KAUST professors Roberto Di Pietro and Marc Dacier co-authored a paper on cybersecurity strategies for Saudi Arabia and the Arab world, published in Communications of the ACM. The paper outlines a multidisciplinary framework for digitization aligned with Saudi Vision 2030, emphasizing global best practices, cultural adaptation, and capacity building. KAUST is positioned to advise on national cybersecurity policy in cooperation with the Saudi National Cybersecurity Authority. Why it matters: The framework addresses the critical need for advanced cybersecurity to support Saudi Arabia's rapidly growing digital economy and infrastructure.
Researchers at ETH Zurich have formalized models of the EMV payment protocol using the Tamarin model checker. They discovered flaws allowing attackers to bypass PIN requirements for high-value purchases on EMV cards like Mastercard and Visa. The team also collaborated with an EMV consortium member to verify the improved EMV Kernel C-8 protocol. Why it matters: This research highlights the importance of formal methods in identifying critical vulnerabilities in widely used payment systems, potentially impacting financial security for consumers in the GCC region and worldwide.
The Digital Science Research Center (DSRC) has appointed Prof. David Naccache to its Board of Advisors for the Digital Security Unit. Prof. Naccache's experience includes cryptography and security, with prior roles at École Normale Supérieure (ENS) and Gemplus. He will provide external research assessment and foster collaboration between TII, ENS, RUHL and ULux. Why it matters: The appointment strengthens DSRC's digital security research capabilities through Prof. Naccache's expertise and academic network.
The UAE has launched a new initiative named the "UAE Cyber Factory." This factory is designed to significantly boost the nation's digital defence capabilities. Its primary goal is to enhance digital sovereignty through advanced cybersecurity measures and infrastructure. Why it matters: This initiative represents a major strategic investment by the UAE to safeguard its digital assets and promote national technological self-reliance in a critical domain.
KAUST is addressing the cybersecurity skills gap in Saudi Arabia through programs like the Cybersecurity Specialization program in partnership with the National Cybersecurity Authority. KAUST alumnus Jameel Showail emphasizes the growing need for qualified Saudi cybersecurity professionals due to national security concerns and increasing digitization. He highlights that cybersecurity is crucial for protecting against AI-related threats and ensuring data integrity. Why it matters: As Saudi Arabia rapidly digitizes and integrates AI, KAUST's role in developing local cybersecurity talent becomes increasingly vital for safeguarding critical systems and data.