Magazine menu Close Magazine menu

Technology

Latest stories

insight story metaverse

What metaverse experts think your business should know

  • min read
    • There's much noise about the metaverse, and a feeling business must get on board today. Should you dive in? Two metaverse experts say yes, and no. Kaspersky's new podcast, Insight Story, unpacks emerging tech trends with global specialists and businesses successfully using the tech. Episode 1 looks at the metaverse, with Cortney Harding, World Economic Forum Metaverse Council member and founder of virtual and augmented reality agency Friends with Holograms. James Whatley, Chief Strategy Officer at gaming industry agency Diva, also joins me. James's 2022 talk What Metaverse? garnered much attention from the marketing industry, debating definitions and the effectiveness of brand-sponsored 'metaversal experiences,' as he calls them. A more cynical onlooker could say the metaverse is the emperor's new (virtual) clothes. In its glitchy 2006 version I attended – or tried to attend – in-world conferences in the early metaverse, Second Life. My clever friend sold virtual shirts to passers-by, but the predicted virtual commerce revolution didn't ignite then. I was keen to explore with James and Cortney whether the metaverse is really open for business, or if FOMO (fear of missing out) and the hype cycle is encouraging investment before audiences are ready. From science fiction to (virtual) reality There's no single agreed definition of the metaverse. Metaverses are virtual worlds where users see the world and interact through characters called avatars. Using a virtual reality (VR) headset, interacting in a metaverse can feel like real life. It can mirror many real-world experiences, like shopping, going to concerts, even owning property. Some say it's 'the next iteration of the internet' or 'Web 3.0.' Metaverses like Activeworlds and Second Life have been around for over 20 years. Others exist within online multi-player games like Fortnite and Roblox. Facebook changed its name to Meta in 2021, signaling a future focus on virtual experiences. Should businesses be in the metaverse? Cortney Harding says brands should approach the metaverse from their own perspective. "It depends on your audience. If you're a bank, you probably don't need to build a metaverse world right now – they've tried, and failed." Examples abound of banks establishing an often half-baked presence in the metaverse, then quietly backing away. Cortney continues, "If you're a consumer brand focused on a young tech-savvy audience, you should start thinking about it." But it's not about audience age. "It's more, is your audience tech-savvy? And niche communities are often strong in the metaverse." According to games researcher company Newzoo, more than a quarter of gaming metaverse users are age 36 or older. James Whatley thinks brands should work to understand not just who is in the metaverse, but why. Nike's success in Roblox is often hailed as an example of a brand getting it right. Their Nikeland shop, selling virtual Nike gear, attracted 7 million visitors in its first two months. James notes, "They're doing great, but copying Nike is not a strategy – it's looking and learning from it." Cortney gleans this from Nike's success: "You must resource metaverse worlds correctly to keep them going, making sure people have reasons to return. Nike has social events, and guest speakers – they give people a reason to go there." In developing metaverse experiences, brands should consider what makes the metaverse different. "In early VR, I saw directors do what's in 2D except in a VR headset," says Cortney. "Embodying an avatar with your voice is different than typing or watching a video. How can you harness that? Think beyond replicating and get to the point where it's creating something wholly new." Metaverse for good Cortney works with clients using metaverses and linked technology like VR for the greater good. "I do VR training around racial bias, child welfare, mental health and more. It lets people be in a space they've never been in and experience things like bias or exclusion, in hope they'll better understand what it feels like." PwC research found bias awareness training in VR is highly effective: "75 percent reported a 'wake-up call moment' that helped them identify times in their past when they had not been as inclusive as they'd thought. V-learners were up to 275 percent more confident to act on what they learned after training." Cortney also sees work needed to prevent bias being 'baked in' to the metaverse as it has been with other tech. "Many who built the current internet came from the same background. We want to build a world that's