Free and safe
in Cyberspace
7th edition

JanUARY 29th, 2020

Are personal freedom and public safety in Cyberspace truly an “either or” choice, a zero-sum game, as nearly all seem to believe? Can we, as a society, truly choose between one and the other?

As we see the institutions supposed to protect our safety being eroded by the widespread vulnerability of our IT systems and social platforms - is it not a “both or neither” challenge, as it has always been in the pre-digital era?

Can the resolution of this false dichotomy be the key to enable leading banks, private banks, leading IT companies, industry associations and nations to turn cybersecurity, from a threat, into a key competitive advantage and new business opportunities?

EVENT SUMMARY

After 6 editions – held twice in Brussels, and once in New York, IguazuBerlin and Geneva with World-class speakers – the Trustless Computing Association is happy to announce that the 7th Free and Safe in Cyberspace Conference will be held on January 29th 2020 on Paradeplatz, the financial hearth of Zurich.

As in all previous editions, through our 4 Free and Safe Challenges, we’ll explore new approaches, technologies and certifications that can ensure radically increase the state-of-the-art of security for sensitive human digital communications and transactions – and then for other critical AI, 5G, IoT, and e-government systems – while concurrently ensuring legitimate lawful access to adequately mitigate risks for criminal abuse. 

Can both be achieved by reconceptualizing cybersecurity as the byproduct of organizational processes critically involved in the entire lifecycle of a given IT service, by eliminating all unverified trust in anything and anyone – all the way down to CPU design and fabrication oversight and ultimately standards-setting and certification governance?

Earlier on the same day, we’ll hold an invitation-only Pre-Conference, detailed below, where leading organizations will discuss and advance the main concrete initiative that has grown out of previous editions: the Trustless Computing Certification Body.

Speakers' Highlights

Roberto Gallo

CEO fo Kryptus. President of the Brazilian Defense Industry Association. Cofounder of the Trustless Computing Association.
Full info

Frank-Jürgen Richter

Chairman of Horasis. Former Head of Department of Bosch. Former Director at World Economic Forum.
Full info

Adrian Perrig

Director of the Network Security Group at ETH Zurich - Department of Computer Science.. Founder of the SCION Project.
Full info

Adolf Doerig

Chairman of the Advisory Board of the Advanced Cyber Security of the Swiss Academy of Engineering Sciences. CEO of Doerig + Partners.
Full info

Kai Schramm

Vice President of Security Architecture of Credit Suisse. Holds a Phd in Electrical engineering with a thesis in embedded systems and applied cryptography. Specialist in Smart Card Security, R&D, Side Channel attacks
Full info

Paul Foster

Head of Strategy & Business Development at TRUSTLESS.AI. Former Group Chief of Endpoint Security at HSBC Bank.
Full info

Arié Malz

Special Adviser to the Swiss Ministry of Finance. Formerly Head of the Secretariat of the Commission on the Future of Data Processing and Data Security of the Swiss Federal Council.
Full info

Anat Bar-Gera

Chairwoman of Cyverse, Steering Committee Memebr of Digital Switzerland. Board Member Bank of Cyprus. European Digital Leader of World Economic Forum.

Full info

Annett Viehweg

CEO and Chairman of the Executive Board of Sberbank (Switzerland), Swiss subsidiary of the largest bank of Russia and Eastern Europe. Formerly Chairwoman of the board at Deutsche Bank.
Full info

Paolo Lezzi

Founder & CEO of In The Cyber Group, cybersecurity group owner of Hacking Team. Chairman of the Cyber Warfare Conference.
Full info

Monique Morrow

President of VETRI Foundation. Former Global Chief Technology Officer Evangelist of CISCO. Renowned IT security and privacy expert and advocate.

