应对量子威胁——网络安全团队的实用步骤.pdf

1、Preparing for thePractical Steps for Cybersecurity TeamsQuantum ThreatEMERGING THREATS SUMMIT 2025 Cryptographic InventoryCryptographic StrategyMitigate RisksContinuously ValidateQuantum Readiness ApproachEmbed Crypto Agility EverywhereThe post-quantum race begins with a boring inventory,not an algo

2、rithm.And it must begin now.By the end of 202570+national and sectoral regulators will have issued quantum readiness regulations.20232028crypto inventoryEarly 2030sCRQC arrival predictions convergingYou Cant Migrate What You Cant SeeEvery powered-on asset-from mainframes to smart bulbs-is a nesting

3、doll of crypto.Bootloaders hash firmware,OSs sign drivers,hypervisors seal virtual-machine images,databases encrypt rows,browsers sign session cookies,microservices stamp JWTs,Wi-Fi perform WPA3 handshakes,PLCs hold hard-wired keys in the firmware,SSD controllers self-encrypt every block,chips run e

4、mbedded ciphers,and TLS certificates wrap the whole thing.Crypto isnt a single authentication lock on the network edge;its a matryoshka of locks.In an average enterprise most undocumented.Practical Cryptographic InventoryInterview-Based“Discovery”“State-of-thepractice”approach today Self-reported,no

5、t discovered Stale the second its filed Misses the buried crypto layers Feels compliant,fixes nothing Big price tag,tiny insight Guarantees a costly rerun next yearPractical Cryptographic InventoryAutomated DiscoveryNo single cryptographic inventory tool solves all problemsRuntime API Callse.g.Sandb

6、oxAQDeep Binaries Inspectione.g.Infosec Global AgileSec AnalyticsKnown Cryptographic Librariese.g.Infosec Global AgileSec AnalyticsDatabase Scanninge.g.TBDNetwork Commse.g.SandboxAQ,PQ StationSource Codee.g.IBM Quantum Safe Explorer Based on experience,”real-life”auto-discovery achieved:35%-55%disco