inclusive and safe – one everyone can be part of." Examples of creator bias leading to tech that discriminates include, voice recognition not recognizing women's and people of color's voices because its training data sets mostly contain white men's voices. Soap dispensers, fitness trackers and heart-rate monitors have also been found to rely on users having a light skin tone. It's unsurprising women have higher rates of injury in car accidents when you learn that a truly woman-shaped crash test dummy is a new thing – previous 'female' dummies were simply a smaller male dummy. Cortney appeals to brands to stay aware of how their metaverse presence affects customers. James agrees. "I believe video games are good for building community, and they have done for decades. Whatever the next iteration of the internet, the community piece comes where humanity goes." Alongside many good experiences, research shows more than half of children who play online games experience harms like bullying, hacking and inappropriate contact at some point. Raising your metaverse understanding Cortney says companies dipping a toe into the metaverse shouldn't expect too much at first, but should be in it for the right reasons. "If you look at some websites from the early days of the internet, your eyes will bleed out of your head. We can't expect everyone's metaverse execution will be perfect at this point, but you need more of an idea than just having heard a buzzword." If you choose to go there, James recommends involving metaverse natives. "Bring in the Roblox audience to help build, because they understand it. Get people with gaming experience – they understand narrative and interaction. Make a small investment, start experimenting, have people work on it as a side project. So when things start to really shift, you haven't ignored it." He thinks brands should avoid thinking metaverse is the answer, instead considering all options. "If you want to build a community around your brand, there are other ways. Do stuff in social media. Look at your customer relationship management (CRM.) Don't close the door – be aware of it, but act when it's right for your business." Metaverse cyber risks As new tech arrives, so do new threats. What are the cybersecurity implications of the metaverse? Fabio Assolini is head of research in Latin America for Kaspersky Global Research and Analysis Team (GReAT,) uncovering and understanding cyber threats in digital environments, including metaverses. "We're concerned about the kinds of attacks already common on Meta platforms like Instagram, Facebook and WhatsApp. On new platforms, we expect the same, like fraudsters impersonating brands," says Assolini. "We also expect more complex attacks like SIM swapping, where cybercriminals hijack users' phone numbers to receive authentication tokens." Assolini is also concerned about unclear roles and responsibilities in the metaverse. "If I'm a business and investing in, say, a launch party in the metaverse, is it my responsibility to put encryption and other security in place? Or is it for the end user to be more savvy when they're joining these experiences?" 'Cryptojacking' is another concern in the metaverse. Hacking users' devices to use their processing power for mining cryptocurrency is seriously on the rise, with Kaspersky research showing a 230 percent increase in 2022. While Meta's chief technical officer says moderating user behavior "at any meaningful scale is practically impossible," business will be glad to know metaverse security concepts are roughly the same as any online, digital environment. "Fundamental security practices carry over because the architecture is the same. It still runs on a server, you have databases on the backend, user and password management, and so on," said Nick Donarski, co-founder and chief technology officer at blockchain company ORE System. Best metaverse advice for business I asked James and Cortney their best metaverse advice for business. James says, "Go the extra click. If someone sends you a headline saying this is where the future is, find out where that's come from. Who paid for that data? There's an often-cited report from McKinsey valuing the metaverse at 5 trillion US dollars. When you look at where that figure came from, it doesn't mean anything." Cortney says, "Just start learning and experimenting. It's free or very cheap to sign up to many metaverses. Create a world just for fun. Spend time talking to people. Then you'll understand what you like, what you don't like, what could be better. You'll be more informed – or worst case scenario, have some fun." Listen to the full Insight Story audio series on Podbean or your usual podcast provider.
cyber future interview

