research centers in the fields: “A Disneyland for the brightest cyber and AI security minds“.
After having met many top public and private institutions over Spring 2017 months in Luxembourg, we have incorporated in June in Luxembourg our startup spin-off TRUSTLESS.AI (raising a 25M$ ICO), and planning to the transfer of our non-profit arm Trustless Computing Association (TCA), newly named of the Open Media Cluster.
The Cluster, will be composed of public policies, incentives and standards and private partner investments – defined in consultation with regional and/or national and/or supranational public administrations. We have a planted the deepest seed of such vision by signing last month a long-term Partnership for Trustless Computing with Univ. Luxembourg SnT, the fastest-growing cybersecurity department in EU.
The Campus will consist of 10-15.000 thousands of sq.mts. of zero emission, food autonomous, smart facilities for educational and R&D activities, located in a world-class existing or emergine technology park in great natural settings with a unique array of technical, commercial, entertainment, food, hospitality, cultural services. (Originally planned in a 150M€, 47.000 sq.mts. Open Media Park of Rome).
Such proposal would go hand in hand with the hosting of a world-class tri-monthly Free and Safe in Cyberspace – EU Edition Series 2017-2018 between Luxembourg and Brussels, which since 2015 has been building consensus world-wide (Brussels, New York, Brazil) on Trustless Computing paradigms, to further widen consensus on a Luxembourg-driven vision.
THREATS TO LUXEMBOURG & ITS ENTERPRISES
The threats and opportunities of cybersecurity and AI are nearly unlimited. The average annual cost of cybercrime is $400 billion globally and $9.5 millions per enterprise, it will rise to $8 trillion between now and 2022, according to Juniper. Market for cybersecurity has grown 30 times in the last 10 years, from 3.5bn$ to 120bn$. It does not come as a surprise to attent observers. Wikileaks recent revelations, about the widespread availability of CIA hacking tools in the deep Web, made it clear that large corporate, financial and public institutions are much more exposed to scalable and targeted endpoint attacks by innumerable competitors, criminals, states and stalkers than thought before 2013. What is often unreported – but well known in top board rooms – is the impressively low cost and high scalability of carrying out such attacks. State tools like NSA Turbine and NSA FoxAcid, or their private equivalents like Hacking Team RCS, are capable to automate or semi-automate the exploit and management up to hundreds of thousands of exploited mobile devices.
There is a clear need and a huge economic opportunity of international leadership to establish new cybersecurity standards to protect our democratic institutions, enterprises and citizens!
OPPORTUNITY FOR LUXEMBOURG
Luxembourg has all it takes to lead, and we have plan for it. In fact, it seems Luxembourg is setting its ambitions up there and starting to “put its money where its mouth is“. The European Cyber Fund, the Luxembourg Future Fund, LuxTrust, “Security made in Luxembourg” initiative, “Hosted in Luxembourg” label, LuxInnovation, and of U. Lux Interdisciplinary Centre for Security, Reliability and Trust (SNT), seem to converge in the aim of attracting and retain businesses, and promoting economic development, by affirming a World/EU leadership in cybersecurity for communications and transactions, through suitable legislations, certification/labeling, infrastructure and R&D and startup ecosystem.
But we believe a underlying, breakthrough, and widely share framework is missing.
The main instrument to realize the vision would be an open and diverse partnership. An LoI(pdf) of the Partnership for Trustless Computing was signed in may with SnT, and full Partnership for Trustless Computing agreement (ongoing draft gdoc) agreement is being discussed with a wide array of public, private and research prospective stakeholders. Which will be mostly folded into a new Membership program in TCA.
According to our Trustless Computing Paradigms, all software, hardware and organization processes critically involved in the lifecycle and supply chain – including CPU, fabrication and standard setting – will uniquely be subject to:
- (A) public inspectability in their source HW & SW designs without NDA;
- (B) extreme security-review relative to complexity by highly-proficient and ethical hackers;
- (C) extremely resilient oversight of human processes, based on offline in-person citizen-witness or citizen-jury processes, to enable key recovery and legitimate lawful access procedures with safeguards against privacy abuse exceeding the best current solutions;
- (D) extremely citizen-accountable, comprehensive and technically-proficient certification processes.
These key concepts are detailed in the Trustless Computing Paradigms, being evolved since 2014 by a widening community of partners and members of the Trustless Computing Consortium and selected speaker of the Free and Safe in Cyberspace global event series, as binding high-level certification requirements required by to-be-established Trustless Computing Certification Body.
BENEFITS FOR LUXEMBOURG & ITS ENTERPRISES
The benefit for Luxembourg would be huge, and can be summarized as follows:
- (A) attract and retain global enterprises offering on radically unprecedented levels “confidentiality and integrity protection from competitors and hackers” – through public and private IT service offerings, advanced legislation and unique Trustless Computing based labeling – complementing and the current locational advantage of “confidentiality protection of corporate tax planning from other nation states’ tax agencies”. In fact, upcoming EU tax transparency rules, historical US tax reforms, and unpredictable Brexit outcomes, may, in the near future, reduce the latter locational advantage.
- (B) lead Europe in the creation of new cybersecurity standards and certifications (such as SOGIS, eIDAS, and intelligence exchange), for economic growth, political leadership and social impacts. Our Trustless Computing Certification Body were proposed as new standard for state secret handling since last April 2016 together with Italian ISCOM and Austrian A-SIT (equivalents of Luxembourg National Security Authority), with the aim of making it available or even mandatory for high levels state officials, party officials, electoral candidates and their staff.
- (C) Foster the creation of a Trustless Computing Cluster and Campus,which will become the World leading regional ecosystem and technology park on security innovation for information systems, autonomous systems and artificial intelligence, by offering an unmatched array of scientific, quality of life and economic incentives to the very best talents, researchers, startups, companies and research centers in the fields.
- (D) increase by orders of magnitude its protection against hacking to Luxembourg political and democratic system, such as that of the US Presidential and France presidential elections. The selective public release of such internal party communications merely highlights a widening of the actors capable of a deep persistent subversion of democratic and electoral process, as detailed by Snowden and Wikileaks revelations. Trustless Computing not only provides radically unprecedented levels of security, but also reliably enables the intervention of civil courts if probable cause of illegal activity is ascertained.
Join our vision!Rufo Guerreschi,