Full info

Gerhard Knecht

Former Chief Information Security Officer and Head of Information Security Services of UNISYS. Senior Advisor of TRUSTLESS.AI and Trustless Computing Association.
Full info

Umberto Annino

President of the Information Security Professional Association, the largest in Switzerland. Principal Cyber Security Consultant at InfoGuard.. Former Head Security Governance at SIX Group.
Full info

Rufo Guerreschi

Executive Director of the Trustless Computing Association. CEO of its spin-off TRUSTLESS.AI. Founder of the Free and Safe in Cyberspace conference series.
Full info

CONFERENCE - Venue

Previous
Next

CONFERENCE - BACKGROUNDER

The World is rapidly turning into a Hacker Republic, where all economic and political power increasingly accrues to those state and non-state actors with the most informational and hacking superiority in personal communications, social media, financial and autonomous systems. Though total security and privacy can never exist, radical advances are possible and direly needed for the well-being of humanity and, possibly, its very survival.

Are personal freedom and public safety in Cyberspace truly an “either-or” choice, a zero-sum game, as nearly all seem to believe? Can we, as a society, truly choose between one and the other?  Are these not instead, as they’ve always been, a “both or neither” challenge as we see the democratic institutions that should ensure our safety being eroded by hacking and manipulation of our IT system and social platforms?

But nation-states have not yet been able to solve this challenge. According to a UBS Group pollcybercrime is the 2nd greatest concern of high net-worth individuals after their “country politics”. Meanwhile, a Gallup poll found that US citizens fear cybercrime twice more than any other crime. There appears to be a huge unmet need and demand. 

Can the private sector succeed instead, within current legislation? Could such challenge be largely solved by ensuring an uncompromisingly untrusting approach – down to CPU design, chip fabrication oversight and certification governance models – be applied to both critical IT computing systems AND (voluntary in-person) legitimate lawful access compliance mechanisms, privately set in place to prevent criminal abuse?

Can this breakthrough enable leading private banks, leading IT companies and industry associations to turn cybersecurity from a threat into a competitive advantage and new business opportunities, and leading nation-states to radically reinforce their citizens’ digital sovereignty? Blackberry and Bank of America are looking to join forces to pursue such an opportunity. Could a European driven initiative outcompete them by leveraging Swiss and EU unique respect and appetite for digital privacy and security? 

For more, click here to read our Backgrounder on the 4 Challenge of Free and Safe in Cyberspace.

 

CONFERENCE EXPECTED AUDIENCE

We expect an audience of about 60-80, made up of mostly of  executives and experts from digital, innovation and security departments of Swiss private banks, enterprises, and industry associations; but also federal and international public officials, researchers, and Phd students

CONFERENCE- PROGRAM

In line with the stature of the speakers to the 6 previous editions, the 7th edition be centererd on the 4 Challenges of Free and Safe in Cyberspace, but with a special emphasis on Switzerland, private banking and mobile security:

5.00 pm – Open Doors
5.30 pm – Opening messages by TBD Special Guests

  • Rufo Guerreschi. Exec. Dir. of the Trustless Computing Association. Creator of the Free and Safe in Cyberspace series, and founder of the spin-off startup TRUSTLESS.AI.

Panelists: 

  • Roberto Gallo. CEO fo Kryptus. President of the Brazilian Defense Industry Association. Cofounder of the Trustless Computing Association.
  • Adrian Perrig.  Director of the Network Security Group at ETH Zurich – Department of Computer Science. Founder of the SCION Project. 
  • Gerhard Knecht. Former Chief Information Security Officer and Head of Information Security Services of UNISYS. Senior Advisor of TRUSTLESS.AI and Trustless Computing Association.