How business can use cyber futurism to see what comes next

  • min read
    • With new technologies like the metaverse arriving regularly, how can business leaders and cybersecurity professionals know what new threats to expect? Futurism – analyzing future scenarios to inform today's decision-making – is one way. Victoria Baines is professor of information technology at UK's Gresham College and a former Facebook executive and Europol officer. She uses future scenarios to understand technology today and how we should prepare for threats to come. We chat about what these scenarios reveal about our world today, what might happen with new technologies like the metaverse and what business can do to keep users safe. Gemma: What does it mean to explore the future of cybersecurity through scenarios? Victoria: Scenarios are not predictions, but if you do them right, they tell you as much about your situation now as what might happen in future. It's not just threats – it's how the world's changed, and what the tipping points may be. The pandemic was a tipping point for remote and hybrid working, but many find hybrid work just means doing all the things, all the time – the expectation they'll be available constantly for online and physical meetings. We'd been working up to that for a long time. Reliance on email was a compelling signal we needed to find something better, quieter, with less churn. I think we'll see something like that with the metaverse. We've now got the ultimate business case for it because Zoom and Teams aren't enough to feel like we're really working with people – we're still just on a call. Futures methodology is as much about exploring our present and spotting things in the past. What have you found out about the metaverse through your cyber futures work? Although there's hype and uncertainty around the metaverse, we have certainties about how it will develop. For example, Apple will probably bring out, or at least announce, a mixed-reality headset next year. However expensive, people want to use whatever Apple brings out. So we'll see people wanting Apple's mixed-reality headset in a way they haven't wanted other virtual reality (VR) headsets like Hololens or Oculus. This will significantly speed up metaverse adoption. The metaverse is less of a tipping point and more of an evolution. Roblox, Fortnight and Second Life are already metaverses. They use the feeling of presence and co-presence, and there's old research on this – academics like Mel Slater and Ralph Schroder showed us that being together virtually is emotional – it brings about positive reinforcement. We'll need AI-powered synthetic individuals to bump into in online social spaces because we need to feel like we're interacting with people – shaking hands, having sex and so on. We'll probably need 6G to power and connect all that technology, particularly if we want to use it when out and about. What security implications have you identified in the metaverse? Nothing's 100 percent secure – we must assume there'll be technical and human vulnerabilities in every aspect of VR, augmented reality (AR) and other metaverse-enabling technologies. In these scenarios, we look at all those vulnerabilities. We have signals already, like the panic around 'zoombombing' – hackers interrupting video conferencing with obscene and violent material. It happened because people shared their passwords on the open internet. We needn't panic – basic security measures would deal with it. But it shows that exploitation and infiltration will also play out in VR and AR. Are there new cyberthreats for the metaverse and related immersive technologies, or is it the same threats in new spaces and technologies? Much of it comes back to basic digital hygiene like patching, updating, and installing antivirus software. Basic 'handwashing' can do much to prevent ransomware infections. In that way, the new stuff isn't new, but we haven't given it enough attention. We've viewed online harm as less impactful – as it's not physical abuse, we treat it less seriously. With metaverse technologies, you can physically sense resistance and impact, which means opportunities for physical assault. That has an operational impact for information security and cybersecurity. What implications do these threats have for cybersecurity leaders today? Technical information and security aspects become more important in addressing psychological and physical harms in these connected spaces. Pacemaker interference with medical internet of things (IoT) signals that. We already have people walking around with internet-connected medical devices like defibrillators, insulin pumps and continuous glucose monitors. If those don't function properly, and if somebody dies, the question of responsibility arises. If it hasn't already happened, Chief Information Security Officers will be asked, 'What did the data say about any interference with that pacemaker? Was the firmware up to date?' We can see something similar playing out in the metaverse. Everyone will say it's someone else's responsibility – those who make the hardware will say it's the experience developer's responsibility, they'll say it's the user's responsibility, and so on. People used to thinking only about data security and network security must now consider users' physical safety.
data ethics interview

How data ethicists are helping tech business be better

  • min read
    • Using data responsibly is a hot topic. Tech companies must ensure they don't cause harm, for example, by breaching consumer privacy or reinforcing bias through automated decisions. It's a moral and legal question, but it may be unclear how businesses and governments should approach their data responsibilities despite increased regulation. We still see egregious data use practice. Alice Thwaite is technology ethicist and responsible owner for ethics at OmniGOV, MG OMD, working with the UK government on communications and advertising. We chat about what data ethics means in practice. Gemma: What does it mean to be a data ethicist today? Alice: Ethics is the study of how to live. An ethicist takes a theory of how humans want to be treated and how we should interact with the wider world, and thinks about how an action or technology could contribute to that goal. We use ethical methodologies and knowledge about the consequences of a technology or business model to transform the business into one that prioritizes ethics. Businesses have always operated in the realm of ethics, but usually without a systematic approach. Ethicists co-create frameworks with stakeholders like customers, colleagues and wider society so that an organization's values become critical in business decisions. What does that look like in practice? First, we help organizations understand where they're making ethical decisions and show how they'll need a more systematic process to reach their ethical goals. Second, we educate organizations on ethical methodology and issues. Third, we assess practice to understand what the company wants to prioritize and how current practice meets ethical goals, making suggestions like 'ethical pilots.' Finally, we implement and measure ethical pilots so they can become policy. We don't work in a vacuum – we must be in constant contact with various communities. For example, before establishing diversity, equity and inclusion (DEI) initiatives, a company might think racial equality is important but have no roadmap to get there. With an influence campaign, education, auditing and an implementation program, they may still have a way to go. But they're now measuring ethnicity pay gap and thinking about inclusive work environments for different people. They can keep following the 'influence, educate, assess, implement' process to fruition. Where do organizations start? What tips do you have for those keen to start doing ethics? Hire someone to build an ethical program and link them with a sponsor who can ensure the organization implements their recommendations. They may have a degree in philosophy, international relations, social science or community work experience. Ensure they can learn as much as possible about business ethics and support their attempts to transform the culture. Those in data security or compliance should recognize an ethicist has different processes. The goals may be similar, but the process aligns more with social science and humanities methods. What questions should organizations wanting a data ethicist ask? Are we committed to change? Do we want a world prioritizing human values like democracy, dignity and freedom? Are we prepared for the discomfort that comes with changing procedures? If you're prepared to change, write a job description incorporating things I've mentioned and encourage your team members to apply. Opinions reflect those of the expert. Interview edited for clarity.
digital presenteism

Presenteeism threatens flexible work gains. Here’s how to beat it.

  • min read
    • The pandemic forced many businesses to make a swift move to enable      remote work. But it's not just the threat of infection that recommends this shift – remote work can often mean reduced costs and improved productivity. Flexible hours have significant benefits too, like improved talent-attraction and employee health. Despite the promised benefits, businesses offering remote work and flexible hours may still see 'presenteeism' – a greater emphasis on being 'at work' than being effective. Qatalog and Gitlab's Killing Time At Work report found workers spend an extra 67 minutes online every day just to show their colleagues and managers they're 'working'. Why does presenteeism happen? Tony Jamous, founder and chief executive officer of Oyster HR, says, "For many years, [we sat] at a screen for eight hours a day with few breaks. Now, because of increased remote work flexibility, employees are adopting 'non-linear' workdays. These empower employees to do the school run, take a gym break or adjust their schedules to find their optimal focus time." Back when manufacturing drove many economies, workers had to be on site to create output. As office-based work grew, output was less tangible, so we started to equate longer hours with productivity. What makes us productive and effective at work? Tariq Rauf, founder and chief executive officer of Qatalog says, "Someone could be visible and present online for 60 hours a week and achieve little. Whereas, the next person might work for half that time, at different times of the day, and be phenomenally productive." Contrary to popular belief, people who work most effectively are not necessarily those most disciplined, but those who speak to themselves with kindness and self-compassion. Georgetown University professor Cal Newport links peak productivity with deep work, meaning "working for extended periods with full concentration on a single task free from distraction." When it comes to distraction, constant app notifications are a big culprit – knowledge workers receive notifications from an average of 6.2 different apps or tools. Productivity's enemies include stress, anxiety and mental and physical fatigue. Psychotherapist Roxy Rhodes told me, "Mental and physical tiredness compound mistakes, which could negatively impact your career progression. Working through illness also means you may need longer to recover, increasing burnout risk." Dr. Wladislaw Rivkin, associate professor in organizational behavior at Trinity College Dublin agrees that working through illness – even digitally – is a bad idea. H     is research found working when unwell "has a knock-on effect for remote workers' performance on the next day as [it] drains employees' psychological energy, which cannot be fully recovered after work." Business impact of presenteeism Presenteeism can be more detrimental than absenteeism. An "always-on" communication expectation can hamper productivity and cause anxiety. Remote work was meant to level the playing field for employees with disabilities, but if workers feel forced to show up for the sake of it, that benefit is lost. Employee digital surveillance further corrodes trust, and brings challenges of its own making by reducing contextual performance and morale and increasing stress. Workers feel drained, fear their employer is 'out to get them' or retaliate using the likes of mouse jigglers – software or devices that simulate      mouse movements to prevent computer sleep mode from activating, giving the impression the employee is working. "Having to prove you're working by using mouse jigglers or clicking the screen every few minutes indicates a toxic culture. When we hire people, we look for candidates who will take ownership of their work. How long it takes them to accomplish a project is up to them, as long as the output is delivered. We don't need employee tracking software to see output," says Bhavya Arora, talent management and culture partner for sales engagement platform Outplay. Young workers and juniors in a team are more susceptible to practicing presenteeism. Some organizations position choosing your own working hours as a privilege earned by those higher up the career ladder, and junior workers worry their work ethic may be seen as lacking even if they're absent even for a few minutes. How to switch off "always on" culture 1.    Measure performance by output not hours "We don't believe someone's commitment to work or their performance should be measured by how many hours they've worked," says Outplay's Arora. Qatalog founder Rauf agrees, "Organizations should implement an output-driven culture that focuses on the work people do, rather than worrying about when they do it and how long they're at their desk." 2.    Use tools that suit asynchronous work Communication tools that send notifications can reinforce an "always on" culture and mean workers find it hard to switch off. Encouraging 'asynchronous' instead means finding ways for colleagues to work together even when not logged in at the same time. Tariq Rauf, founder and chief executive officer of Qatalog says, "Asynchronous work lets people with caregiving responsibilities fit work around their life." Qatalog tries to enable asynchronous working with their platform, which centralizes knowledge, processes and resources in their platform. Asynchronous communication tools, like Loom for video messaging, CloudApp for screen recording, Yac, which claims voice messaging can eliminate meetings, and Hypercontext for meeting management, aim to provide for effective, high-fidelity communication      for asynchronous work. "With the right technology, you can break down silos and provide visibility across an entire organization," says Rauf. "Once you can see what everyone is working on, with decisions made transparently, trust is much easier to build. It's not a silver bullet, but it's a strong foundation." 3.    Build trust and lead by example Asynchronous communication tools must feed into a culture of trust and empathy. Leaders should hire employees they trust to get the work done, so there's no need to be logged in at the same time. Psychotherapist Rhodes says, "You're setting a precedent for what's expected of your employees – if a staff member sees their boss showing up to work sick, they'll likely feel pressure to do the same." Small but thoughtful changes in how you communicate can also build trust: Don't send employees texts or emails outside work hours. Let team members control their availability, honoring 'do not disturb' statuses. Segment communication channels, for example, using Slack for regular communication but mobile messaging apps only for emergencies. Rhodes also recommends, "Having a non-contact way for employees to announce sickness is effective in some companies. Staff feel anxious about "phoning in sick" and having to have a conversation where they feel they have to justify how ill they are." Management consultancy McKinsey's 2022 report found 40 percent of workers value flexibility so much, it drives their decision to stay in a job or look for a new one. If workers can't do their best work, employers will lose them. Productivity is in work delivered, not hours worked or how fast employees respond to messages. No workplace benefits from performed productivity, and presenteeism can strip remote work of its benefits. Businesses must make sure they give employees the tools and freedom to work in the way that best suits them.
data security metaverse