Abstract:  

How can we provide ordinary citizens access affordable and user-friendly IT services with levels of trustworthiness that are radically-unprecedented and meaningfully-abiding to the UN Universal Declaration of Human Rights, at least for their most sensitive computing?
Can we re-create in cyberspace a meaningful digital private sphereWhat are the key paradigms needed to achieve this goal? What is the role of uncompromisingly “zero trust” security-by-design paradigms, via transparent and extreme review and oversight of all critical lifecycle components and processes? Can we realistically secure enough CPU design and chip fabrication oversight? What are the advantages, disadvantages and limitations of free/open source software? What is the role of formal verification? What is the role of public security-review by “ethical” experts? How about quantum computing, artificial intelligence and blockchain?
Can citizen-witness and citizen-jury processes help secure the supply-chain? What is the role of certification and oversight governance?  What scale of investments are needed? Can we imagine a parallel hardware and software ultra-secure computing universe, as a user-friendly supplement to every-day computing devices?  Read more

06:20 pm – Coffee break

Panel: 
  • Adolf Doerig. Chairman of the Advisory Board of the Advanced Cyber Security of the Swiss Academy of Engineering Sciences. CEO of Doerig + Partners.
  • Paolo LezziFounder & CEO of In The Cyber Group, cybersecurity group owner of Hacking Team. Chairman of the Cyber Warfare Conference.
  • TBD
Abstract:   It is becoming evident that the general availability of constitutionally-meaningful digital confidentiality cannot be expected unless there are reliably subject to means for government to intercept such systems when legitiamately authorize to do so.
Can providers of ultra-high assurance IT reliably and voluntarily (i.e. in addition to what is requried by law) offer compliance mechanisms for legitimate lawful access needs, while overall reducing risks for both privacy of users and public safety?
If so, how? What novel paradigms, safeguards or certification processes needed?
Can the same extreme technical and human organizational safeguards that are needed to ensure ultra-high levels of IT assurance also enable voluntary compliance to lawful access request – at least in some EU states – that overall reduce the risk of privacy rights abuse of end-users by anyone to levels that are radically or substantially lower than any of the other alternative secure IT systems which do not offer such voluntary processing?
Could or should such processes rely on a provider-managed voluntary data and/or key recovery schemes that are certified and overseen by a (primarily non-governmental) radically citizen-accountable, independent and competent international body?
Could the inevitable added risk be essentially shifted from technical systems to novel highly-resilient organizational processes? Read more

06:50 pm – Coffee break

Panelists:

  • ANAT BAR-GERA    Chairwoman of Cyverse. Steering Committee Member of Digital Switzerland.
    Non-executive Board Member of Bank of Malta.  
  • ANNETT VIEHWEG.    CEO and Chairman for Switzerland of Sberbank, the largest bank in Russia.
  • PAUL FOSTER:    Head of Strategy of TRUSTLESS.AI. Former Group Chief of Endpoint Security at HSBC Bank.
  • KAI SCHRAMM.     Vice President of Security Architecture of Credit Suisse. 
    Specialist in Smart Card Security, side-channel attacks and research. Holds a PhD in Electrical engineering in embedded systems and applied cryptography.

Speaker:

ARIE MALZ.  Special Adviser to the Swiss Ministry of Finance. Formerly Head of the Secretariat of the Commission on the Future of Data Processing and Data Security of the Swiss Federal Council.

Abstract:

Information and IT Security is a major and unsolved challenge for the SME in Switzerland. This is a crucial issue because SME are the backbone of the Swiss economy. Up to now the overwhelming majority of the cybercrime costs for these companies undiscovered or undisclosed underreported to avoid reputational damage. On the other hand, the larger SMEs are forced to invest in digitization and digitalization to remain competitive. This creates an environment of great risks for IP theft, blackmail, insecurity, unknown risks, and long-term distrust, in B2C as well as in the B2B context.
Can the application of uncompromising security-by-design be the answer to protecting at least the most sensitive SME data and processes? If so how do we define it and measure it? What is the role of proper standards setting and certification bodies?