Why brands must get ahead on metaverse privacy and security

  • min read
    • While there's much buzz around the metaverse, few conversations focus on its security, privacy and safety. But these challenges may be even bigger in this emerging space than in the rest of the digital world. I spoke with several experts who agree organizations wanting to embrace this new medium must think about the challenges now – not when the metaverse gains full steam. What is the metaverse? The metaverse is an immersive three-dimensional world where people engage in social and commercial activities through digital avatars. Users can access it on many kinds of connected devices, but it's most immersive when used with a virtual reality (VR) headset. There are many metaverses, including that being developed by Meta, formerly Facebook, Horizon Worlds. Some call it the future of the internet. In this metaverse future, our physical and virtual spaces and lives may converge seamlessly. It could create a common place to work, shop and socialize. Some put this future closer than we might think. Global analysts Gartner predict 25 percent of people will spend at least one hour in the metaverse by 2026. Market Research Future says the metaverse market will grow by 45 percent annually until 2030. By contrast, they expect the Internet of Things (IoT) to grow by just 26 percent each year. Little focus on metaverse security and safety "The metaverse's attack surface [possible entry points for malicious actors] is bigger, and it's also a new technology space," says Nick Donarski, co-founder and chief technology officer at blockchain company ORE System. "Developers don't have the experience, technical resources and exposure for long-term understanding of its security and how it applies to organizations." Al Pascual, senior vice president of enterprise risk solutions at identity security provider Sontiq, thinks we can easily get 'ahead of our skis' when it comes to security. "We invent new ways to give people experiences and products using old security paradigms and have to clean up the mess later," he says. "We must think about security before we start deploying the metaverse to everyone." Securing the 'Wild West' "The metaverse is like the Wild West right now. There aren't even any standards yet," says Aarti Dhapte, senior research analyst at Market Research Future and an author of its metaverse market forecast reports. "You can't even regulate it well because everybody doesn't define the metaverse the same way." Gartner defines the metaverse as "a collective virtual space created by the convergence of virtually enhanced physical and digital reality" that's "device-independent and not owned by a single vendor" with "an independent virtual currency." Other definitions include fully immersive experiences, a three-dimensional overlay on the physical world and a persistent collection of universes we can traverse with digital identities and assets. Despite its early stage, many security experts expect the metaverse will see familiar security threats: Social engineering, phishing, identity theft and more. "Cybercriminals' methods are rarely new. More often, they use the same methods in a new channel," says Pascual, whose fraud prevention career includes working for global banks. Adding blockchain to the mix Many think blockchain will play a central role in the metaverse because of the need to decentralize the space and enable the various worlds within it to interoperate. Cryptocurrency, which uses blockchain, is the natural candidate for metaverse ecommerce. The metaverse could use smart contracts – digital transactions stored on blockchain that self-execute under certain conditions – to implement rules. Also a new technology, blockchain adds complexity and security challenges to the metaverse. And while many think its immutability makes it more secure, recent attacks on blockchain highlight its security shortcomings. Virtual currencies, whether cryptocurrency or non-fungible tokens (NFTs,) are also hard to navigate, especially for a big metaverse user group – children. "It's risky for kids and teens to understand handling virtual money in all forms and can lead to big losses," Dhapte says. People still the weakest link Malicious actors most often use people manipulation to attack. For example, Verizon's 2022 Data Breach Investigations Report says 82 percent of data breaches involve a human element. The metaverse's human element is similarly exploitable. The metaverse will also magnify data privacy concerns. Artur Kane, vice president at secure remote access company GoodAccess, says that since the metaverse is a "world attacking even more of our senses," tech giants can use it to make more money with better-targeted advertising. That means tracking even more of our behavior online. "We give away much more information in the metaverse," says Kane, a frequent privacy speaker at industry events. "Companies can learn much about us – like race, sexual interest, potential health issues." He mentions recent research showing how attackers could exploit hardware and application weaknesses to violate privacy. They set up a benign-looking VR escape room game and inferred many participants' attributes, from height to age to location, with high accuracy using just minutes of gameplay. Regulation far behind Lagging data privacy and security regulation adds to the metaverse's Wild West feel. "We're giving away so much more data than we realize," says Kane. "There's huge potential for data breaches and leaks in a new environment where legislation doesn't restrict much." Blockchain regulation is also lacking, which Dhapte thinks could mean greater chance of fraud. "Since various countries don't have fixed regulations for blockchain, tracking fraudulent activities would be a real challenge for governments." User risks in immersive environments The metaverse is a rich playground for abuse – from sexual harassment to virtual assaults. "Any vulnerable group, especially children, faces higher risk as non-consensual contact and communication might be more intrusive and targeted, given how immersive the experience is," Kane says. A survey by global think tank Wunderman Thompson Intelligence found 66 percent of parents familiar with the metaverse have child safety concerns. Fears are not unfounded – one media investigation found behaviors like racist comments and sexually explicit content directed at children. Pascual of Sontiq says metaverse participants exchange little of monetary value today, "But in ten to 20 years, the potential for financial transactions is huge, especially as digital properties gain value. Thefts will become more meaningful." In the meantime, users still risk fraud. Pascual says scams draw kids looking for cryptocurrency and virtual swag. "We've seen evidence of predators targeting children in open worlds like Roblox. Parental oversight, education and control on who children can engage with and what they can see will be key." An investigation as part of Tomorrow Unlocked's hacker:HUNTER video series found rife hacking in children's games like Roblox, for example stealing hard-won digital items. These hacks had considerable impact on the child gamers. It's harder for parents to monitor children consuming content using VR headsets because they can't look over kids' shoulders as with a computer or phone. That gives brands launching metaverse experiences a greater responsibility to protect users. Protecting business in the metaverse For teams responsible for metaverse experiences, security experts like Pascual emphasize the need for moderation. He sees danger for brands in platforms ineffectively moderated. "Brand trust will be critical, so there's a need for moderation, including monitoring to ensure brands aren't easily imitated," he says. Moderation may not be easy. Tech giant Meta's chief technical officer said moderating user behavior "at any meaningful scale is practically impossible." Still, some experts think self-scrutiny by brands, alongside industry collaboration, will be a business imperative in the metaverse. The good news is security concepts are roughly the same in the metaverse, according to Donarski of ORE Systems. "The fundamental security practices carry over because the architecture is the same. It still runs on a server, you have databases on the backend, user and password management, and so on." It may take a while, but the metaverse will likely become a reality. Companies must consider security and privacy before that reality takes shape – whichever version of the metaverse unfolds.
disinformation technology

Can AI help mend trust in business damaged by trolling and fakes?