Panelist:

  • Umberto Annino. President of the Information Security Professional Association, the largest in Switzerland. Principal Cyber Security Consultant at InfoGuard.
  • Monique Morrow. President of VETRI Foundation. Former Global Chief Technology Officer Evangelist of CISCO. Renowned IT security and privacy expert and advocate.
  • TBD

Abstract:   

Current attempts to radically increase the trustworthiness of critical IT systems are often centered on the pursuit of scientific breakthroughs in the area of artificial intelligencequantum computing and cryptography, blockchains, and new protocols, such as zero-knowledge proof, and end-2-end and homomorphic encryption. Meanwhile, a few security-by-design or blockchain initiatives are taking a more holistic, short-term and trustless approach, centered on opentime-provenbattle-tested – yet future-aware – technologies and processes; transparent oversight down to critical hardware design and fabrication; a transparent resolution with extreme safeguards of the lawful access needs; and more accountable and resilient certification and ecosystem governance models.

07:50 pm – Coffee break

Panelists:

  • Frank-Jürgen Richter, Chairman of the Horasis Global. Former Head of Department at Bosch. Former Director at World Economic Forum.
  • Rufo Guerreschi. Exec. Dir. of the Trustless Computing Association. Founder & CEO of its spin-off startup TRUSTLESS.AI. Creator of the Free and Safe in Cyberspace series. 
  • TBD

Abstract:   

Recent calls for international treaties or new ethics for the trustworthiness of IT or AI systems – such as Tech Accord, Charter of Trust, Call of Paris or a Digital Geneva Convention – are crucial to raising awareness. Yet, none of them tackles head-on the need for trustworthy cybersecurity certifications to enforce the oversight of treaties or enact the principles of such declarations. 
How can such certification bodies increase the resilience and “forensic friendliness”, to radically improve resistance against attacks and confidence about attacks attribution? What constituent processes can ensure a timely, effective and democratically-efficient implementation – by a critical mass of actors – of meaningfully-enforceable national policies or international treaties for ultra-high assurance IT standards-setting and certification processes? 

8.30 pm – Drinks & Networking

For more, click here to read our Backgrounder on the 4 Challenge of Free and Safe in Cyberspace.

 

CONFERENCE - EXPECTED AUDIENCE

We expect an audience of about 60-80, made up of mostly of  executives and experts from digital, innovation and security departments of Swiss private banks, enterprises, and industry associations; but also federal and international public officials, researchers, and Phd students

pre-CONFERENCE - program

Earlier the same day, and in the same venue, we’ll hold a invitation-only Pre-Conference of the 7th FSC Edition among parties that are interested (to some preliminary or advanced extent) to join as Founding Members of the Trustless Computing Certification Body – in technical, end-user or governance roles, and with possible partial time-limited exclusivity. Discussions will be  confidential and subject to Chatam House Rules.

The Pre-Conference aims are to (A) coalesce a consensus on the basic tenets and paradigms and governance of a new to-be-established Trustless Computing Certification Body, and (B) lead a few more leading large banks, private banks, mobile equipment manufacturers, industry associations, enterprises, open secure IT firms to join our current TCA/TCCB R&D partners, in the form of founding members.

Program

2.00 pm – Open Doors
2.15 pm – Introductions
2.30 pm – Intro to the Trustless Computing Certification Body initiative, by Rufo Guerreschi
3.15 pm – Coffee Break
3.30 pm – Deliberative Discussions
4.15 pm – Coffee Break
4.30 pm – Deliberative Discussions
5.00 pm – End

pre-conference - participants

Confidential and in progress.
If interested, please email rufo@trustlesscomputing.org

organizers

The Trustless Computing Association is a non-profit organization, based in Zurich, that has aggregated World-class partners and advisors to build open IT technologies, certifications and ecosystems that can deliver levels of trustworthiness that are radically higher than state-of-the-art.

Together with its spin-off startup TRUSTLESS.AI – based in Zurich – the associaiton has been building (1) the Trustless Computing Certification Body, a new IT security standards-setting, certification body, aimed at radically-unprecedented levels of trustworthiness, while at once solidly enabling legit lawful access and (2) building the Seevik Pod and Net, an initial open computing base, ecosystem and IT device, compliant to such new certifications.

FSC7 Participating Organizations

Powered By