  • min read
    • In 2021, artificial intelligence (AI) might have finally become better than humans at being human. A study found people trust AI-made fake faces more than real people's faces. The researchers warn their findings show widespread use of AI poses a threat to the public. They recommend stronger safeguards restricting code to those with good reason to use it. As deepfakes and manipulated imagery increase, we've seen a counter-balance in businesses wanting to communicate with customers in a more authentic voice. This also means rooting out manipulated sentiment and trolling, so we see governments and brands contracting tech firms to reveal those spreading disinformation on social media. Could we get better at spotting fakes? In a world where four in ten teens can't tell the difference between fake and real news, rebuilding trust must be a business priority. But how AI technology has advanced makes it complex. It's now easy to create many synthetic images and videos using AI systems that analyze thousands of real images to learn how to make fakes. In the past, that workload would've needed many trained people. The FBI recently alerted that HR managers have spotted people using deepfakes to apply for remote jobs. But why? "Fake employment applicants may be hoping to access and hack the hiring company's IT systems," says Kaspersky senior data scientist Dmitry Anikin. "It's happening, but today, it's hard to do well. Making a high-quality deepfake needs much data and computing power, especially for online meetings. We should prepare for the threat to grow, because technology doesn't stand still." Fighting to maintain online credibility All business relies on trust. So how can business operate with the albatross of fakery hovering above? Luckily, companies like Truepic offer solutions. Truepic's software development kit (SDK) integrates with apps that rely on images, verifying media in real time. It checks image metadata – like when, where and on which device it was created – then cryptographically signs it, embedding validation in the file. This lets businesses on the back end know if content is real or synthetic. Truepic's clients include credit reporting company Equifax and car manufacturer Ford. When Ford pays out on a warranty claim, they need to know if car parts or damage photographs are legitimate or have been manipulated or pulled from the web. Brown says tagging tools like Truepic come at a time of brand and consumer frustration with social media companies doing little to stem disinformation. "We're in that sea change now. A consumer push for authenticity is starting to pressure social media platforms to take notice." But firms like Truepic aren't sitting on their hands waiting for Facebook, Twitter and TikTok to act differently. Truepic belongs to Adobe's Content Authenticity Initiative (CAI), a community of tech companies, media, non-government organizations (NGOs) and others promoting an open industry standard for proving content authenticity. This year, Adobe released a three-part open-source toolkit to help get trust-building technology into developers' hands faster. Rooting out social media trolls ZeroFox, Astroscreen and Cyabra use AI to identify disinformation disseminators and 'sock puppets' – fake profiles creating an illusion of wider support for (or opposition to) an idea or company. Cyabra calls itself a "social media search engine designed to track and measure the impact of fake accounts." Companies like Cyabra recognize social media platforms aren't doing this enough. Rafi Mendelsohn, vice president of marketing at Cyabra, says, "We look at the 'breadcrumbs' to find out if an account is real or not." Breadcrumbs might be, for example, a user posting 23 hours a day or multiple users Tweeting the same text. Brands using Cyabra include Warner Media, which faced a deluge of Twitter trolling when they announced the first female-led superhero film, Wonder Woman, in 2017. "We helped Warner recognize authentic enthusiasm for the film and what was false," says Mendelsohn. Cyabra works with Brazilian, Colombian and US state governments to track fake narratives leading up to major elections. Mendelsohn notes, "Human analysts have done this work for years, but we can do it at scale with AI." In the highly publicized battle between Elon Musk and Twitter, Musk contracted Cyabra to find out how many Twitter users were fake before confirming purchase – their analysis found about 11 percent. Towards a more authentic internet Those studying distrust online have found language is important in identifying disinformation. Victoria Rubin, associate professor of information and media studies at University of Western Ontario, has tracked disinformation spreaders for several years and noticed some hallmarks. "Those who lie don't often reference themselves in posts and prefer to use 'they' in language." She says fake news and election lies spread fast when people don't look critically at what they see. It's common – haven't we all reacted to a news item after just reading the headline? Disinformation isn't going anywhere soon, so to attack it requires greater vigilance. Those I interviewed said education and company responsibility must be part of confronting it. They agree we must teach people how bad actors use new technologies to fool us something's real when it's not. Platforms like Twitter and Facebook must also do as much as possible to rebuild trust, says Truepic's Brown. "Our big-picture goal is an internet with built-in authenticity infrastructure, so everyone has the right data to make decisions that affect their lives."
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries